Red Hat Enterprise Linux For IBM Z Systems Extended Update Support (EUS) 8.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.1:*:*:*:*:*:*:*

part: o version: 8.1 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductEnterprise Linux For Ibm Z Systems Eus (3149e6b3-041b-53fe-b934-2ae23a5430ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-40438 vulnerable 2026-06-08 05:35:17.997167 mod_proxy SSRF
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
Published: 2021-09-16T14:40:23.000Z
Updated: 2025-10-21T23:25:32.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3672 vulnerable 2026-06-08 05:33:53.387713 Details available
A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.
Published: 2021-11-23T00:00:00.000Z
Updated: 2024-10-15T17:14:27.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3656 vulnerable 2026-06-08 05:33:53.304391 Details available
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape.
Published: 2022-03-04T18:41:26.000Z
Updated: 2024-08-03T17:01:07.792Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9490 vulnerable 2026-06-08 05:28:02.043945 Details available
Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability for unpatched servers.
Published: 2020-08-07T15:24:49.000Z
Updated: 2024-08-04T10:26:16.299Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6454 vulnerable 2026-06-08 05:14:11.548281 Details available
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
Published: 2019-03-17T16:38:57.000Z
Updated: 2024-08-04T20:23:21.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15718 vulnerable 2026-06-08 05:12:57.880042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14815 vulnerable 2026-06-08 05:12:56.096271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.