Enterprise Linux Hpc Node Eus vulnerabilitiesAnd the versions its exploited flaws hit.
Enterprise Linux Hpc Node Eus is made by Red Hat. We track 83 published vulnerabilities in it, across 14 versions. 2 of them are on the list of flaws known to be exploited, the newest added on 3 November 2021. If you run Enterprise Linux Hpc Node Eus, check your version against the exploited flaws below and patch those first.
The most recent Enterprise Linux Hpc Node Eus flaw added to the known-exploited list is CVE-2016-3715, on 3 November 2021. We keep watching the known-exploited list.
Which versions of Enterprise Linux Hpc Node Eus do the exploited flaws hit?
Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.
- CVE-2016-3715Exploited list, 3 Nov 2021
ImageMagick Arbitrary File Deletion Vulnerability
7.2 - CVE-2016-3718Exploited list, 3 Nov 2021
ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
7.2
Which Enterprise Linux Hpc Node Eus vulnerabilities are being exploited?
2 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 5.5ImageMagick Arbitrary File Deletion Vulnerability
ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.
- 5.5ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.
Which Enterprise Linux Hpc Node Eus flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 91%CVE-2015-7547High
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service...
- 89%CVE-2016-2107Medium
The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information...
- 78%CVE-2016-2108Critical
The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in...
- 76%
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
- 75%
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
- 51%CVE-2016-5388High
Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the...
- 50%CVE-2015-4024Medium
Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service...
- 40%CVE-2016-2105High
Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large...
- 38%CVE-2015-3329High
Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted...
- 29%CVE-2016-2109High
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via...
Running Enterprise Linux Hpc Node Eus? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.
- Matched to
- Enterprise Linux Hpc Node Eus on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 83 published vulnerabilities listed under the name Enterprise Linux Hpc Node Eus, across 14 versions. The most recent Enterprise Linux Hpc Node Eus flaw added to the known-exploited list is CVE-2016-3715, on 3 November 2021.
2 are on the list of flaws known to be exploited. The most recently added are CVE-2016-3715 and CVE-2016-3718.
Each flaw names its own versions, usually as ranges. The newest, CVE-2016-3715, affects 7.2. The versions for every exploited flaw are listed on this page.
Create a Precursor Intelligence account and track Enterprise Linux Hpc Node Eus. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.