Enterprise Linux Tus
25 CVEs tracked. 4 of them are in CISA KEV.
This hub aggregates every CVE we track for Enterprise Linux Tus, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
Enterprise Linux Tus CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 1 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 2 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 2 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 25 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical2
- High13
- Medium9
- Low1
Latest CVEs
The 15 most recently published vulnerabilities affecting Enterprise Linux Tus.
- CVE-2026-31431crypto: algif_aead - Revert to operating out-of-place7.8
- CVE-2026-34486Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor7.5
- CVE-2025-62230Xorg: xwayland: use-after-free in xkb client resource removal7.3
- CVE-2025-62231Xorg: xmayland: value overflow in xkbsetcompatmap()7.3
- CVE-2025-31277The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciousl...8.8
- CVE-2024-3183Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force8.1
- CVE-2024-0229Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access7.8
- CVE-2023-4806Glibc: potential use-after-free in getaddrinfo()5.9
- CVE-2023-4527Glibc: stack read overflow in getaddrinfo in no-aaaa mode6.5
- CVE-2021-20316A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of...6.8
- CVE-2020-25717A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.8.1
- CVE-2016-2124A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.5.9
- CVE-2021-3672A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to ...5.6
- CVE-2021-3570A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or po...8.8
- CVE-2020-14301An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allo...6.5
Product grouping is registry-driven, with AI assist and human review. How it works