Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Red Hat Enterprise Linux Number Of NVD 1717 CRITICAL 141 HIGH 605 MEDIUM 817 LOW 153
URL https://www.redhat.com/technologies/linux-platforms/enterprise-linux
Explanation Full support is 5.5 years from release.
Maintenance support (security updates only) is for 3.5 years.
After that, extended support is available for a fee.
Tag
  • 商用ライセンス有り
  • Linux
Add Information URL
No Type Name URL
1 https://access.redhat.com/ja/articles/16476
2 https://access.redhat.com/support/policy/updates/errata
3 https://access.redhat.com/articles/3078
4 https://access.redhat.com/security
5 https://access.redhat.com/errata/#/?q=&p=1&sort=portal_publication_date%20desc&rows=10&portal_advisory_type=Security%20Advisory
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
801 Red Hat Enterprise Linux 10.2 10.2 May 19, 2026 May 20, 2025 8 24 18 4
802 Red Hat Enterprise Linux 9 9.7 Nov. 11, 2025 May 17, 2022 10 142 186 19
803 Red Hat Enterprise Linux 8 8.10 May 22, 2024 May 7, 2019 May 30, 2029 49 328 457 52
804 Red Hat Enterprise Linux 7 7.9 Sept. 29, 2020 Dec. 11, 2013 Aug. 6, 2020 June 30, 2024 97 284 282 48
805 Red Hat Enterprise Linux 6 6.10 June 19, 2018 Nov. 9, 2010 May 10, 2022 Nov. 30, 2020 June 30, 2024 77 176 212 56
806 Red Hat Enterprise Linux 5 5.11 Sept. 16, 2014 March 15, 2007 March 31, 2017 Nov. 30, 2020 24 59 89 40
807 Red Hat Enterprise Linux 4 4.5 Feb. 29, 2012 March 31, 2017 5 30 29 16
808 Red Hat Enterprise Linux 3 3.0 0 33 44 17
809 Red Hat Enterprise Linux 2 2.1 Update 7 April 28, 2005 0 32 37 6
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
801 7.5
5.0 		HIGH
Network 		Moodle before 2.2.2 has users' private files included in course backups CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2012-1156 cpe:2.3:o:redhat:enterprise_linux:6.0:* 2024-11-21 10:36
2019-11-15 		Show GitHub Exploit DB Packet Storm
802 7.5
5.0 		HIGH
Network 		Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to CWE-200
Information Exposure 		CVE-2012-1155 cpe:2.3:o:redhat:enterprise_linux:6.0:* 2024-11-21 10:36
2019-11-15 		Show GitHub Exploit DB Packet Storm
803 7.8
4.6 		HIGH
Local 		The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string. CWE-120
Classic Buffer Overflow 		CVE-2011-1145 cpe:2.3:o:redhat:enterprise_linux:6.0:*
cpe:2.3:o:redhat:enterprise_linux:5.0:*
cpe:2.3:o:redhat:enterprise_linux… 		2024-11-21 10:25
2019-11-14 		Show GitHub Exploit DB Packet Storm
804 8.8
6.5 		HIGH
Network 		In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session. CWE-269
 Improper Privilege Management 		CVE-2010-4664 cpe:2.3:o:redhat:enterprise_linux:6.0:* 2024-11-21 10:21
2019-11-14 		Show GitHub Exploit DB Packet Storm
805 7.8
4.6 		HIGH
Local 		udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2010-4661 cpe:2.3:o:redhat:enterprise_linux:6.0:* 2024-11-21 10:21
2019-11-14 		Show GitHub Exploit DB Packet Storm
806 7.5
5.0 		HIGH
Network 		PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output. CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2010-4657 cpe:2.3:o:redhat:enterprise_linux:6.0:*
cpe:2.3:o:redhat:enterprise_linux:5.0:* 		2024-11-21 10:21
2019-11-14 		Show GitHub Exploit DB Packet Storm
807 9.8
7.5 		CRITICAL
Network 		gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw CWE-20
 Improper Input Validation  		CVE-2011-2897 cpe:2.3:o:redhat:enterprise_linux:5.0:*
cpe:2.3:o:redhat:enterprise_linux:4.0:* 		2024-11-21 10:29
2019-11-12 		Show GitHub Exploit DB Packet Storm
808 6.5
3.5 		MEDIUM
Network 		A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to vie… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-14824 cpe:2.3:o:redhat:enterprise_linux:7.0:* 2024-11-21 13:27
2019-11-9 		Show GitHub Exploit DB Packet Storm
809 5.5
4.9 		MEDIUM
Local 		A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering s… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2019-18811 cpe:2.3:o:redhat:enterprise_linux:8.0:* 2024-11-21 13:33
2019-11-8 		Show GitHub Exploit DB Packet Storm
810 9.8
7.5 		CRITICAL
Network 		An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very l… CWE-190
 Integer Overflow or Wraparound 		CVE-2019-18805 cpe:2.3:o:redhat:enterprise_linux:7.0:* 2024-11-21 13:33
2019-11-7 		Show GitHub Exploit DB Packet Storm