Enterprise linux tus

This hub aggregates every CVE we track for Enterprise linux tus, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Enterprise linux tus.

• CVE-2024-3183Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force8.1Jun 12, 2024
• CVE-2024-0229Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access7.8Feb 9, 2024
• CVE-2023-4806Glibc: potential use-after-free in getaddrinfo()5.9Sep 18, 2023
• CVE-2023-4527Glibc: stack read overflow in getaddrinfo in no-aaaa mode6.5Sep 18, 2023
• CVE-2021-20316A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of...6.8Aug 23, 2022
• CVE-2020-25717A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.8.1Feb 18, 2022
• CVE-2016-2124A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.5.9Feb 18, 2022
• CVE-2021-3672A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to ...5.6Nov 23, 2021
• CVE-2021-3570A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or po...8.8Jul 9, 2021
• CVE-2020-14301An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allo...6.5May 27, 2021
• CVE-2020-14355Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are af...6.6Oct 7, 2020
• CVE-2020-1045Microsoft ASP.NET Core Security Feature Bypass Vulnerability7.5Sep 11, 2020
• CVE-2020-2590Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: ...3.7Jan 15, 2020
• CVE-2019-14816There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash)...7.8Sep 20, 2019
• CVE-2019-9506Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation8.1Aug 14, 2019