Redhat Kernel vulnerabilities

4 known vulnerabilities affecting redhat/kernel.

Total CVEs
4
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH4

Vulnerabilities

Page 1 of 1
CVE-2019-10142HIGHCVSS 7.8v5.0.x up to, excluding 5.0.172019-07-30
CVE-2019-10142 [HIGH] CWE-119 CVE-2019-10142: A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, excluding 5.0.17. A parameter passed to an ioctl was incorrectly validated and used in size calculations for the page size calculation. An attacker can use this flaw to crash the system, corrupt memory, or create other adverse security affec
cvelistv5nvd
CVE-2004-0619HIGHCVSS 7.2v2.4.20-82004-12-06
CVE-2004-0619 [HIGH] CVE-2004-0619: Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows loca Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add_dsa_buf_bytes variable, which leads to a buffer overflow.
nvd
CVE-2004-0077HIGHCVSS 7.2PoCv2.4.20-82004-03-03
CVE-2004-0077 [HIGH] CVE-2004-0077: The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.
nvd
CVE-2003-0700HIGHCVSS 7.5≤ 2.4.212004-02-17
CVE-2003-0700 [HIGH] CVE-2003-0700: The C-Media PCI sound driver in Linux before 2.4.22 does not use the get_user function to access use The C-Media PCI sound driver in Linux before 2.4.22 does not use the get_user function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0699.
nvd