Centos

8 CVEs across 2 Centos products. Browse Centos vulnerabilities, severities, and proof-of-concept exploits.

Centos products with known CVEs

ProductCVEs
Centos7
Stream1
Centos CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-23238Medium6.52022-08-10Linux deployments of StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.2 deployed with a Linux kernel version less than 4.7.0 are susc…
CVE-2021-20315Medium6.12022-02-18A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOM…
CVE-2022-24121High7.52022-02-03SQL Injection vulnerability discovered in Unified Office Total Connect Now that would allow an attacker to extract sensitive information through a cookie param…
CVE-2020-5291High7.22020-03-31Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option ca…
CVE-2019-19906High7.52019-12-19cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The…
CVE-2017-1000253High7.82017-10-05Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on Apri…
CVE-2011-41442012-02-02Unspecified vulnerability in EMC Documentum Content Server 6.0, 6.5 before SP2 P02, 6.5 SP3 before SP3 P02, and 6.6 before P02 allows local users to obtain "hi…
CVE-2007-62832007-12-18Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized nam…