Extra Packages FOR Enterprise Linux

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-16	CVE-2023-6395	The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges. network low complexity rpm-software-management fedoraproject critical	9.8
2024-01-16	CVE-2024-0232	Use After Free vulnerability in multiple products A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. local low complexity sqlite redhat fedoraproject CWE-416	5.5
2023-12-24	CVE-2023-51766	Insufficient Verification of Data Authenticity vulnerability in multiple products Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. network low complexity exim fedoraproject debian CWE-345	5.3
2023-12-21	CVE-2023-4255	Out-of-bounds Write vulnerability in multiple products An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. local low complexity tats fedoraproject CWE-787	5.5
2023-12-21	CVE-2023-4256	Double Free vulnerability in multiple products Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c. local low complexity broadcom fedoraproject CWE-415	5.5
2023-12-12	CVE-2023-5764	A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. local low complexity redhat fedoraproject	7.8
2023-11-19	CVE-2023-5341	Use After Free vulnerability in multiple products A heap use-after-free flaw was found in coders/bmp.c in ImageMagick. local low complexity imagemagick fedoraproject CWE-416	5.5
2023-11-09	CVE-2023-5543	When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. local low complexity moodle fedoraproject	3.3
2023-11-09	CVE-2023-5539	Code Injection vulnerability in multiple products A remote code execution risk was identified in the Lesson activity. network low complexity moodle fedoraproject CWE-94	8.8
2023-11-09	CVE-2023-5540	Code Injection vulnerability in multiple products A remote code execution risk was identified in the IMSCP activity. network low complexity moodle fedoraproject CWE-94	8.8