Red Hat Enterprise Linux: Mehrere Schwachstellen
WID-SEC-2022-0517 · first 07.08.2019 · updated 19.10.2026 · CVSS 7,3
What it is about
Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution. Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
Under what conditions?
Over the network and without logging in. This is the most dangerous combination: attackers can scan reachable devices automatically.
What can happen in the worst case
An attacker could use the vulnerability to
- dadurch die Integrität
- Vertraulichkeit
- Verfügbarkeit zu gefährden
Am I affected?
Affected according to the BSI:
- Open Source CentOS
- Debian Linux
- Amazon Linux 2
- Ubuntu Linux
- F5 BIG-IP
- SUSE Linux
- Oracle Linux
- Red Hat Enterprise Linux 7
- Gentoo Linux
- Dell PowerEdge T40
- SUSE openSUSE
- Dell Secure Connect Gateway <5.36.00.16
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- Dell Secure Connect Gateway 5.36.00.16
Is the vulnerability already being exploited?
None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.
Information and sources
- Original BSI advisory (WID)
- Red Hat Security Advisory RHSA-2019:2332 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2336 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2308 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2285 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2290 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2280 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2283 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2272 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2276 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2258 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2229 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2237 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2196 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2197 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2189 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2177 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2178 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2162 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2157 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2137 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2125 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2126 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2112 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2101 vom 2019-08-06 access.redhat.com
- Red Hat Security Advisory RHSA-2019:2075 vom 2019-08-06 access.redhat.com
and 80 more sources in the original advisory
CVE: CVE-2016-3616, CVE-2017-15111, CVE-2017-15112, CVE-2017-17724, CVE-2017-18189, CVE-2017-18233, CVE-2017-18234, CVE-2017-18236, CVE-2017-18238, CVE-2017-5731, CVE-2017-5732, CVE-2017-5733, CVE-2017-5734, CVE-2017-5735, CVE-2017-6059, CVE-2017-6413, CVE-2018-0495, CVE-2018-1000132, CVE-2018-1000852, CVE-2018-1000876 …
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.