Redhat

Enterprise Linux Server Tus

765 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2016-4020

  • EPSS 0.06%
  • Published 25.05.2016 15:59:04
  • Last modified 12.04.2025 10:46:40

The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).

5.5

CVE-2016-4578

Exploit
  • EPSS 0.2%
  • Published 23.05.2016 10:59:09
  • Last modified 12.04.2025 10:46:40

sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_t...

7.8

CVE-2016-1840

Exploit
  • EPSS 2.14%
  • Published 20.05.2016 10:59:54
  • Last modified 12.04.2025 10:46:40

Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause...

5.5

CVE-2016-1839

Exploit
  • EPSS 10.77%
  • Published 20.05.2016 10:59:53
  • Last modified 12.04.2025 10:46:40

The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a craft...

5.5

CVE-2016-1838

Exploit
  • EPSS 10.65%
  • Published 20.05.2016 10:59:52
  • Last modified 12.04.2025 10:46:40

The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-...

5.5

CVE-2016-1837

Exploit
  • EPSS 0.79%
  • Published 20.05.2016 10:59:51
  • Last modified 12.04.2025 10:46:40

Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remot...

5.5

CVE-2016-1836

  • EPSS 1.15%
  • Published 20.05.2016 10:59:50
  • Last modified 12.04.2025 10:46:40

Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service via ...

9.3

CVE-2016-1834

Exploit
  • EPSS 2.37%
  • Published 20.05.2016 10:59:48
  • Last modified 12.04.2025 10:46:40

Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of...

5.5

CVE-2016-1833

Exploit
  • EPSS 1.21%
  • Published 20.05.2016 10:59:47
  • Last modified 12.04.2025 10:46:40

The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafte...

9.8

CVE-2015-4643

Exploit
  • EPSS 10.69%
  • Published 16.05.2016 10:59:15
  • Last modified 12.04.2025 10:46:40

Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer ov...