Red Hat Enterprise Linux 7.7 Advanced Update Support vulnerabilities
6 known vulnerabilities in Red Hat Enterprise Linux 7.7 Advanced Update Support from Red Hat. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
xwayland: Integer Overflow or Wraparound
A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to allocate.
- 7.3 High severity
xwayland: Integer Overflow or Wraparound
A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length, which allows a client to bypass length checks.
- 7.3 High severity
xwayland: Integer Overflow or Wraparound
A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.
- 7.8 High severity
Red Hat Enterprise Linux 7.7 Advanced Update…: Improper Control of Generation of Code
A flaw was found in the libreswan client plugin for NetworkManager (NetkworkManager-libreswan), where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails
- 7.5 High severity
Red Hat Enterprise Linux 6 Extended Lifecycle…: Buffer Copy without Checking Size of Input
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
- 7.8 High severity
Red Hat Enterprise Linux 7: Out-of-bounds Write
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer ou