Approved changes feed: RSS · Atom

cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.2_aarch64:*:*:*:*:*:*:*

part: o version: 9.2_aarch64 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductEnterprise Linux For Arm 64 (07a95203-512e-5cc4-93ce-3ed4b3df6f1d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3155 vulnerable 2026-06-08 07:23:08.316082 Yelp: arbitrary file read
HIGH (7.4)
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.
Published: 2025-04-03T13:34:18.878Z
Updated: 2026-06-29T20:36:07.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3049 vulnerable 2026-06-08 06:41:52.293578 Booth: specially crafted hash can lead to invalid hmac being accepted by booth server
MEDIUM (5.9)
A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.
Published: 2024-06-06T05:30:04.137Z
Updated: 2026-03-17T21:04:05.024Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1488 vulnerable 2026-06-08 06:25:40.232004 Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation
HIGH (8)
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
Published: 2024-02-15T05:04:13.994Z
Updated: 2025-11-11T15:29:53.824Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12085 vulnerable 2026-06-08 06:23:51.173063 Rsync: info leak via uninitialized stack contents
HIGH (7.5)
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
Published: 2025-01-14T17:37:16.036Z
Updated: 2026-07-26T12:59:49.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24809 vulnerable 2026-06-08 05:41:01.747998 net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
MEDIUM (6.5)
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a `GET-NEXT` to the `nsVacmAccessTable` to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong SNMPv3 credentials and avoid sharing the credentials. Those who must use SNMPv1 or SNMPv2c should use a complex community string and enhance the protection by restricting access to a given IP address range.
Published: 2024-04-16T19:56:07.108Z
Updated: 2024-08-03T04:20:50.442Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24808 vulnerable 2026-06-08 05:41:01.746791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24807 vulnerable 2026-06-08 05:41:01.740587 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24806 vulnerable 2026-06-08 05:41:01.739401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24805 vulnerable 2026-06-08 05:41:01.728547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.