Skip to contentRed Hat Enterprise Linux vulnerabilities
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in dbus_set_host_nameCVE-2023-38471Fix available6.2 Medium
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in avahi_dns_packet_append_recordCVE-2023-38469Fix available6.2 Medium
- opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreOpensc: potential pin bypass when card tracks its own login stateCVE-2023-40660Fix available6.6 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: integer overflow in igmpv3_newpack leading to exploitable memory accessCVE-2023-42752Fix available5.5 Medium
- gnome tracker miners, red hat enterprise linux 7, enterprise linux 8 +12 more +14 moreTracker-miners: sandbox escapeCVE-2023-5557Fix available7.5 High
- opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreOpensc: multiple memory issues with pkcs15-init (enrollment tool)CVE-2023-40661Fix available5.4 Medium
- samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 moreSamba: smbd allows client access to unix domain sockets on the file system as rootCVE-2023-3961Fix available9.1 Critical
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty's wrapping plain trust manager silently disables hostname verificationCVE-2026-50010Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +24 more +26 morenetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory ExhaustionCVE-2026-48043Fix available5.3 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty has Insufficient Bailiwick Validation for NS RecordsCVE-2026-47691Fix available8.7 High
- netty, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, data grid 8.6.2 +8 more +10 moreNetty: SCTP reassembly nests buffers without boundCVE-2026-46340Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME RecordsCVE-2026-45674Public exploitFix available8.7 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytesCVE-2026-45416Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator MaskingCVE-2026-44249Fix available8.1 High
- netty, io.netty netty-codec-http, netty-codec-http2 +37 more +39 moreNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoSCVE-2026-42587Fix available7.5 High
- netty, io.netty netty-codec-http, red hat cryostat 4 on rhel 9 +33 more +35 moreNetty: HttpClientCodec response desynchronizationCVE-2026-42584Fix available7.3 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +32 more +34 moreNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling SanitizationCVE-2026-42581Fix available5.8 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)CVE-2026-42579Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +32 more +34 moreNetty: HTTP Header Injection via HttpProxyHandler Disabled ValidationCVE-2026-42578Fix available2.9 Low
- netty, red hat cryostat 4, cryostat 4 on rhel 9 +37 more +39 moreNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame BypassCVE-2026-33871Public exploitFix available8.7 High
- netty, red hat cryostat 4 on rhel 9, logging subsystem for red hat openshift +33 more +35 moreNetty: HTTP Request Smuggling via Chunked Extension Quoted-String ParsingCVE-2026-33870Fix available7.5 High
- samba, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreSamba: ad dc busy rpc multiple listener dosCVE-2023-42670Fix available6.5 Medium
- samba, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreSamba: "rpcecho" development server allows denial of service via sleep() call on ad dcCVE-2023-42669Fix available6.5 Medium
- samba, fedora, red hat enterprise linux 6 +4 more +6 moreSamba: ad dc password exposure to privileged users and rodcsCVE-2023-4154Fix available7.5 High
- samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 moreSamba: smb clients can truncate files with read-only permissionsCVE-2023-4091Fix available6.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: xfrm: out-of-bounds read in __xfrm_state_filter_match()CVE-2023-39194Fix available3.2 Low
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: xtables sctp out-of-bounds read in match_flags()CVE-2023-39193Fix available6.1 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: xtables out-of-bounds read in u32_match_it()CVE-2023-39192Fix available6.7 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()CVE-2023-39189Fix available5.1 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more +4 moreImagemagick: heap use-after-free in coders/bmp.cCVE-2023-5341Fix available6.2 Medium
- openvswitch, fedora, red hat fast datapath for rhel 7 +12 more +14 moreOpenvswitch don't match packets on nd_target fieldCVE-2023-5366Fix available7.1 High
- debian linux, linux kernel, red hat enterprise linux 6 +8 more +10 moreKernel: rsvp: out-of-bounds read in rsvp_classify()CVE-2023-42755Fix available6.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: ipv4: null pointer dereference in ipv4_send_dest_unreach()CVE-2023-42754Fix available5.5 Medium
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreUse-after-free in smb2_is_status_io_timeout()CVE-2023-1192Fix available6.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreKernel: ebpf: insufficient stack type checks in dynptrCVE-2023-39191Fix available8.2 High
- dogtagpki network security services for java, fedora extra packages for enterprise linux, fedora +7 more +9 moreMemory leak on tls connectionsCVE-2022-4132Fix available5.9 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreKernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.hCVE-2023-4732Fix available4.7 Medium
- gnu glibc, c library, canonical ubuntu linux +48 more +50 moreGlibc: buffer overflow in ld.so leading to privilege escalationCVE-2023-4911In KEVPublic exploitFix availableEPSS 63.8%7.8 High
- gnu grub2, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: out-of-bounds read at fs/ntfs.cCVE-2023-4693Fix available5.3 Medium
- gnu grub2, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code executionCVE-2023-4692Fix available7.5 High
- libxpm project libxpm, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibxpm: out of bounds read on xpm with corrupted colormapCVE-2023-43789Fix available5.5 Medium
- x.org libxpm, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibxpm: out of bounds read in xpmcreatexpmimagefrombuffer()CVE-2023-43788Fix available5.5 Medium
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: integer overflow in xcreateimage() leading to a heap overflowCVE-2023-43787Fix available7.8 High
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: stack exhaustion from infinite recursion in putsubimage()CVE-2023-43786Public exploitFix available5.5 Medium
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: out-of-bounds memory access in _xkbreadkeysyms()CVE-2023-43785Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreKernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swapCVE-2023-42756Fix available4.4 Medium
- redhat libnbd, red hat enterprise linux 8, enterprise linux 8 advanced virtualization +2 more +4 moreLibnbd: crash or misbehaviour when nbd server returns an unexpected block sizeCVE-2023-5215Fix available5.3 Medium
- debian linux, linux kernel, red hat enterprise linux 6 +17 more +19 moreKernel: netfilter: potential slab-out-of-bound access due to integer underflowCVE-2023-42753Fix available7.0 High
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: xml external entity (xxe) injectionCVE-2022-4245Fix available4.3 Medium
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: directory traversalCVE-2022-4244Public exploitFix available7.5 High
- Show moreLoading…