ChainRed Hat Enterprise Linux 3
Red Hat Enterprise Linux 3: variants (2006–2018)
5 CVEs over 3 generations, 5 Sep 2006 to 7 Nov 2018.
Family tree
Left to right by publication date.Oldest first. Select a CVE to open it.- CVE-2006-43395 Sep 2006 First in the chain
- CVE-2006-479014 Sep 2006 variant of CVE-2006-4339
- CVE-2014-156825 Sep 2014 No direct link to an earlier CVE
- CVE-2018-1615226 Sep 2018 variant of CVE-2006-4790variant of CVE-2014-1568
- CVE-2018-162537 Nov 2018 variant of CVE-2006-4790variant of CVE-2014-1568
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low Link confidenceHow strong the evidence is that two CVEs are related. High: stated in the CVE text or linked in an advisory, or the same code was patched one release apart. Medium: the same code, or a version step plus a similar description. Low: similar description only.
CVEs in this family
Table view of the tree| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2006-4339 | 5 Sep 2006 | Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass | First in chain | 24.8 |
| CVE-2006-4790 | 14 Sep 2006 | verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the… | CVE-2006-4339 · variant in the same code · High | 17.0 |
| CVE-2014-1568 | 25 Sep 2014 | Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in… | First in chain | 19.4 |
| CVE-2018-16152 | 26 Sep 2018 | In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the… | CVE-2006-4790 · variant in the same code · High | 21.2 |
| CVE-2018-16253 | 7 Nov 2018 | In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not properly… | CVE-2006-4790 · variant in the same code · High | 9.9 |