Approved changes feed: RSS · Atom

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:*

part: o version: 9.2_s390x update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductEnterprise Linux For Ibm Z Systems (a39a6371-9d32-5add-ab02-9ee47a18504a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-13601 vulnerable 2026-06-08 07:04:32.603940 Glib: integer overflow in in g_escape_uri_string()
HIGH (7.7)
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
Published: 2025-11-26T14:44:22.680Z
Updated: 2026-06-29T23:29:30.203Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3049 vulnerable 2026-06-08 06:41:52.296470 Booth: specially crafted hash can lead to invalid hmac being accepted by booth server
MEDIUM (5.9)
A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.
Published: 2024-06-06T05:30:04.137Z
Updated: 2026-03-17T21:04:05.024Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1488 vulnerable 2026-06-08 06:25:40.237090 Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation
HIGH (8)
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
Published: 2024-02-15T05:04:13.994Z
Updated: 2025-11-11T15:29:53.824Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12085 vulnerable 2026-06-08 06:23:51.178087 Rsync: info leak via uninitialized stack contents
HIGH (7.5)
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
Published: 2025-01-14T17:37:16.036Z
Updated: 2026-07-26T12:59:49.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0193 vulnerable 2026-06-08 06:21:59.931160 Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation
HIGH (7.8)
A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.
Published: 2024-01-02T18:05:13.332Z
Updated: 2026-03-04T06:58:13.138Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5157 vulnerable 2026-06-08 06:19:42.715338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24809 vulnerable 2026-06-08 05:41:01.748147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24808 vulnerable 2026-06-08 05:41:01.747051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24807 vulnerable 2026-06-08 05:41:01.740650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24806 vulnerable 2026-06-08 05:41:01.739554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24805 vulnerable 2026-06-08 05:41:01.731727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.