[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpWrF9709Up7YYDxSDhT8BrPttm_6ontcbMPVMoJHog0":3,"g5a-family:redhat\u002Fcodeready_linux_builder":136,"g5a-ex:redhat\u002Fcodeready_linux_builder@*":161},{"success":4,"data":5},true,{"product":6,"versions":28,"topVulnerabilitiesByEpss":33,"kevVulnerabilities":90,"seoMetadata":114,"meta":133},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":27},"redhat","codeready_linux_builder",4,37,3,"2024-02-15",[14,18,22,25],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},"8.0",16,1,{"version":19,"cve_count":17,"kev_count":20,"has_kev":21},"8.2",0,false,{"version":23,"cve_count":24,"kev_count":20,"has_kev":21},"8.4",2,{"version":26,"cve_count":9,"kev_count":17,"has_kev":4},"9.0","Codeready Linux Builder by Redhat is a technology product with 4 tracked versions and 37 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[29,30,31,32],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},{"version":19,"cve_count":17,"kev_count":20,"has_kev":21},{"version":23,"cve_count":24,"kev_count":20,"has_kev":21},{"version":26,"cve_count":9,"kev_count":17,"has_kev":4},[34,42,48,53,58,64,69,75,80,85],{"cveId":35,"description":36,"publishedDate":37,"cvssScore":38,"cvssVersion":39,"severity":40,"isKev":4,"epssScore":41},"CVE-2022-0847","A flaw was found in the way the \"flags\" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.","2022-03-10",7.8,"v3.1","High",0.92795,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":39,"severity":40,"isKev":21,"epssScore":47},"CVE-2021-44142","The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide \"...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver.\" Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.","2022-02-21",8.8,0.73589,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":46,"cvssVersion":39,"severity":40,"isKev":21,"epssScore":52},"CVE-2022-0435","A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.","2022-03-25",0.6777,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":38,"cvssVersion":39,"severity":40,"isKev":4,"epssScore":57},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","2023-10-03",0.63769,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":39,"severity":40,"isKev":21,"epssScore":63},"CVE-2021-3737","A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.","2022-03-04",7.5,0.13166,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":38,"cvssVersion":39,"severity":40,"isKev":4,"epssScore":68},"CVE-2022-0492","A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel\u002Fcgroup\u002Fcgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.","2022-03-03",0.05528,{"cveId":70,"description":71,"publishedDate":37,"cvssScore":72,"cvssVersion":39,"severity":73,"isKev":21,"epssScore":74},"CVE-2021-3733","There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.",6.5,"Medium",0.04799,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":72,"cvssVersion":39,"severity":73,"isKev":21,"epssScore":79},"CVE-2019-11135","TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.","2019-11-14",0.03133,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":38,"cvssVersion":39,"severity":40,"isKev":21,"epssScore":84},"CVE-2023-0179","A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.","2023-03-27",0.01944,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":72,"cvssVersion":39,"severity":73,"isKev":21,"epssScore":89},"CVE-2019-3459","A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.","2019-04-11",0.01827,[91,96,101,110],{"cveId":65,"description":66,"publishedDate":67,"cvssScore":38,"severity":40,"isKev":4,"epssScore":68,"cisaVulnName":92,"cisaDateAdded":93,"cisaShortDescription":94,"cisaRequiredAction":95},"Linux Kernel Improper Authentication Vulnerability","2026-06-02","Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":54,"description":55,"publishedDate":56,"cvssScore":38,"severity":40,"isKev":4,"epssScore":57,"cisaVulnName":97,"cisaDateAdded":98,"cisaShortDescription":99,"cisaRequiredAction":100},"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":102,"description":103,"publishedDate":104,"cvssScore":46,"severity":40,"isKev":4,"epssScore":105,"cisaVulnName":106,"cisaDateAdded":107,"cisaShortDescription":108,"cisaRequiredAction":109},"CVE-2019-8720","A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.","2023-03-06",0.01556,"WebKitGTK Memory Corruption Vulnerability","2022-05-23","WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.","Apply updates per vendor instructions.",{"cveId":35,"description":36,"publishedDate":37,"cvssScore":38,"severity":40,"isKev":4,"epssScore":41,"cisaVulnName":111,"cisaDateAdded":112,"cisaShortDescription":113,"cisaRequiredAction":109},"Linux Kernel Privilege Escalation Vulnerability","2022-04-25","Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of \"Dirty Pipe.\"",{"title":115,"metaDescription":116,"keywords":117,"structuredData":118},"Codeready Linux Builder by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Codeready Linux Builder by Redhat covering 4 versions with 37 tracked vulnerabilities including 0 critical and 4 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Codeready Linux Builder vulnerabilities, Codeready Linux Builder security, Codeready Linux Builder CVE, Redhat Codeready Linux Builder, Codeready Linux Builder threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Codeready Linux Builder KEV, Codeready Linux Builder exploited vulnerabilities",{"@context":119,"@type":120,"name":121,"description":116,"url":122,"manufacturer":123,"applicationCategory":127,"softwareVersion":128,"mainEntity":129},"https:\u002F\u002Fschema.org","SoftwareApplication","Codeready Linux Builder","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fcodeready_linux_builder",{"@type":124,"name":125,"url":126},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","4 versions tracked",{"@type":130,"name":131,"description":132,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Codeready Linux Builder Security Vulnerabilities","Security vulnerabilities affecting Codeready Linux Builder by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":134,"apiVersion":135},"2026-10-17T19:14:28.085Z","3.0",[137,140,143,145,148,151,153,156,158],{"product":138,"cves":139},"codeready_linux_builder_eus",19,{"product":141,"cves":142},"codeready_linux_builder_for_arm64_eus",13,{"product":144,"cves":142},"codeready_linux_builder_for_ibm_z_systems_eus",{"product":146,"cves":147},"codeready_linux_builder_for_power_little_endian_eus",12,{"product":149,"cves":150},"codeready_linux_builder_for_ibm_z_systems",11,{"product":152,"cves":150},"codeready_linux_builder_for_power_little_endian",{"product":154,"cves":155},"codeready_linux_builder_for_arm64",8,{"product":157,"cves":155},"codeready_linux_builder_eus_for_power_little_endian_eus",{"product":159,"cves":160},"codeready_linux_builder_eus_for_power_little_endian",5,{"rows":162,"total":9,"capped":21,"failed":20},[163,167,171,175],{"cveId":65,"name":92,"severity":40,"cvss":38,"added":93,"epss":68,"published":164,"ranges":165,"checked":4,"hits":166,"covers":21},"2022-03-03T19:15:08.633",[15,19],[],{"cveId":54,"name":97,"severity":40,"cvss":38,"added":98,"epss":57,"published":168,"ranges":169,"checked":4,"hits":170,"covers":21},"2023-10-03T18:15:10.463",[26],[],{"cveId":102,"name":106,"severity":40,"cvss":46,"added":107,"epss":105,"published":172,"ranges":173,"checked":4,"hits":174,"covers":21},"2023-03-06T23:15:10.287",[15],[],{"cveId":35,"name":111,"severity":40,"cvss":38,"added":112,"epss":41,"published":176,"ranges":177,"checked":4,"hits":178,"covers":21},"2022-03-10T17:44:57.283",[],[]]