enterprise_linux_eus
RedHat- Software type
- —
- Catalog vulnerabilities
- 774
Severity across 1 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 1 analyzed records
A short verification protects source data and prevents automated AI requests.
As of 09/11/2026, within CyStack's analyzed data, enterprise_linux_eus has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of enterprise_linux_eus and determine which vulnerabilities affect that version.
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-31431crypto: algif_aead - Revert to operating out-of-place | Exploitation statusKEV | FixYes | Published04/22/2026 | SeverityHigh |
CVE-2026-34486Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor | Exploitation statusKEV | FixNot confirmed | Published04/09/2026 | SeverityHigh |
CVE-2026-21710CVE-2026-21710 | Exploitation statusNot known exploited | FixYes | Published03/30/2026 | SeverityHigh |
CVE-2026-1709Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication | Exploitation statusNot known exploited | FixNot confirmed | Published02/06/2026 | SeverityCritical |
CVE-2025-62230Xorg: xwayland: use-after-free in xkb client resource removal | Exploitation statusNot known exploited | FixYes | Published10/30/2025 | SeverityHigh |
CVE-2025-62231Xorg: xmayland: value overflow in xkbsetcompatmap() | Exploitation statusNot known exploited | FixYes | Published10/30/2025 | SeverityHigh |
CVE-2025-31277CVE-2025-31277 | Exploitation statusKEV | FixYes | Published07/29/2025 | SeverityHigh |
CVE-2025-6021Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 | Exploitation statusPublic exploit | FixYes | Published06/12/2025 | SeverityHigh |
CVE-2025-3155Yelp: arbitrary file read | Exploitation statusPublic exploit | FixYes | Published04/03/2025 | SeverityHigh |
CVE-2025-2784Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content | Exploitation statusPublic exploit | FixYes | Published04/03/2025 | SeverityHigh |
CVE-2025-1756MongoDB Shell may be susceptible to local privilege escalation in Windows | Exploitation statusNot known exploited | FixYes | Published02/27/2025 | SeverityHigh |
CVE-2024-12087Rsync: path traversal vulnerability in rsync | Exploitation statusPublic exploit | FixYes | Published01/14/2025 | SeverityMedium |
CVE-2024-12088Rsync: --safe-links option bypass leads to path traversal | Exploitation statusPublic exploit | FixYes | Published01/14/2025 | SeverityMedium |
CVE-2024-12085Rsync: info leak via uninitialized stack contents | Exploitation statusPublic exploit | FixYes | Published01/14/2025 | SeverityHigh |
CVE-2024-9676Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) | Exploitation statusNot known exploited | FixYes | Published10/15/2024 | SeverityMedium |
CVE-2024-9675Buildah: buildah allows arbitrary directory mount | Exploitation statusNot known exploited | FixYes | Published10/09/2024 | SeverityHigh |
CVE-2024-6387Openssh: regresshion - race condition in ssh allows rce/dos | Exploitation statusPublic exploit | FixYes | Published07/01/2024 | SeverityHigh |
CVE-2024-3183Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force | Exploitation statusNot known exploited | FixNot confirmed | Published06/12/2024 | SeverityHigh |
CVE-2024-3049Booth: specially crafted hash can lead to invalid hmac being accepted by booth server | Exploitation statusNot known exploited | FixNot confirmed | Published06/06/2024 | SeverityMedium |
CVE-2023-3758Sssd: race condition during authorization leads to gpo policies functioning inconsistently | Exploitation statusNot known exploited | FixYes | Published04/18/2024 | SeverityHigh |
CVE-2022-24809net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference | Exploitation statusNot known exploited | FixYes | Published04/16/2024 | SeverityMedium |
CVE-2022-24808net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference | Exploitation statusNot known exploited | FixYes | Published04/16/2024 | SeverityMedium |
CVE-2022-24807net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access | Exploitation statusNot known exploited | FixYes | Published04/16/2024 | SeverityMedium |
CVE-2022-24806net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously | Exploitation statusNot known exploited | FixYes | Published04/16/2024 | SeverityMedium |
CVE-2022-24805net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. | Exploitation statusNot known exploited | FixYes | Published04/16/2024 | SeverityMedium |
CVE-2024-1488Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation | Exploitation statusNot known exploited | FixNot confirmed | Published02/15/2024 | SeverityHigh |
CVE-2024-1062389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) | Exploitation statusNot known exploited | FixYes | Published02/12/2024 | SeverityMedium |
CVE-2024-0229Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access | Exploitation statusNot known exploited | FixYes | Published02/09/2024 | SeverityHigh |
CVE-2023-6536Kernel: null pointer dereference in __nvmet_req_complete | Exploitation statusNot known exploited | FixNot confirmed | Published02/07/2024 | SeverityMedium |
CVE-2023-6535Kernel: null pointer dereference in nvmet_tcp_execute_request | Exploitation statusNot known exploited | FixNot confirmed | Published02/07/2024 | SeverityMedium |
CVE-2023-6356Kernel: null pointer dereference in nvmet_tcp_build_iovec | Exploitation statusNot known exploited | FixNot confirmed | Published02/07/2024 | SeverityMedium |
CVE-2023-5992Opensc: side-channel leaks while stripping encryption pkcs#1 padding | Exploitation statusNot known exploited | FixNot confirmed | Published01/31/2024 | SeverityMedium |
CVE-2023-5455Ipa: invalid csrf protection | Exploitation statusNot known exploited | FixNot confirmed | Published01/10/2024 | SeverityMedium |
CVE-2023-47038Perl: write past buffer end via illegal user-defined unicode property | Exploitation statusNot known exploited | FixYes | Published12/18/2023 | SeverityHigh |
CVE-2023-6478Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty | Exploitation statusNot known exploited | FixNot confirmed | Published12/13/2023 | SeverityHigh |
CVE-2023-6377Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions | Exploitation statusNot known exploited | FixNot confirmed | Published12/13/2023 | SeverityHigh |
CVE-2023-5870Postgresql: role pg_signal_backend can signal certain superuser processes. | Exploitation statusNot known exploited | FixNot confirmed | Published12/10/2023 | SeverityLow |
CVE-2023-5868Postgresql: memory disclosure in aggregate function calls | Exploitation statusNot known exploited | FixNot confirmed | Published12/10/2023 | SeverityMedium |
CVE-2023-5869Postgresql: buffer overrun from integer overflow in array modification | Exploitation statusNot confirmed | FixNot confirmed | Published12/10/2023 | SeverityHigh |
CVE-2023-6606Kernel: out-of-bounds read vulnerability in smbcalcsize | Exploitation statusPublic exploit | FixNot confirmed | Published12/08/2023 | SeverityHigh |
CVE-2023-42669Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc | Exploitation statusNot known exploited | FixYes | Published11/06/2023 | SeverityMedium |
CVE-2023-3961Samba: smbd allows client access to unix domain sockets on the file system as root | Exploitation statusNot confirmed | FixNot confirmed | Published11/03/2023 | SeverityCritical |
CVE-2023-1476Kpatch: mm/mremap.c: incomplete fix for cve-2022-41222 | Exploitation statusNot known exploited | FixNot confirmed | Published11/03/2023 | SeverityHigh |
CVE-2023-46847Squid: denial of service in http digest authentication | Exploitation statusNot confirmed | FixYes | Published11/03/2023 | SeverityHigh |
CVE-2023-46848Squid: denial of service in ftp | Exploitation statusNot confirmed | FixYes | Published11/03/2023 | SeverityHigh |
CVE-2023-4091Samba: smb clients can truncate files with read-only permissions | Exploitation statusNot known exploited | FixNot confirmed | Published11/03/2023 | SeverityMedium |
CVE-2023-46846Squid: request/response smuggling in http/1.1 and icap | Exploitation statusNot known exploited | FixYes | Published11/03/2023 | SeverityCritical |
CVE-2023-3972Insights-client: unsafe handling of temporary files and directories | Exploitation statusNot known exploited | FixNot confirmed | Published11/01/2023 | SeverityHigh |
CVE-2023-5633Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling | Exploitation statusNot known exploited | FixNot confirmed | Published10/23/2023 | SeverityHigh |
CVE-2023-4911Glibc: buffer overflow in ld.so leading to privilege escalation | Exploitation statusKEV | FixYes | Published10/03/2023 | SeverityHigh |
CVE-2023-5157Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6 | Exploitation statusNot known exploited | FixNot confirmed | Published09/26/2023 | SeverityHigh |
CVE-2023-4806Glibc: potential use-after-free in getaddrinfo() | Exploitation statusNot known exploited | FixNot confirmed | Published09/18/2023 | SeverityMedium |
CVE-2023-4527Glibc: stack read overflow in getaddrinfo in no-aaaa mode | Exploitation statusNot known exploited | FixNot confirmed | Published09/18/2023 | SeverityMedium |
CVE-2023-4813Glibc: potential use-after-free in gaih_inet() | Exploitation statusNot confirmed | FixNot confirmed | Published09/12/2023 | SeverityMedium |
CVE-2023-38201Keylime: challenge-response protocol bypass during agent registration | Exploitation statusNot confirmed | FixNot confirmed | Published08/25/2023 | SeverityMedium |
CVE-2023-3899Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration | Exploitation statusNot known exploited | FixNot confirmed | Published08/23/2023 | SeverityHigh |
CVE-2023-4147Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free | Exploitation statusPublic exploit | FixNot confirmed | Published08/07/2023 | SeverityHigh |
CVE-2023-38200Keylime: registrar is subject to a dos against ssl connections | Exploitation statusNot known exploited | FixNot confirmed | Published07/24/2023 | SeverityHigh |
CVE-2023-2295CVE-2023-2295 | Exploitation statusNot known exploited | FixNot confirmed | Published05/17/2023 | SeverityHigh |
CVE-2023-2491CVE-2023-2491 | Exploitation statusNot known exploited | FixNot confirmed | Published05/17/2023 | SeverityHigh |
CVE-2023-2203CVE-2023-2203 | Exploitation statusNot known exploited | FixNot confirmed | Published05/17/2023 | SeverityHigh |
CVE-2023-0494CVE-2023-0494 | Exploitation statusNot known exploited | FixNot confirmed | Published03/27/2023 | SeverityHigh |
CVE-2019-8720CVE-2019-8720 | Exploitation statusKEV | FixNot confirmed | Published03/06/2023 | SeverityHigh |
CVE-2022-2601CVE-2022-2601 | Exploitation statusNot known exploited | FixNot confirmed | Published12/14/2022 | SeverityHigh |
CVE-2021-20316CVE-2021-20316 | Exploitation statusNot confirmed | FixNot confirmed | Published08/23/2022 | SeverityUnknown |
CVE-2022-1227CVE-2022-1227 | Exploitation statusNot confirmed | FixNot confirmed | Published04/29/2022 | SeverityUnknown |
CVE-2022-27649CVE-2022-27649 | Exploitation statusNot confirmed | FixNot confirmed | Published04/04/2022 | SeverityUnknown |
CVE-2022-0435CVE-2022-0435 | Exploitation statusNot confirmed | FixNot confirmed | Published03/25/2022 | SeverityUnknown |
CVE-2022-0330CVE-2022-0330 | Exploitation statusNot confirmed | FixNot confirmed | Published03/25/2022 | SeverityUnknown |
CVE-2021-3733CVE-2021-3733 | Exploitation statusNot confirmed | FixNot confirmed | Published03/07/2022 | SeverityUnknown |
CVE-2021-3744CVE-2021-3744 | Exploitation statusNot confirmed | FixNot confirmed | Published03/04/2022 | SeverityUnknown |
CVE-2021-3609CVE-2021-3609 | Exploitation statusNot confirmed | FixNot confirmed | Published03/03/2022 | SeverityUnknown |
CVE-2022-0492CVE-2022-0492 | Exploitation statusKEV | FixNot confirmed | Published03/03/2022 | SeverityHigh |
CVE-2021-44142CVE-2021-44142 | Exploitation statusNot known exploited | FixYes | Published02/21/2022 | SeverityHigh |
CVE-2020-25719CVE-2020-25719 | Exploitation statusNot confirmed | FixNot confirmed | Published02/18/2022 | SeverityUnknown |
CVE-2020-25717CVE-2020-25717 | Exploitation statusNot confirmed | FixNot confirmed | Published02/18/2022 | SeverityUnknown |
CVE-2016-2124CVE-2016-2124 | Exploitation statusNot confirmed | FixNot confirmed | Published02/18/2022 | SeverityUnknown |
CVE-2021-3551CVE-2021-3551 | Exploitation statusNot confirmed | FixNot confirmed | Published02/16/2022 | SeverityUnknown |
CVE-2021-4034CVE-2021-4034 | Exploitation statusKEV | FixNot confirmed | Published01/28/2022 | SeverityHigh |
CVE-2021-3621CVE-2021-3621 | Exploitation statusNot confirmed | FixNot confirmed | Published12/23/2021 | SeverityUnknown |
CVE-2021-3672CVE-2021-3672 | Exploitation statusNot known exploited | FixNot confirmed | Published11/23/2021 | SeverityUnknown |
CVE-2021-40438mod_proxy SSRF | Exploitation statusKEV | FixNot confirmed | Published09/16/2021 | SeverityCritical |
CVE-2021-3570CVE-2021-3570 | Exploitation statusNot confirmed | FixNot confirmed | Published07/09/2021 | SeverityUnknown |
CVE-2020-14355CVE-2020-14355 | Exploitation statusNot confirmed | FixNot confirmed | Published10/07/2020 | SeverityUnknown |
CVE-2020-1045Microsoft ASP.NET Core Security Feature Bypass Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/11/2020 | SeverityHigh |
CVE-2020-9490CVE-2020-9490 | Exploitation statusNot confirmed | FixNot confirmed | Published08/07/2020 | SeverityUnknown |
CVE-2020-14311CVE-2020-14311 | Exploitation statusNot confirmed | FixNot confirmed | Published07/31/2020 | SeverityMedium |
CVE-2020-14310CVE-2020-14310 | Exploitation statusNot confirmed | FixNot confirmed | Published07/31/2020 | SeverityMedium |
CVE-2014-0148CVE-2014-0148 | Exploitation statusNot confirmed | FixNot confirmed | Published02/11/2020 | SeverityUnknown |
CVE-2014-0147CVE-2014-0147 | Exploitation statusNot confirmed | FixNot confirmed | Published02/11/2020 | SeverityUnknown |
CVE-2014-0144CVE-2014-0144 | Exploitation statusNot confirmed | FixNot confirmed | Published02/11/2020 | SeverityUnknown |
CVE-2019-15606CVE-2019-15606 | Exploitation statusNot confirmed | FixYes | Published02/07/2020 | SeverityUnknown |
CVE-2019-15604CVE-2019-15604 | Exploitation statusNot confirmed | FixYes | Published02/07/2020 | SeverityUnknown |
CVE-2019-15605CVE-2019-15605 | Exploitation statusNot confirmed | FixYes | Published02/07/2020 | SeverityUnknown |
CVE-2015-1931CVE-2015-1931 | Exploitation statusNot confirmed | FixNot confirmed | Published01/23/2020 | SeverityUnknown |
CVE-2019-19339CVE-2019-19339 | Exploitation statusNot confirmed | FixNot confirmed | Published01/17/2020 | SeverityMedium |
CVE-2020-2659CVE-2020-2659 | Exploitation statusNot known exploited | FixNot confirmed | Published01/15/2020 | SeverityLow |
CVE-2020-2654CVE-2020-2654 | Exploitation statusNot known exploited | FixNot confirmed | Published01/15/2020 | SeverityLow |
CVE-2020-2604CVE-2020-2604 | Exploitation statusNot known exploited | FixNot confirmed | Published01/15/2020 | SeverityHigh |
CVE-2020-2593CVE-2020-2593 | Exploitation statusNot known exploited | FixNot confirmed | Published01/15/2020 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan