[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKf73M5cwXxfUUY6gU1g4x_tGXQBXjyQzRWNtIY2DeUE":3,"g5a-family:redhat\u002Fcodeready_linux_builder_for_power_little_endian":122,"g5a-ex:redhat\u002Fcodeready_linux_builder_for_power_little_endian@*":126},{"success":4,"data":5},true,{"product":6,"versions":27,"topVulnerabilitiesByEpss":32,"kevVulnerabilities":89,"seoMetadata":100,"meta":119},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":26},"redhat","codeready_linux_builder_for_power_little_endian",4,11,1,"2023-12-27",[14,19,21,23],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"8.0",6,0,false,{"version":20,"cve_count":9,"kev_count":17,"has_kev":18},"8.0_ppc64le",{"version":22,"cve_count":11,"kev_count":17,"has_kev":18},"8.2",{"version":24,"cve_count":25,"kev_count":11,"has_kev":4},"9.0_ppc64le",3,"Codeready Linux Builder For Power Little Endian by Redhat is a technology product with 4 tracked versions and 11 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[28,29,30,31],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":9,"kev_count":17,"has_kev":18},{"version":22,"cve_count":11,"kev_count":17,"has_kev":18},{"version":24,"cve_count":25,"kev_count":11,"has_kev":4},[33,41,47,52,59,65,69,74,79,84],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":4,"epssScore":40},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","2023-10-03",7.8,"v3.1","High",0.63769,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":38,"severity":39,"isKev":18,"epssScore":46},"CVE-2021-3737","A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.","2022-03-04",7.5,0.13166,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":4,"epssScore":51},"CVE-2022-0492","A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel\u002Fcgroup\u002Fcgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.","2022-03-03",0.05528,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":38,"severity":57,"isKev":18,"epssScore":58},"CVE-2021-3733","There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.","2022-03-10",6.5,"Medium",0.04799,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":38,"severity":57,"isKev":18,"epssScore":64},"CVE-2020-27842","There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability.","2021-01-05",5.5,0.0152,{"cveId":66,"description":67,"publishedDate":44,"cvssScore":63,"cvssVersion":38,"severity":57,"isKev":18,"epssScore":68},"CVE-2021-3744","A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers\u002Fcrypto\u002Fccp\u002Fccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.",0.00533,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":56,"cvssVersion":38,"severity":57,"isKev":18,"epssScore":73},"CVE-2021-3930","An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page() if the 'page' argument was set to MODE_PAGE_ALLS (0x3f). A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service condition.","2022-02-18",0.00338,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":63,"cvssVersion":38,"severity":57,"isKev":18,"epssScore":78},"CVE-2023-4042","A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8.","2023-08-23",0.00335,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":18,"epssScore":83},"CVE-2023-5633","The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.","2023-10-23",0.0028,{"cveId":85,"description":86,"publishedDate":12,"cvssScore":87,"cvssVersion":38,"severity":57,"isKev":18,"epssScore":88},"CVE-2023-4641","A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.",4.7,0.00256,[90,95],{"cveId":48,"description":49,"publishedDate":50,"cvssScore":37,"severity":39,"isKev":4,"epssScore":51,"cisaVulnName":91,"cisaDateAdded":92,"cisaShortDescription":93,"cisaRequiredAction":94},"Linux Kernel Improper Authentication Vulnerability","2026-06-02","Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"severity":39,"isKev":4,"epssScore":40,"cisaVulnName":96,"cisaDateAdded":97,"cisaShortDescription":98,"cisaRequiredAction":99},"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":101,"metaDescription":102,"keywords":103,"structuredData":104},"Codeready Linux Builder For Power Little Endian by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Codeready Linux Builder For Power Little Endian by Redhat covering 4 versions with 11 tracked vulnerabilities including 0 critical and 2 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Codeready Linux Builder For Power Little Endian vulnerabilities, Codeready Linux Builder For Power Little Endian security, Codeready Linux Builder For Power Little Endian CVE, Redhat Codeready Linux Builder For Power Little Endian, Codeready Linux Builder For Power Little Endian threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Codeready Linux Builder For Power Little Endian KEV, Codeready Linux Builder For Power Little Endian exploited vulnerabilities",{"@context":105,"@type":106,"name":107,"description":102,"url":108,"manufacturer":109,"applicationCategory":113,"softwareVersion":114,"mainEntity":115},"https:\u002F\u002Fschema.org","SoftwareApplication","Codeready Linux Builder For Power Little Endian","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fcodeready_linux_builder_for_power_little_endian",{"@type":110,"name":111,"url":112},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","4 versions tracked",{"@type":116,"name":117,"description":118,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Codeready Linux Builder For Power Little Endian Security Vulnerabilities","Security vulnerabilities affecting Codeready Linux Builder For Power Little Endian by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":120,"apiVersion":121},"2026-10-17T19:14:27.311Z","3.0",[123],{"product":124,"cves":125},"codeready_linux_builder_for_power_little_endian_eus",12,{"rows":127,"total":136,"capped":18,"failed":17},[128,132],{"cveId":48,"name":91,"severity":39,"cvss":37,"added":92,"epss":51,"published":129,"ranges":130,"checked":4,"hits":131,"covers":18},"2022-03-03T19:15:08.633",[15,22],[],{"cveId":34,"name":96,"severity":39,"cvss":37,"added":97,"epss":40,"published":133,"ranges":134,"checked":4,"hits":135,"covers":18},"2023-10-03T18:15:10.463",[24],[],2]