Software Detail

Software Informaton Top

Operating Systems

Software Detail

Red Hat Enterprise Linux

Number Of NVD

1711

CRITICAL

141

HIGH

603

MEDIUM

814

LOW

152

URL	https://www.redhat.com/technologies/linux-platforms/enterprise-linux
Explanation	Full support is 5.5 years from release. Maintenance support (security updates only) is for 3.5 years. After that, extended support is available for a fee.
Tag	商用ライセンス有り Linux

Add Information URL

No	Type	Name	URL
1			https://access.redhat.com/ja/articles/16476
2			https://access.redhat.com/support/policy/updates/errata
3			https://access.redhat.com/articles/3078
4			https://access.redhat.com/security
5			https://access.redhat.com/errata/#/?q=&p=1&sort=portal_publication_date%20desc&rows=10&portal_advisory_type=Security%20Advisory

List Of Product [ Click to show release history and vulnerability information ]

No	Name	Latest Version	Release date	Initial release	Normal Support	Security Support Service Pack Support	Extended for a fee	Critical	High	Medium	Low
1421	Red Hat Enterprise Linux 10.2	10.2	May 19, 2026	May 20, 2025				8	24	16	3
1422	Red Hat Enterprise Linux 9	9.7	Nov. 11, 2025	May 17, 2022				10	140	183	18
1423	Red Hat Enterprise Linux 8	8.10	May 22, 2024	May 7, 2019	May 30, 2029			49	327	454	51
1424	Red Hat Enterprise Linux 7	7.9	Sept. 29, 2020	Dec. 11, 2013	Aug. 6, 2020	June 30, 2024		97	283	280	47
1425	Red Hat Enterprise Linux 6	6.10	June 19, 2018	Nov. 9, 2010	May 10, 2022	Nov. 30, 2020	June 30, 2024	77	176	212	56
1426	Red Hat Enterprise Linux 5	5.11	Sept. 16, 2014	March 15, 2007	March 31, 2017		Nov. 30, 2020	24	59	89	40
1427	Red Hat Enterprise Linux 4	4.5			Feb. 29, 2012		March 31, 2017	5	30	29	16
1428	Red Hat Enterprise Linux 3	3.0						0	33	44	17
1429	Red Hat Enterprise Linux 2	2.1 Update 7	April 28, 2005					0	32	37	6

NVD Vulnerability Information

CRITICAL
HIGH
MEDIUM
LOW

No	CVSS3 CVSS2	Level Attach Vector	Title	CWE	CVE	cpe23Uri	Update date Published date	Show Affected	Exploit PoC Search
1421	- 6.8	MEDIUM	Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and po…	CWE-787 Out-of-bounds Write	CVE-2013-1978	cpe:2.3:o:redhat:enterprise_linux:6.0:* cpe:2.3:o:redhat:enterprise_linux:5.0:*	2024-11-21 10:50 2013-12-13	Show	GitHub Exploit DB Packet Storm

1422	- 6.8	MEDIUM	Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of s…	CWE-190 Integer Overflow or Wraparound	CVE-2013-1913	cpe:2.3:o:redhat:enterprise_linux:6.0:* cpe:2.3:o:redhat:enterprise_linux:5.0:*	2024-11-21 10:50 2013-12-13	Show	GitHub Exploit DB Packet Storm

1423	- 5.5	MEDIUM	The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) before 6.2.0, does not properly enforce the method level restrictions for JAX-WS S…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-2133	cpe:2.3:o:redhat:enterprise_linux:6.0:* cpe:2.3:o:redhat:enterprise_linux:5:*	2024-11-21 10:51 2013-12-7	Show	GitHub Exploit DB Packet Storm

1424	- 6.3	MEDIUM	OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) ibdiagnet_ibis.log, (4) ibdiagnet.log, (5) ibdiagnet.lst, (…	CWE-59 Link Following	CVE-2013-2561	cpe:2.3:o:redhat:enterprise_linux:6.0:*	2024-11-21 10:51 2013-11-24	Show	GitHub Exploit DB Packet Storm

1425	- 1.9	LOW	The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the join command, when using the -i…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-0223	cpe:2.3:o:redhat:enterprise_linux:6.0:*	2024-11-21 10:47 2013-11-24	Show	GitHub Exploit DB Packet Storm

1426	- 2.1	LOW	The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the uniq command, which triggers a …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-0222	cpe:2.3:o:redhat:enterprise_linux:6.0:*	2024-11-21 10:47 2013-11-24	Show	GitHub Exploit DB Packet Storm

1427	- 4.3	MEDIUM	The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the sort command, when using the (1…	CWE-20 Improper Input Validation	CVE-2013-0221	cpe:2.3:o:redhat:enterprise_linux:6.0:*	2024-11-21 10:47 2013-11-24	Show	GitHub Exploit DB Packet Storm

1428	- 3.7	LOW	The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files a…	NVD-CWE-noinfo	CVE-2012-0787	cpe:2.3:o:redhat:enterprise_linux:6.0:*	2024-11-21 10:35 2013-11-24	Show	GitHub Exploit DB Packet Storm

1429	- 4.0	MEDIUM	389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list…	CWE-20 Improper Input Validation	CVE-2013-4485	cpe:2.3:o:redhat:enterprise_linux:6.0:*	2024-11-21 10:55 2013-11-23	Show	GitHub Exploit DB Packet Storm

1430	- 6.2	MEDIUM	Untrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when started using the initscript, allows local users to gain privileges via a Trojan horse .egg-info file in t…	NVD-CWE-Other	CVE-2013-4482	cpe:2.3:o:redhat:enterprise_linux:6.0:*	2024-11-21 10:55 2013-11-23	Show	GitHub Exploit DB Packet Storm