[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fq6DjmVhRLJL4Ya8yFQEFVp5KToLX_Tgdv_MKfvWY4vk":3,"g5a-family:redhat\u002Fenterprise_linux_server_eus":259,"g5a-ex:redhat\u002Fenterprise_linux_server_eus@*":262},{"success":4,"data":5},true,{"product":6,"versions":93,"topVulnerabilitiesByEpss":123,"kevVulnerabilities":184,"seoMetadata":237,"meta":256},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":92},"redhat","enterprise_linux_server_eus",29,625,9,"2022-08-22",[14,19,22,24,26,29,32,34,37,39,42,45,48,50,52,55,57,59,62,64,67,70,73,76,79,82,85,88,90],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"5.6",3,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"5.9",13,{"version":23,"cve_count":17,"kev_count":17,"has_kev":18},"6.0",{"version":25,"cve_count":17,"kev_count":17,"has_kev":18},"6.1",{"version":27,"cve_count":28,"kev_count":17,"has_kev":18},"6.1.z",1,{"version":30,"cve_count":31,"kev_count":17,"has_kev":18},"6.2",6,{"version":33,"cve_count":16,"kev_count":17,"has_kev":18},"6.2.z",{"version":35,"cve_count":36,"kev_count":28,"has_kev":4},"6.3",22,{"version":38,"cve_count":28,"kev_count":17,"has_kev":18},"6.3.z",{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},"6.4",15,{"version":43,"cve_count":44,"kev_count":17,"has_kev":18},"6.4.z",2,{"version":46,"cve_count":47,"kev_count":28,"has_kev":4},"6.5",33,{"version":49,"cve_count":44,"kev_count":17,"has_kev":18},"6.5.z",{"version":51,"cve_count":21,"kev_count":44,"has_kev":4},"6.6",{"version":53,"cve_count":54,"kev_count":17,"has_kev":18},"6.6.z",16,{"version":56,"cve_count":28,"kev_count":17,"has_kev":18},"6.6z",{"version":58,"cve_count":36,"kev_count":44,"has_kev":4},"6.7",{"version":60,"cve_count":61,"kev_count":17,"has_kev":18},"6.7.z",10,{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},"6.8",{"version":65,"cve_count":66,"kev_count":17,"has_kev":18},"7.1",59,{"version":68,"cve_count":69,"kev_count":28,"has_kev":4},"7.2",87,{"version":71,"cve_count":72,"kev_count":28,"has_kev":4},"7.3",176,{"version":74,"cve_count":75,"kev_count":28,"has_kev":4},"7.4",260,{"version":77,"cve_count":78,"kev_count":44,"has_kev":4},"7.5",349,{"version":80,"cve_count":81,"kev_count":28,"has_kev":4},"7.6",281,{"version":83,"cve_count":84,"kev_count":28,"has_kev":4},"7.7",50,{"version":86,"cve_count":87,"kev_count":17,"has_kev":18},"8.1",8,{"version":89,"cve_count":44,"kev_count":28,"has_kev":4},"8.4",{"version":91,"cve_count":44,"kev_count":17,"has_kev":18},"8.6","Enterprise Linux Server Eus by Redhat is a technology product with 29 tracked versions and 625 known security vulnerabilities including 9 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":17,"kev_count":17,"has_kev":18},{"version":25,"cve_count":17,"kev_count":17,"has_kev":18},{"version":27,"cve_count":28,"kev_count":17,"has_kev":18},{"version":30,"cve_count":31,"kev_count":17,"has_kev":18},{"version":33,"cve_count":16,"kev_count":17,"has_kev":18},{"version":35,"cve_count":36,"kev_count":28,"has_kev":4},{"version":38,"cve_count":28,"kev_count":17,"has_kev":18},{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},{"version":43,"cve_count":44,"kev_count":17,"has_kev":18},{"version":46,"cve_count":47,"kev_count":28,"has_kev":4},{"version":49,"cve_count":44,"kev_count":17,"has_kev":18},{"version":51,"cve_count":21,"kev_count":44,"has_kev":4},{"version":53,"cve_count":54,"kev_count":17,"has_kev":18},{"version":56,"cve_count":28,"kev_count":17,"has_kev":18},{"version":58,"cve_count":36,"kev_count":44,"has_kev":4},{"version":60,"cve_count":61,"kev_count":17,"has_kev":18},{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},{"version":65,"cve_count":66,"kev_count":17,"has_kev":18},{"version":68,"cve_count":69,"kev_count":28,"has_kev":4},{"version":71,"cve_count":72,"kev_count":28,"has_kev":4},{"version":74,"cve_count":75,"kev_count":28,"has_kev":4},{"version":77,"cve_count":78,"kev_count":44,"has_kev":4},{"version":80,"cve_count":81,"kev_count":28,"has_kev":4},{"version":83,"cve_count":84,"kev_count":28,"has_kev":4},{"version":86,"cve_count":87,"kev_count":17,"has_kev":18},{"version":89,"cve_count":44,"kev_count":28,"has_kev":4},{"version":91,"cve_count":44,"kev_count":17,"has_kev":18},[124,132,140,147,152,158,163,168,173,179],{"cveId":125,"description":126,"publishedDate":127,"cvssScore":128,"cvssVersion":129,"severity":130,"isKev":4,"epssScore":131},"CVE-2014-0160","The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.","2014-04-07",7.5,"v3.1","High",0.99999,{"cveId":133,"description":134,"publishedDate":135,"cvssScore":136,"cvssVersion":137,"severity":138,"isKev":18,"epssScore":139},"CVE-2018-11784","When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '\u002Ffoo\u002F' when the user requested '\u002Ffoo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.","2018-10-04",4.3,"v3.0","Medium",0.9768,{"cveId":141,"description":142,"publishedDate":143,"cvssScore":144,"cvssVersion":137,"severity":145,"isKev":18,"epssScore":146},"CVE-2018-17456","Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive \"git clone\" of a superproject if a .gitmodules file has a URL field beginning with a '-' character.","2018-10-06",9.8,"Critical",0.97356,{"cveId":148,"description":149,"publishedDate":150,"cvssScore":144,"cvssVersion":129,"severity":145,"isKev":4,"epssScore":151},"CVE-2019-5544","OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.","2019-12-06",0.97258,{"cveId":153,"description":154,"publishedDate":155,"cvssScore":156,"cvssVersion":129,"severity":130,"isKev":4,"epssScore":157},"CVE-2021-4034","A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","2022-01-28",7.8,0.94921,{"cveId":159,"description":160,"publishedDate":161,"cvssScore":144,"cvssVersion":129,"severity":145,"isKev":4,"epssScore":162},"CVE-2015-5122","Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.","2015-07-14",0.93892,{"cveId":164,"description":165,"publishedDate":166,"cvssScore":156,"cvssVersion":137,"severity":130,"isKev":18,"epssScore":167},"CVE-2018-16509","An issue was discovered in Artifex Ghostscript before 9.24. Incorrect \"restoration of privilege\" checking during handling of \u002Finvalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the \"pipe\" instruction.","2018-09-05",0.92499,{"cveId":169,"description":170,"publishedDate":171,"cvssScore":144,"cvssVersion":129,"severity":145,"isKev":4,"epssScore":172},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.","2016-04-21",0.92334,{"cveId":174,"description":175,"publishedDate":176,"cvssScore":177,"cvssVersion":137,"severity":130,"isKev":18,"epssScore":178},"CVE-2015-7547","Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing \"dual A\u002FAAAA DNS queries\" and the libnss_dns.so.2 NSS module.","2016-02-18",8.1,0.90987,{"cveId":180,"description":181,"publishedDate":182,"cvssScore":144,"cvssVersion":129,"severity":145,"isKev":18,"epssScore":183},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",0.89792,[185,194,203,207,216,220,224,231,233],{"cveId":186,"description":187,"publishedDate":188,"cvssScore":156,"severity":130,"isKev":4,"epssScore":189,"cisaVulnName":190,"cisaDateAdded":191,"cisaShortDescription":192,"cisaRequiredAction":193},"CVE-2018-14634","An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.","2018-09-25",0.14689,"Linux Kernel Integer Overflow Vulnerability","2026-01-26","Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":195,"description":196,"publishedDate":197,"cvssScore":128,"severity":130,"isKev":4,"epssScore":198,"cisaVulnName":199,"cisaDateAdded":200,"cisaShortDescription":201,"cisaRequiredAction":202},"CVE-2016-9079","A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox \u003C 50.0.2, Firefox ESR \u003C 45.5.1, and Thunderbird \u003C 45.5.1.","2018-06-11",0.87536,"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","2023-06-22","Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.","Apply updates per vendor instructions.",{"cveId":169,"description":170,"publishedDate":171,"cvssScore":144,"severity":145,"isKev":4,"epssScore":172,"cisaVulnName":204,"cisaDateAdded":205,"cisaShortDescription":206,"cisaRequiredAction":202},"Oracle Java SE and JRockit Unspecified Vulnerability","2023-05-12","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.",{"cveId":208,"description":209,"publishedDate":210,"cvssScore":211,"severity":138,"isKev":4,"epssScore":212,"cisaVulnName":213,"cisaDateAdded":205,"cisaShortDescription":214,"cisaRequiredAction":215},"CVE-2014-0196","The n_tty_write function in drivers\u002Ftty\u002Fn_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the \"LECHO & !OPOST\" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.","2014-05-07",5.5,0.22475,"Linux Kernel Race Condition Vulnerability","Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":153,"description":154,"publishedDate":155,"cvssScore":156,"severity":130,"isKev":4,"epssScore":157,"cisaVulnName":217,"cisaDateAdded":218,"cisaShortDescription":219,"cisaRequiredAction":202},"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","2022-06-27","The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.",{"cveId":125,"description":126,"publishedDate":127,"cvssScore":128,"severity":130,"isKev":4,"epssScore":131,"cisaVulnName":221,"cisaDateAdded":222,"cisaShortDescription":223,"cisaRequiredAction":202},"OpenSSL Information Disclosure Vulnerability","2022-05-04","The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.",{"cveId":225,"description":226,"publishedDate":161,"cvssScore":144,"severity":145,"isKev":4,"epssScore":227,"cisaVulnName":228,"cisaDateAdded":229,"cisaShortDescription":230,"cisaRequiredAction":215},"CVE-2015-5123","Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.",0.1883,"Adobe Flash Player Use-After-Free Vulnerability","2022-04-13","Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":159,"description":160,"publishedDate":161,"cvssScore":144,"severity":145,"isKev":4,"epssScore":162,"cisaVulnName":228,"cisaDateAdded":229,"cisaShortDescription":232,"cisaRequiredAction":215},"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":148,"description":149,"publishedDate":150,"cvssScore":144,"severity":145,"isKev":4,"epssScore":151,"cisaVulnName":234,"cisaDateAdded":235,"cisaShortDescription":236,"cisaRequiredAction":202},"VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability","2021-11-03","VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.",{"title":238,"metaDescription":239,"keywords":240,"structuredData":241},"Enterprise Linux Server Eus by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Enterprise Linux Server Eus by Redhat covering 29 versions with 625 tracked vulnerabilities including 4 critical and 4 high-severity issues and 9 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Linux Server Eus vulnerabilities, Enterprise Linux Server Eus security, Enterprise Linux Server Eus CVE, Redhat Enterprise Linux Server Eus, Enterprise Linux Server Eus threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Enterprise Linux Server Eus KEV, Enterprise Linux Server Eus exploited vulnerabilities",{"@context":242,"@type":243,"name":244,"description":239,"url":245,"manufacturer":246,"applicationCategory":250,"softwareVersion":251,"mainEntity":252},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Linux Server Eus","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fenterprise_linux_server_eus",{"@type":247,"name":248,"url":249},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","29 versions tracked",{"@type":253,"name":254,"description":255,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Linux Server Eus Security Vulnerabilities","Security vulnerabilities affecting Enterprise Linux Server Eus by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":257,"apiVersion":258},"2026-10-17T11:55:16.982Z","3.0",[260],{"product":261,"cves":44},"enterprise_linux_server_eus_from_rhui",{"rows":263,"total":11,"capped":18,"failed":296},[264,267,270,273,276,280,284,288,292],{"cveId":186,"name":190,"severity":130,"cvss":156,"added":191,"epss":189,"published":188,"ranges":265,"hits":266,"checked":18,"covers":18},[],[],{"cveId":195,"name":199,"severity":130,"cvss":128,"added":200,"epss":198,"published":197,"ranges":268,"hits":269,"checked":18,"covers":18},[],[],{"cveId":169,"name":204,"severity":145,"cvss":144,"added":205,"epss":172,"published":171,"ranges":271,"hits":272,"checked":18,"covers":18},[],[],{"cveId":208,"name":213,"severity":138,"cvss":211,"added":205,"epss":212,"published":210,"ranges":274,"hits":275,"checked":18,"covers":18},[],[],{"cveId":153,"name":217,"severity":130,"cvss":156,"added":218,"epss":157,"published":277,"ranges":278,"checked":4,"hits":279,"covers":18},"2022-01-28T20:15:12.193",[89],[],{"cveId":125,"name":221,"severity":130,"cvss":128,"added":222,"epss":131,"published":281,"ranges":282,"checked":4,"hits":283,"covers":18},"2014-04-07T22:55:03.893",[46],[],{"cveId":225,"name":228,"severity":145,"cvss":144,"added":229,"epss":227,"published":285,"ranges":286,"checked":4,"hits":287,"covers":18},"2015-07-14T10:59:01.337",[51],[],{"cveId":159,"name":228,"severity":145,"cvss":144,"added":229,"epss":162,"published":289,"ranges":290,"checked":4,"hits":291,"covers":18},"2015-07-14T10:59:00.213",[51],[],{"cveId":148,"name":234,"severity":145,"cvss":144,"added":235,"epss":151,"published":293,"ranges":294,"checked":4,"hits":295,"covers":18},"2019-12-06T16:15:11.467",[83],[],4]