GCVE - cpe:2.3:o:redhat:enterprise_linux:6.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:redhat:enterprise_linux:6.7:*:*:*:*:*:*:*

part: o version: 6.7 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Enterprise Linux (`3274dc93-112d-51d5-8bcf-fbf18b1917ac`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-14823`	vulnerable	2026-06-08 05:12:56.169363	Details available MEDIUM (6.8) A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly verify the chain and could be vulnerable to attacks such as Man in the Middle. Published: 2019-10-14T19:35:04.000Z Updated: 2024-08-05T00:26:39.111Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14823 https://access.redhat.com/errata/RHSA-2019:3067 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O53NXVKMF7PJCPMCJQHLMSYCUGDHGBVE/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UZZWZLNALV6AOIBIHB3ZMNA5AGZMZAIY/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ENEN4DQBE6WOGEP5BQ5X62WZM7ZQEEBG/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-3760`	vulnerable	2026-06-08 05:11:41.241382	Details available There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application's root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately. Published: 2018-06-26T19:00:00.000Z Updated: 2024-09-16T18:39:20.968Z Open on db.gcve.eu Reference links https://github.com/rails/sprockets/commit/c09131cf5b2c479263939c8582e22b98ed616c5fhttps://github.com/rails/sprockets/commit/9c34fa05900b968d74f08ccf40917848a7be9441https://github.com/rails/sprockets/commit/18b8a7f07a50c245e9aee7854ecdbe606bbd8bb5 https://access.redhat.com/errata/RHSA-2018:2745 https://groups.google.com/d/msg/rubyonrails-security/ft_J--l55fM/7roDfQ50BwAJ https://access.redhat.com/errata/RHSA-2018:2244 https://access.redhat.com/errata/RHSA-2018:2561	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-1111`	vulnerable	2026-06-08 05:11:16.930341	Details available HIGH (7.5) DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol. Published: 2018-05-17T16:00:00.000Z Updated: 2024-08-05T03:51:48.789Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1111 https://www.tenable.com/security/tns-2018-10 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IDJA4QRR74TMXW34Q3DYYFPVBYRTJBI7/ https://access.redhat.com/security/vulnerabilities/3442151 http://www.securityfocus.com/bid/104195	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17456`	vulnerable	2026-06-08 05:11:06.379834	Details available Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character. Published: 2018-10-06T14:00:00.000Z Updated: 2024-08-05T10:47:04.938Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/45631/ http://www.securityfocus.com/bid/105523 http://www.securitytracker.com/id/1041811 https://www.debian.org/security/2018/dsa-4311 https://access.redhat.com/errata/RHSA-2018:3505	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-5645`	vulnerable	2026-06-08 05:09:47.452705	Details available In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code. Published: 2017-04-17T21:00:00.000Z Updated: 2024-08-05T15:11:47.391Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2017:2888 https://access.redhat.com/errata/RHSA-2017:2809 http://www.securityfocus.com/bid/97702 http://www.securitytracker.com/id/1041294 https://access.redhat.com/errata/RHSA-2017:2810	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000253`	vulnerable	2026-06-08 05:08:34.354435	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-5229`	vulnerable	2026-06-08 05:06:49.294461	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2767`	vulnerable	2026-06-08 04:58:09.122891	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.