Vulnerabilities > Redhat > Enterprise Linux EUS
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-07-01 | CVE-2024-6387 | Race Condition vulnerability in multiple products A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). | 8.1 |
| 2024-06-12 | CVE-2024-3183 | Use of Password Hash With Insufficient Computational Effort vulnerability in Redhat products A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key. | 8.1 |
| 2024-06-06 | CVE-2024-3049 | Insufficient Verification of Data Authenticity vulnerability in multiple products A flaw was found in Booth, a cluster ticket manager. | 5.9 |
| 2024-02-09 | CVE-2024-0229 | Out-of-bounds Write vulnerability in multiple products An out-of-bounds memory access flaw was found in the X.Org server. | 7.8 |
| 2024-02-07 | CVE-2023-6356 | NULL Pointer Dereference vulnerability in multiple products A flaw was found in the Linux kernel's NVMe driver. | 7.5 |
| 2024-02-07 | CVE-2023-6535 | NULL Pointer Dereference vulnerability in multiple products A flaw was found in the Linux kernel's NVMe driver. | 7.5 |
| 2024-02-07 | CVE-2023-6536 | NULL Pointer Dereference vulnerability in multiple products A flaw was found in the Linux kernel's NVMe driver. | 7.5 |
| 2024-01-31 | CVE-2023-5992 | Information Exposure Through Discrepancy vulnerability in multiple products A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. | 5.9 |
| 2024-01-10 | CVE-2023-5455 | Cross-Site Request Forgery (CSRF) vulnerability in multiple products A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. | 6.5 |
| 2023-12-13 | CVE-2023-6377 | Out-of-bounds Read vulnerability in multiple products A flaw was found in xorg-server. | 7.8 |