Software Detail

Software Informaton Top

Operating Systems

Software Detail

Red Hat Enterprise Linux

Number Of NVD

1711

CRITICAL

141

HIGH

603

MEDIUM

814

LOW

152

URL	https://www.redhat.com/technologies/linux-platforms/enterprise-linux
Explanation	Full support is 5.5 years from release. Maintenance support (security updates only) is for 3.5 years. After that, extended support is available for a fee.
Tag	商用ライセンス有り Linux

Add Information URL

No	Type	Name	URL
1			https://access.redhat.com/ja/articles/16476
2			https://access.redhat.com/support/policy/updates/errata
3			https://access.redhat.com/articles/3078
4			https://access.redhat.com/security
5			https://access.redhat.com/errata/#/?q=&p=1&sort=portal_publication_date%20desc&rows=10&portal_advisory_type=Security%20Advisory

List Of Product [ Click to show release history and vulnerability information ]

No	Name	Latest Version	Release date	Initial release	Normal Support	Security Support Service Pack Support	Extended for a fee	Critical	High	Medium	Low
1351	Red Hat Enterprise Linux 10.2	10.2	May 19, 2026	May 20, 2025				8	24	16	3
1352	Red Hat Enterprise Linux 9	9.7	Nov. 11, 2025	May 17, 2022				10	140	183	18
1353	Red Hat Enterprise Linux 8	8.10	May 22, 2024	May 7, 2019	May 30, 2029			49	327	454	51
1354	Red Hat Enterprise Linux 7	7.9	Sept. 29, 2020	Dec. 11, 2013	Aug. 6, 2020	June 30, 2024		97	283	280	47
1355	Red Hat Enterprise Linux 6	6.10	June 19, 2018	Nov. 9, 2010	May 10, 2022	Nov. 30, 2020	June 30, 2024	77	176	212	56
1356	Red Hat Enterprise Linux 5	5.11	Sept. 16, 2014	March 15, 2007	March 31, 2017		Nov. 30, 2020	24	59	89	40
1357	Red Hat Enterprise Linux 4	4.5			Feb. 29, 2012		March 31, 2017	5	30	29	16
1358	Red Hat Enterprise Linux 3	3.0						0	33	44	17
1359	Red Hat Enterprise Linux 2	2.1 Update 7	April 28, 2005					0	32	37	6

NVD Vulnerability Information

CRITICAL
HIGH
MEDIUM
LOW

No	CVSS3 CVSS2	Level Attach Vector	Title	CWE	CVE	cpe23Uri	or less	Update date Published date	Show Affected	Exploit PoC Search
1351	- 5.0	MEDIUM	The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.	CWE-399 Resource Management Errors	CVE-2015-1819	cpe:2.3:o:redhat:enterprise_linux::	5.0	2024-11-21 11:26 2015-08-15	Show	GitHub Exploit DB Packet Storm

1352	- 4.9	MEDIUM	The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges …	NVD-CWE-Other	CVE-2015-3636	cpe:2.3:o:redhat:enterprise_linux:6.0:*		2024-11-21 11:29 2015-08-6	Show	GitHub Exploit DB Packet Storm

1353	- 4.0	MEDIUM	Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability …	NVD-CWE-noinfo	CVE-2015-4756	cpe:2.3:o:redhat:enterprise_linux:7.0:* cpe:2.3:o:redhat:enterprise_linux:6.0:*		2024-11-21 11:31 2015-07-16	Show	GitHub Exploit DB Packet Storm

1354	- 4.3	MEDIUM	Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in openssl-1.0.1e-25.el7 in Red Hat Enterprise Linux (RHEL) 7 an…	CWE-189 CWE-362 Numeric Errors Race Condition	CVE-2015-3216	cpe:2.3:o:redhat:enterprise_linux:7.0:*		2024-11-21 11:28 2015-07-7	Show	GitHub Exploit DB Packet Storm

1355	- 5.0	MEDIUM	RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests t…	CWE-254 7PK - Security Features	CVE-2015-3900	cpe:2.3:o:redhat:enterprise_linux:7.0:* cpe:2.3:o:redhat:enterprise_linux:6.0:*		2024-11-21 11:30 2015-06-24	Show	GitHub Exploit DB Packet Storm

1356	- 7.5	HIGH	The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character, which might allow remote attackers to bypass i…	CWE-19 Data Processing Errors	CVE-2015-4026	cpe:2.3:o:redhat:enterprise_linux:7.0:* cpe:2.3:o:redhat:enterprise_linux:6.0:*		2024-11-21 11:30 2015-06-10	Show	GitHub Exploit DB Packet Storm

1357	- 7.5	HIGH	PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to bypass intended extensio…	CWE-19 Data Processing Errors	CVE-2015-4025	cpe:2.3:o:redhat:enterprise_linux:7.0:* cpe:2.3:o:redhat:enterprise_linux:6.0:*		2024-11-21 11:30 2015-06-10	Show	GitHub Exploit DB Packet Storm

1358	- 5.0	MEDIUM	Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a de…	CWE-399 Resource Management Errors	CVE-2015-4024	cpe:2.3:o:redhat:enterprise_linux:7.0:* cpe:2.3:o:redhat:enterprise_linux:6.0:*		2024-11-21 11:30 2015-06-10	Show	GitHub Exploit DB Packet Storm

1359	- 7.5	HIGH	Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to…	CWE-189 Numeric Errors	CVE-2015-4022	cpe:2.3:o:redhat:enterprise_linux:7.0:* cpe:2.3:o:redhat:enterprise_linux:6.0:*		2024-11-21 11:30 2015-06-10	Show	GitHub Exploit DB Packet Storm

1360	- 5.0	MEDIUM	The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 cha…	CWE-189 Numeric Errors	CVE-2015-4021	cpe:2.3:o:redhat:enterprise_linux:7.0:* cpe:2.3:o:redhat:enterprise_linux:6.0:*		2024-11-21 11:30 2015-06-10	Show	GitHub Exploit DB Packet Storm