Red Hat Enterprise Linux Server 9.0 on ARM64

CPE Details

Red Hat Enterprise Linux Server 9.0 on ARM64
9.0
2024-01-16
18h04 +00:00
2024-01-16
18h04 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:o:redhat:enterprise_linux_server:9.0:*:*:*:*:*:arm64:*

Informations

Vendor

redhat

Product

enterprise_linux_server

Version

9.0

Target Hardware

arm64

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-5455 2024-01-10 12h33 +00:00 A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During community penetration testing it was found that for certain HTTP end-points FreeIPA does not ensure CSRF protection. Due to implementation details one cannot use this flaw for reflection of a cookie representing already logged-in user. An attacker would always have to go through a new authentication attempt.
6.5
Medium
CVE-2023-0179 2023-03-27 00h00 +00:00 A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.
7.8
High