Approved changes feed: RSS · Atom

cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:*

part: o version: 8.8_aarch64 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductEnterprise Linux For Arm 64 Eus (d534ceb6-9b84-55d4-878a-b8e979e8941e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2784 vulnerable 2026-06-08 07:16:58.279054 Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content
HIGH (7)
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.
Published: 2025-04-03T01:40:12.164Z
Updated: 2026-06-30T03:15:48.386Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9675 vulnerable 2026-06-08 07:00:28.466547 Buildah: buildah allows arbitrary directory mount
HIGH (7.8)
A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
Published: 2024-10-09T14:32:11.922Z
Updated: 2026-06-29T20:27:04.452Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1488 vulnerable 2026-06-08 06:25:40.233729 Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation
HIGH (8)
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
Published: 2024-02-15T05:04:13.994Z
Updated: 2025-11-11T15:29:53.824Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12085 vulnerable 2026-06-08 06:23:51.174011 Rsync: info leak via uninitialized stack contents
HIGH (7.5)
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
Published: 2025-01-14T17:37:16.036Z
Updated: 2026-07-26T12:59:49.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5633 vulnerable 2026-06-08 06:19:44.316127 Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling
HIGH (7.8)
The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.
Published: 2023-10-23T21:58:59.776Z
Updated: 2026-02-25T18:18:46.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5157 vulnerable 2026-06-08 06:19:42.712374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3758 vulnerable 2026-06-08 06:09:40.461961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6470 vulnerable 2026-06-08 05:14:11.599120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11043 vulnerable 2026-06-08 05:12:26.296081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0211 vulnerable 2026-06-08 05:12:19.315473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.