Enterprise Linux

DATE	CVE	VULNERABILITY TITLE	RISK
2024-04-16	CVE-2022-24805	Classic Buffer Overflow vulnerability in multiple products net-snmp provides various tools relating to the Simple Network Management Protocol. network low complexity net-snmp fedoraproject debian redhat CWE-120	8.8
2024-04-16	CVE-2022-24806	net-snmp provides various tools relating to the Simple Network Management Protocol. network high complexity net-snmp fedoraproject debian redhat	5.3
2024-04-16	CVE-2022-24807	Classic Buffer Overflow vulnerability in multiple products net-snmp provides various tools relating to the Simple Network Management Protocol. network low complexity net-snmp fedoraproject debian redhat CWE-120	6.5
2024-04-16	CVE-2022-24808	NULL Pointer Dereference vulnerability in multiple products net-snmp provides various tools relating to the Simple Network Management Protocol. network low complexity net-snmp fedoraproject debian redhat CWE-476	6.5
2024-04-16	CVE-2022-24809	NULL Pointer Dereference vulnerability in multiple products net-snmp provides various tools relating to the Simple Network Management Protocol. network low complexity net-snmp fedoraproject debian redhat CWE-476	6.5
2024-04-10	CVE-2024-3567	A flaw was found in QEMU. local low complexity qemu redhat	5.5
2024-02-22	CVE-2023-52160	Improper Authentication vulnerability in multiple products The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. network low complexity debian redhat fedoraproject w1-fi CWE-287	6.5
2024-02-15	CVE-2024-1488	A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. local low complexity fedoraproject redhat	7.3
2024-02-14	CVE-2023-50387	Allocation of Resources Without Limits or Throttling vulnerability in multiple products Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. network low complexity redhat microsoft fedoraproject thekelleys nic powerdns isc nlnetlabs CWE-770	7.5
2024-02-12	CVE-2024-1454	The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols or modifies cards. high complexity opensc-project redhat fedoraproject	3.4