Codeready Linux Builder EUS

DATE	CVE	VULNERABILITY TITLE	RISK
2024-02-07	CVE-2023-6356	NULL Pointer Dereference vulnerability in multiple products A flaw was found in the Linux kernel's NVMe driver. network low complexity linux redhat CWE-476	7.5
2024-02-07	CVE-2023-6535	NULL Pointer Dereference vulnerability in multiple products A flaw was found in the Linux kernel's NVMe driver. network low complexity linux redhat CWE-476	7.5
2024-02-07	CVE-2023-6536	NULL Pointer Dereference vulnerability in multiple products A flaw was found in the Linux kernel's NVMe driver. network low complexity linux redhat CWE-476	7.5
2023-12-10	CVE-2023-5868	A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. network low complexity postgresql redhat	4.3
2023-12-10	CVE-2023-5869	Integer Overflow or Wraparound vulnerability in multiple products A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. network low complexity postgresql redhat CWE-190	8.8
2023-12-10	CVE-2023-5870	A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. network high complexity postgresql redhat	4.4
2023-10-03	CVE-2023-4911	Out-of-bounds Write vulnerability in multiple products A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. local low complexity gnu fedoraproject redhat CWE-787	7.8
2023-09-18	CVE-2023-4527	Out-of-bounds Read vulnerability in multiple products A flaw was found in glibc. network high complexity gnu redhat fedoraproject netapp CWE-125	6.5
2023-09-18	CVE-2023-4806	Use After Free vulnerability in multiple products A flaw was found in glibc. network high complexity gnu redhat fedoraproject CWE-416	5.9
2023-03-06	CVE-2019-8720	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products A vulnerability was found in WebKit. network low complexity webkitgtk wpewebkit redhat CWE-119	8.8