Enterprise Linux Tus vulnerabilitiesAnd the versions its exploited flaws hit.

Product1 known exploited8 versions
The short answer

Enterprise Linux Tus is made by Red Hat. We track 21 published vulnerabilities in it, across 8 versions. 1 of them is on the list of flaws known to be exploited, the newest added on 3 March 2022. If you run Enterprise Linux Tus, check your version against the exploited flaws below and patch those first.

Check your version

The most recent Enterprise Linux Tus flaw added to the known-exploited list is CVE-2016-5195, on 3 March 2022. We keep watching the known-exploited list.

Versions

Which versions of Enterprise Linux Tus do the exploited flaws hit?

Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.

  • CVE-2016-5195Exploited list, 3 Mar 2022

    Linux Kernel Race Condition Vulnerability

    6.5
Known exploited

Which Enterprise Linux Tus vulnerabilities are being exploited?

1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 7.0
    CVE-2016-5195HighKnown exploited
    Linux Kernel Race Condition Vulnerability

    Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.

    Chance of use84%Known exploited since3 Mar 2022
Exploit likelihood

Which Enterprise Linux Tus flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 84%
    CVE-2016-5195HighKnown exploited

    Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory...

    CVSS7.0Published10 Nov 2016
  2. 12%

    urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a...

    CVSS9.1Published23 Mar 2019
  3. 9.3%

    Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution.

    CVSS9.8Published5 Oct 2017
  4. 7.1%

    MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session.

    CVSS5.0Published20 Jul 2014
  5. 5.9%

    <p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious...

    CVSS7.5Published11 Sep 2020
  6. 3.2%

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security).

    CVSS3.7Published15 Jan 2020
  7. 3.0%

    A flaw was found in the ptp4l program of the linuxptp package.

    CVSS8.8Published9 Jul 2021
  8. 2.8%

    A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking.

    CVSS5.6Published23 Nov 2021
  9. 2.7%

    The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.

    CVSS8.1Published14 Aug 2019
  10. 2.7%

    Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1.

    CVSS6.6Published7 Oct 2020
Precursor Intelligence

Running Enterprise Linux Tus? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 21 published vulnerabilities listed under the name Enterprise Linux Tus, across 8 versions. The most recent Enterprise Linux Tus flaw added to the known-exploited list is CVE-2016-5195, on 3 March 2022.

1 is on the list of flaws known to be exploited. The most recently added is CVE-2016-5195.

Each flaw names its own versions, usually as ranges. The newest, CVE-2016-5195, affects 6.5. The versions for every exploited flaw are listed on this page.

Create a Precursor Intelligence account and track Enterprise Linux Tus. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.