[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$famQppgdR6XwYX57KrPsGhG2LmkjW674CY0_f8W2EarM":3,"g5a-family:redhat\u002Fenterprise_linux_update_services_for_sap_solutions":144,"g5a-ex:redhat\u002Fenterprise_linux_update_services_for_sap_solutions@*":145},{"success":4,"data":5},true,{"product":6,"versions":44,"topVulnerabilitiesByEpss":55,"kevVulnerabilities":113,"seoMetadata":122,"meta":141},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":43},"redhat","enterprise_linux_update_services_for_sap_solutions",10,21,2,"2025-02-27",[14,17,20,22,25,28,31,36,39,41],{"version":15,"cve_count":11,"kev_count":16,"has_kev":4},"8.0",1,{"version":18,"cve_count":19,"kev_count":11,"has_kev":4},"8.1",5,{"version":21,"cve_count":19,"kev_count":16,"has_kev":4},"8.2",{"version":23,"cve_count":24,"kev_count":11,"has_kev":4},"8.4",8,{"version":26,"cve_count":27,"kev_count":11,"has_kev":4},"8.6",9,{"version":29,"cve_count":30,"kev_count":11,"has_kev":4},"8.8",7,{"version":32,"cve_count":33,"kev_count":34,"has_kev":35},"9.0",4,0,false,{"version":37,"cve_count":38,"kev_count":34,"has_kev":35},"9.2",3,{"version":40,"cve_count":30,"kev_count":34,"has_kev":35},"9.4",{"version":42,"cve_count":38,"kev_count":34,"has_kev":35},"9.6","Enterprise Linux Update Services For Sap Solutions by Redhat is a technology product with 10 tracked versions and 21 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[45,46,47,48,49,50,51,52,53,54],{"version":15,"cve_count":11,"kev_count":16,"has_kev":4},{"version":18,"cve_count":19,"kev_count":11,"has_kev":4},{"version":21,"cve_count":19,"kev_count":16,"has_kev":4},{"version":23,"cve_count":24,"kev_count":11,"has_kev":4},{"version":26,"cve_count":27,"kev_count":11,"has_kev":4},{"version":29,"cve_count":30,"kev_count":11,"has_kev":4},{"version":32,"cve_count":33,"kev_count":34,"has_kev":35},{"version":37,"cve_count":38,"kev_count":34,"has_kev":35},{"version":40,"cve_count":30,"kev_count":34,"has_kev":35},{"version":42,"cve_count":38,"kev_count":34,"has_kev":35},[56,63,70,76,83,87,93,97,103,108],{"cveId":57,"description":58,"publishedDate":59,"cvssScore":27,"cvssVersion":60,"severity":61,"isKev":4,"epssScore":62},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16","v3.1","Critical",0.99999,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":60,"severity":68,"isKev":4,"epssScore":69},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",7.8,"High",0.65005,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":60,"severity":68,"isKev":35,"epssScore":75},"CVE-2024-12085","A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.","2025-01-14",7.5,0.08823,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":60,"severity":81,"isKev":35,"epssScore":82},"CVE-2019-6470","There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.","2019-11-01",6.5,"Medium",0.08813,{"cveId":84,"description":85,"publishedDate":73,"cvssScore":80,"cvssVersion":60,"severity":81,"isKev":35,"epssScore":86},"CVE-2024-12088","A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.",0.04745,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":60,"severity":81,"isKev":35,"epssScore":92},"CVE-2020-14355","Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messages that, when processed by the QUIC image compression algorithm, result in a process crash or potential code execution.","2020-10-07",6.6,0.02656,{"cveId":94,"description":95,"publishedDate":73,"cvssScore":80,"cvssVersion":60,"severity":81,"isKev":35,"epssScore":96},"CVE-2024-12087","A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to write files outside of the client's intended destination directory. A malicious server could write malicious files to arbitrary locations named after valid directories\u002Fpaths on the client.",0.02307,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":60,"severity":68,"isKev":35,"epssScore":102},"CVE-2024-3183","A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key. This key is different for each new session, which protects it from brute force attacks. However, the ticket it contains is encrypted using the target principal key directly. For user principals, this key is a hash of a public per-principal randomly-generated salt and the user’s password.\r\n\r\nIf a principal is compromised it means the attacker would be able to retrieve tickets encrypted to any principal, all of them being encrypted by their own key directly. By taking these tickets and salts offline, the attacker could run brute force attacks to find character strings able to decrypt tickets when combined to a principal salt (i.e. find the principal’s password).","2024-06-12",8.1,0.02053,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":80,"cvssVersion":60,"severity":81,"isKev":35,"epssScore":107},"CVE-2022-24805","net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the `INDEX` of             `NET-SNMP-VACM-MIB` can cause an out-of-bounds memory access. A user with read-only credentials can exploit the issue. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range.\n","2024-04-16",0.01299,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":67,"cvssVersion":60,"severity":68,"isKev":35,"epssScore":112},"CVE-2024-0229","An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.","2024-02-09",0.01229,[114,118],{"cveId":57,"description":58,"publishedDate":59,"cvssScore":27,"severity":61,"isKev":4,"epssScore":62,"cisaVulnName":115,"cisaDateAdded":116,"cisaShortDescription":58,"cisaRequiredAction":117},"Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01","Apply updates per vendor instructions.",{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"severity":68,"isKev":4,"epssScore":69,"cisaVulnName":119,"cisaDateAdded":120,"cisaShortDescription":121,"cisaRequiredAction":117},"Apache HTTP Server Privilege Escalation Vulnerability","2021-11-03","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.",{"title":123,"metaDescription":124,"keywords":125,"structuredData":126},"Enterprise Linux Update Services For Sap Solutions by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Enterprise Linux Update Services For Sap Solutions by Redhat covering 10 versions with 21 tracked vulnerabilities including 1 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Linux Update Services For Sap Solutions vulnerabilities, Enterprise Linux Update Services For Sap Solutions security, Enterprise Linux Update Services For Sap Solutions CVE, Redhat Enterprise Linux Update Services For Sap Solutions, Enterprise Linux Update Services For Sap Solutions threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Enterprise Linux Update Services For Sap Solutions KEV, Enterprise Linux Update Services For Sap Solutions exploited vulnerabilities",{"@context":127,"@type":128,"name":129,"description":124,"url":130,"manufacturer":131,"applicationCategory":135,"softwareVersion":136,"mainEntity":137},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Linux Update Services For Sap Solutions","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fenterprise_linux_update_services_for_sap_solutions",{"@type":132,"name":133,"url":134},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","10 versions tracked",{"@type":138,"name":139,"description":140,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Linux Update Services For Sap Solutions Security Vulnerabilities","Security vulnerabilities affecting Enterprise Linux Update Services For Sap Solutions by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":142,"apiVersion":143},"2026-10-17T16:01:17.233Z","3.0",[],{"rows":146,"total":11,"capped":35,"failed":34},[147,151],{"cveId":57,"name":115,"severity":61,"cvss":27,"added":116,"epss":62,"published":148,"ranges":149,"checked":4,"hits":150,"covers":35},"2021-09-16T15:15:07.633",[18,21,23,26,29],[],{"cveId":64,"name":119,"severity":68,"cvss":67,"added":120,"epss":69,"published":152,"ranges":153,"checked":4,"hits":154,"covers":35},"2019-04-08T22:29:00.387",[15,18,23,26,29],[]]