Codeready Linux Builder For Arm64

Vendor:

First CVE: Aug 23, 2023 · Active for 2 years

12
Total CVEs
More Total CVEs than 90% of tracked products
4.0
Avg CVEs / Year
Higher CVE frequency than 83% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 33% of tracked products
8.3%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Codeready Linux Builder For Arm64 over time

Volume of CVEsAvg CVSS Base Score
First CVE
Aug 23, 2023
2 years ago
Most Recent CVE
Nov 26, 2025
242 days ago

CVE Severity & Scoring

Codeready Linux Builder For Arm6412 CVEs
All CVEs352,719 CVEs
MediumHigh
Attack Vector
Local7 (58.3%)
Network4 (33.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network1 (8.3%)
Attack Complexity
Low8 (66.7%)
High4 (33.3%)
Unknown0 (0.0%)
User Interaction
None10 (83.3%)
Unknown0 (0.0%)
Required2 (16.7%)
Privileges Required
Low6 (50.0%)
High0 (0.0%)
None6 (50.0%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (12 CVEs).

12 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-4911HIGH
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to us
Oct 3, 20237.898YESYES
CVE-2025-3155HIGH
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents,
Apr 3, 20257.433NONO
CVE-2025-13601HIGH
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a ver
Nov 26, 20257.730NONO
CVE-2025-2784MEDIUM
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byt
Apr 3, 20256.523NONO
CVE-2023-3758HIGH
A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denyin
Apr 18, 20247.123NONO
CVE-2023-4806MEDIUM
A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue i
Sep 18, 20235.923NONO
CVE-2024-1488HIGH
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process
Feb 15, 20247.322NONO
CVE-2023-4527MEDIUM
A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS resp
Sep 18, 20236.522NONO
CVE-2023-5633HIGH
The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being us
Oct 23, 20237.820NONO
CVE-2023-4042MEDIUM
A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghost
Aug 23, 20235.519NONO
View all 12 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (12 CVEs).

CISA KEV
1 CVE
8.3% of CVEs· 97th percentile
Metasploit
1 CVE
8.3% of CVEs· 97th percentile
Nuclei
1 CVE
8.3% of CVEs· 97th percentile
ExploitDB
1 CVE
8.3% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (12 CVEs).

Media Mentions

Signals from CVEs in this product scope (12 CVEs).

Top CNAs Publishing CVEs For Codeready Linux Builder For Arm64

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
9.617.70.3%00
9.2_aarch6417.30.3%00
9.0_aarch6476.914.0%11
8.0_aarch6466.32.4%00
8.017.70.3%00
10.0_aarch6416.50.8%00
10.017.70.3%00