Approved changes feed: RSS · Atom

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:x64:*

part: o version: 7.0 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductEnterprise Linux Desktop (7e773912-d839-52e1-9ad7-86d4d77ab763)
Edition*
Language*
Software edition*
Target software*
Target hardwarex64
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-14823 vulnerable 2026-06-08 05:12:56.176121 Details available
MEDIUM (6.8)
A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly verify the chain and could be vulnerable to attacks such as Man in the Middle.
Published: 2019-10-14T19:35:04.000Z
Updated: 2024-08-05T00:26:39.111Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3665 vulnerable 2026-06-08 05:11:40.816810 Details available
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.
Published: 2018-06-21T20:00:00.000Z
Updated: 2024-09-17T01:01:36.405Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14650 vulnerable 2026-06-08 05:10:53.217133 Details available
MEDIUM (5.9)
It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user. A local attacker may use this flaw by waiting for a legit user to run sos-collector and steal the collected data in the /var/tmp directory.
Published: 2018-09-27T20:00:00.000Z
Updated: 2024-08-05T09:38:12.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14622 vulnerable 2026-06-08 05:10:53.121058 Details available
MEDIUM (5.3)
A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an rpc-based application to crash by flooding it with new connections.
Published: 2018-08-30T13:00:00.000Z
Updated: 2024-08-05T09:29:51.941Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.