Latest redhat enterprise linux atomic host Vulnerabilities

● CVE-2020-15707

Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included...

redhat/fwupdate<0:12-6.el7_8

redhat/grub2<1:2.02-0.86.el7_8

redhat/shim<0:15-7.el7_9

redhat/shim-signed<0:15-7.el7_8

redhat/grub2<1:2.02-0.86.el7

redhat/shim<0:15-8.el7

and 63 more

● CVE-2020-15706

GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing...

redhat/fwupdate<0:12-6.el7_8

redhat/grub2<1:2.02-0.86.el7_8

redhat/shim<0:15-7.el7_9

redhat/shim-signed<0:15-7.el7_8

redhat/grub2<1:2.02-0.86.el7_2

redhat/shim<0:15-8.el7

and 65 more

● CVE-2020-15705

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported direct...

redhat/fwupdate<0:12-6.el7_8

redhat/grub2<1:2.02-0.86.el7_8

redhat/shim<0:15-7.el7_9

redhat/shim-signed<0:15-7.el7_8

redhat/grub2<1:2.02-0.86.el7_2

redhat/shim<0:15-8.el7

and 64 more

● CVE-2019-11478

An excessive resource consumption flaw was found in the way the Linux kernel's networking subsystem processed TCP Selective Acknowledgment (SACK) segments. While processing SACK segments, the Linux ke...

redhat/kernel<0:2.6.32-754.15.3.el6

redhat/kernel<0:2.6.32-431.95.3.el6

redhat/kernel<0:2.6.32-504.79.3.el6

redhat/kernel-rt<0:3.10.0-957.21.3.rt56.935.el7

redhat/kernel<0:3.10.0-957.21.3.el7

redhat/kernel-alt<0:4.14.0-115.8.2.el7a

and 103 more

● CVE-2019-11477

An integer overflow flaw was found in the way the Linux kernel's networking subsystem processed TCP Selective Acknowledgment (SACK) segments. While processing SACK segments, the Linux kernel's socket ...

redhat/kernel<0:2.6.32-754.15.3.el6

redhat/kernel<0:2.6.32-431.95.3.el6

redhat/kernel<0:2.6.32-504.79.3.el6

redhat/kernel-rt<0:3.10.0-957.21.3.rt56.935.el7

redhat/kernel<0:3.10.0-957.21.3.el7

redhat/kernel-alt<0:4.14.0-115.8.2.el7a

and 104 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.