Codeready Linux Builder for Ibm Z Systems Eus vulnerabilitiesAnd the versions its exploited flaws hit.

Product2 known exploited6 versions
The short answer

Codeready Linux Builder for Ibm Z Systems Eus is made by Red Hat. We track 13 published vulnerabilities in it, across 6 versions. 2 of them are on the list of flaws known to be exploited, the newest added on 21 November 2023. If you run Codeready Linux Builder for Ibm Z Systems Eus, check your version against the exploited flaws below and patch those first.

Check your version

The most recent Codeready Linux Builder for Ibm Z Systems Eus flaw added to the known-exploited list is CVE-2023-4911, on 21 November 2023. We keep watching the known-exploited list.

Versions

Which versions of Codeready Linux Builder for Ibm Z Systems Eus do the exploited flaws hit?

Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.

  • CVE-2023-4911Exploited list, 21 Nov 2023

    GNU C Library Buffer Overflow Vulnerability

    8.69.2_s390x9.4_s390x
  • CVE-2019-8720Exploited list, 23 May 2022

    WebKitGTK Memory Corruption Vulnerability

    8.08.48.6
Known exploited

Which Codeready Linux Builder for Ibm Z Systems Eus vulnerabilities are being exploited?

2 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 7.8
    CVE-2023-4911HighKnown exploited
    GNU C Library Buffer Overflow Vulnerability

    GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.

    Chance of use64%Known exploited since21 Nov 2023
  2. 8.8
    CVE-2019-8720HighKnown exploited
    WebKitGTK Memory Corruption Vulnerability

    WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.

    Chance of use1.6%Known exploited since23 May 2022
Exploit likelihood

Which Codeready Linux Builder for Ibm Z Systems Eus flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 64%
    CVE-2023-4911HighKnown exploited

    A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable.

    CVSS7.8Published3 Oct 2023
  2. 4.3%

    A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification.

    CVSS8.8Published10 Dec 2023
  3. 2.8%

    A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments.

    CVSS4.3Published10 Dec 2023
  4. 2.6%

    A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher.

    CVSS2.2Published10 Dec 2023
  5. 1.7%

    A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes...

    CVSS6.5Published18 Sep 2023
  6. 1.6%

    A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash.

    CVSS5.9Published18 Sep 2023
  7. 1.6%
    CVE-2019-8720HighKnown exploited

    A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution.

    CVSS8.8Published6 Mar 2023
  8. 1.5%

    A flaw was found in the Linux kernel's NVMe driver.

    CVSS6.5Published7 Feb 2024
  9. 1.5%

    A flaw was found in the Linux kernel's NVMe driver.

    CVSS6.5Published7 Feb 2024
  10. 1.5%

    A flaw was found in the Linux kernel's NVMe driver.

    CVSS6.5Published7 Feb 2024
Precursor Intelligence

Running Codeready Linux Builder for Ibm Z Systems Eus? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 13 published vulnerabilities listed under the name Codeready Linux Builder for Ibm Z Systems Eus, across 6 versions. The most recent Codeready Linux Builder for Ibm Z Systems Eus flaw added to the known-exploited list is CVE-2023-4911, on 21 November 2023.

2 are on the list of flaws known to be exploited. The most recently added are CVE-2023-4911 and CVE-2019-8720.

Each flaw names its own versions, usually as ranges. The newest, CVE-2023-4911, affects 8.6, 9.2_s390x, 9.4_s390x. The versions for every exploited flaw are listed on this page.

Create a Precursor Intelligence account and track Codeready Linux Builder for Ibm Z Systems Eus. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.