Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Red Hat Enterprise Linux Number Of NVD 1680 CRITICAL 135 HIGH 590 MEDIUM 803 LOW 151
URL https://www.redhat.com/technologies/linux-platforms/enterprise-linux
Explanation Full support is 5.5 years from release.
Maintenance support (security updates only) is for 3.5 years.
After that, extended support is available for a fee.
Tag
  • Linux
  • 商用ライセンス有り
Add Information URL
No Type Name URL
1 https://access.redhat.com/ja/articles/16476
2 https://access.redhat.com/support/policy/updates/errata
3 https://access.redhat.com/articles/3078
4 https://access.redhat.com/security
5 https://access.redhat.com/errata/#/?q=&p=1&sort=portal_publication_date%20desc&rows=10&portal_advisory_type=Security%20Advisory
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
1081 Red Hat Enterprise Linux 9 9.7 Nov. 11, 2025 May 17, 2022 4 127 172 17
1082 Red Hat Enterprise Linux 8 8.10 May 22, 2024 May 7, 2019 May 30, 2029 43 314 444 50
1083 Red Hat Enterprise Linux 7 7.9 Sept. 29, 2020 Dec. 11, 2013 Aug. 6, 2020 June 30, 2024 91 270 270 46
1084 Red Hat Enterprise Linux 6 6.10 June 19, 2018 Nov. 9, 2010 May 10, 2022 Nov. 30, 2020 June 30, 2024 72 169 210 55
1085 Red Hat Enterprise Linux 5 5.11 Sept. 16, 2014 March 15, 2007 March 31, 2017 Nov. 30, 2020 24 59 89 40
1086 Red Hat Enterprise Linux 4 4.5 Feb. 29, 2012 March 31, 2017 5 30 29 16
1087 Red Hat Enterprise Linux 3 3.0 0 33 44 17
1088 Red Hat Enterprise Linux 2 2.1 Update 7 April 28, 2005 0 32 37 6
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
1081 8.8
6.5 		HIGH
Network 		A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execut… - CVE-2018-10926 cpe:2.3:o:redhat:enterprise_linux:7.0:*
cpe:2.3:o:redhat:enterprise_linux:6.0:* 		2024-11-21 12:42
2018-09-5 		Show GitHub Exploit DB Packet Storm
1082 8.1
6.8 		HIGH
Network 		A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and not check the host name if a host name verifier was not provided to the driver. This could… CWE-297
 Improper Validation of Certificate with Host Mismatch 		CVE-2018-10936 cpe:2.3:o:redhat:enterprise_linux:7.0:*
cpe:2.3:o:redhat:enterprise_linux:6.0:* 		2024-11-21 12:42
2018-08-30 		Show GitHub Exploit DB Packet Storm
1083 7.5
5.0 		HIGH
Network 		A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the serve… CWE-252
 Unchecked Return Value 		CVE-2018-14622 cpe:2.3:o:redhat:enterprise_linux:7.0:* 2024-11-21 12:49
2018-08-30 		Show GitHub Exploit DB Packet Storm
1084 9.8
10.0 		CRITICAL
Network 		mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that… CWE-94
Code Injection 		CVE-2011-2767 cpe:2.3:o:redhat:enterprise_linux:7.6:*
cpe:2.3:o:redhat:enterprise_linux:7.5:*
cpe:2.3:o:redhat:enterprise_linux… 		2024-11-21 10:28
2018-08-27 		Show GitHub Exploit DB Packet Storm
1085 5.5
2.1 		MEDIUM
Local 		libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing. CWE-200
Information Exposure 		CVE-2015-5160 cpe:2.3:o:redhat:enterprise_linux:6.0:*
cpe:2.3:o:redhat:enterprise_linux:5:* 		2024-11-21 11:32
2018-08-21 		Show GitHub Exploit DB Packet Storm
1086 5.5
4.9 		MEDIUM
Local 		A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operati… - CVE-2018-10883 cpe:2.3:o:redhat:enterprise_linux:7.0:* 2024-11-21 12:42
2018-07-31 		Show GitHub Exploit DB Packet Storm
1087 7.8
4.6 		HIGH
Local 		A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug except… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2017-7518 cpe:2.3:o:redhat:enterprise_linux:7.0:* 2024-11-21 12:32
2018-07-31 		Show GitHub Exploit DB Packet Storm
1088 9.8
7.5 		CRITICAL
Network 		A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be li… CWE-787
 Out-of-bounds Write 		CVE-2017-15118 cpe:2.3:o:redhat:enterprise_linux:7.0:* 2024-11-21 12:14
2018-07-28 		Show GitHub Exploit DB Packet Storm
1089 5.5
4.9 		MEDIUM
Local 		A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty (null) write to this file can crash the system by causing the system to … - CVE-2017-2618 cpe:2.3:o:redhat:enterprise_linux:7.0:* 2024-11-21 12:23
2018-07-28 		Show GitHub Exploit DB Packet Storm
1090 5.5
4.9 		MEDIUM
Local 		A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted … - CVE-2018-10882 cpe:2.3:o:redhat:enterprise_linux:7.0:* 2024-11-21 12:42
2018-07-28 		Show GitHub Exploit DB Packet Storm