Codeready Linux Builder Eus

Vendor:

First CVE: Nov 14, 2019 · Active for 6 years

20

Total CVEs

More Total CVEs than 94% of tracked products

4.0

Avg CVEs / Year

Higher CVE frequency than 83% of tracked products

7.1

Avg CVSS

Higher Avg CVSS than 43% of tracked products

10.0%

KEV Rate

Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Codeready Linux Builder Eus over time

Volume of CVEsAvg CVSS Base Score

First CVE

Nov 14, 2019

6 years ago

Most Recent CVE

Feb 27, 2025

513 days ago

CVE Severity & Scoring

Codeready Linux Builder Eus20 CVEs

30%

70%

All CVEs352,708 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local9 (45.0%)

Network10 (50.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network1 (5.0%)

Attack Complexity

Low15 (75.0%)

High5 (25.0%)

Unknown0 (0.0%)

User Interaction

None19 (95.0%)

Unknown0 (0.0%)

Required1 (5.0%)

Privileges Required

Low13 (65.0%)

High1 (5.0%)

None6 (30.0%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (20 CVEs).

20 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2023-4911HIGH A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to us	Oct 3, 2023	7.8	98	YES	YES
CVE-2022-0435HIGH A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is	Mar 25, 2022	8.8	67	NO	NO
CVE-2019-8720HIGH A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addre	Mar 6, 2023	8.8	65	YES	NO
CVE-2023-5869HIGH A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue ex	Dec 10, 2023	8.8	29	NO	NO
CVE-2019-11135MEDIUM TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with l	Nov 14, 2019	6.5	26	NO	NO
CVE-2019-14815HIGH A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.	Nov 25, 2019	7.8	25	NO	NO
CVE-2025-1756HIGH mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a craft	Feb 27, 2025	7.8	24	NO	NO
CVE-2021-3609HIGH .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escala	Mar 3, 2022	7.0	24	NO	NO
CVE-2023-3758HIGH A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denyin	Apr 18, 2024	7.1	23	NO	NO
CVE-2023-6536HIGH A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading	Feb 7, 2024	7.5	23	NO	NO

View all 20 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (20 CVEs).

CISA KEV

2 CVEs

10.0% of CVEs· 97th percentile

Metasploit

1 CVE

5.0% of CVEs· 97th percentile

Nuclei

1 CVE

5.0% of CVEs· 97th percentile

ExploitDB

1 CVE

5.0% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (20 CVEs).

Media Mentions

Signals from CVEs in this product scope (20 CVEs).

Top CNAs Publishing CVEs For Codeready Linux Builder Eus

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	KEV	Exploits
9.6	2	7.5	41.2%	1	1
9.4	5	7.6	16.6%	1	1
9.2	12	6.9	8.3%	1	1
9.0	1	7.1	1.0%	0	0
8.8	2	7.5	0.7%	0	0
8.6	9	7.3	10.3%	2	1
8.4	4	7.5	1.4%	1	0
8.2	5	7.6	14.5%	0	0
8.1	3	7.1	1.4%	0	0