Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Approved changes feed: RSS · Atom
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.6_ppc64le:*:*:*:*:*:*:*
part: o version: 9.6_ppc64le update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions (100537f5-dacd-57ef-af5b-9c04deca550c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2784 |
vulnerable | 2026-06-08 07:16:58.318872 |
Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content
HIGH (7)
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.
Published: 2025-04-03T01:40:12.164Z
Updated: 2026-06-30T03:15:48.386Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12088 |
vulnerable | 2026-06-08 06:23:51.235140 |
Rsync: --safe-links option bypass leads to path traversal
MEDIUM (6.5)
A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.
Published: 2025-01-14T17:38:34.890Z
Updated: 2026-06-29T23:43:47.457Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12087 |
vulnerable | 2026-06-08 06:23:51.226347 |
Rsync: path traversal vulnerability in rsync
MEDIUM (6.5)
A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to write files outside of the client's intended destination directory. A malicious server could write malicious files to arbitrary locations named after valid directories/paths on the client.
Published: 2025-01-14T17:57:33.927Z
Updated: 2026-06-29T23:43:47.402Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12085 |
vulnerable | 2026-06-08 06:23:51.198237 |
Rsync: info leak via uninitialized stack contents
HIGH (7.5)
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
Published: 2025-01-14T17:37:16.036Z
Updated: 2026-07-26T12:59:49.331Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0193 |
vulnerable | 2026-06-08 06:21:59.970914 |
Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation
HIGH (7.8)
A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.
Published: 2024-01-02T18:05:13.332Z
Updated: 2026-03-04T06:58:13.138Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4911 |
vulnerable | 2026-06-08 06:16:14.889825 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3758 |
vulnerable | 2026-06-08 06:09:40.488881 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.