Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	–	EPSS 0.3%	CVE-2024-52336Red Hat Security Advisory: tuned security update HighEPSS 0.3%2025-02-03GCVE DatabaseCVE-2024-52336 Two security vulnerabilities were identified in the tuned packages for Red Hat Enterprise Linux Fast Datapath 8. The first involves improper sanitization of the instance_name parameter in the instance_create() method (CVE-2024-52337). The second allows arbitrary scripts to be executed as root via the script_pre and script_post options (CVE-2024-52336). These issues have been addressed in updated tuned packages provided by Red Hat. The update is rated as Important by Red Hat Product Security. Users should apply the available update to mitigate these vulnerabilities. EPSS 0.3%Vulnerability Red Hat Product Security	GCVE Database	2025-02-03
Medium	–	EPSS 0.3%	CVE-2024-52337Red Hat Security Advisory: tuned security update MediumEPSS 0.3%2024-12-17GCVE DatabaseCVE-2024-52337 A security vulnerability (CVE-2024-52337) exists in the tuned packages used by Red Hat Enterprise Linux. The issue involves improper sanitization of the 'instance_name' parameter in the instance_create() method. This flaw could potentially allow unintended behavior due to insufficient input validation. Red Hat has released security updates addressing this vulnerability for multiple versions of Red Hat Enterprise Linux, including Fast Datapath 7 and Extended Update Support 9.2. The severity is rated as medium. A patch is available and should be applied to affected systems. EPSS 0.3%Vulnerability Red Hat Product Security	GCVE Database	2024-12-17

Page 1 of 1 · 2 duplicate CVE records merged