Skip to contentRed Hat Enterprise Linux vulnerabilities
- red hat directory server 11.5 e4s for rhel 8, directory server 11.8 for rhel 8, directory server 11.9 for rhel 8 +7 more +9 more389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.cCVE-2024-2199Fix available5.7 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreGnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificateCVE-2024-5148Fix available7.5 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreQemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crashCVE-2024-4693Fix available5.5 Medium
- red hat multicluster engine for kubernetes, oadp-1.3-rhel-9, openshift developer tools and services +28 more +30 moreContainers/image: digest type does not guarantee valid typeCVE-2024-3727Fix available8.3 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +3 more +5 moreLibvirt: stack use-after-free in virnetclientioeventloop()CVE-2024-4418Fix available6.2 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreRpm-ostree: world-readable /etc/shadow fileCVE-2024-2905Fix available6.2 Medium
- redhat openssl, red hat enterprise linux 6, enterprise linux 7 +2 more +4 morePerl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)CVE-2024-2467Fix available5.9 Medium
- qemu, netapp hci compute node, red hat enterprise linux 6 +15 more +17 moreQemu: sdhci: heap buffer overflow in sdhci_write_dataport()CVE-2024-3447Fix available6.0 Medium
- fedoraproject sssd, fedora, red hat enterprise linux 6 +29 more +31 moreSssd: race condition during authorization leads to gpo policies functioning inconsistentlyCVE-2023-3758Fix available7.1 High
- qemu, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreQemu-kvm: net: assertion failure in update_sctp_checksum()CVE-2024-3567Fix available5.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreQemu: virtio: dma reentrancy issue leads to double free vulnerabilityCVE-2024-3446Fix available8.2 High
- red hat enterprise linux 8, enterprise linux 9 +1 moreRust-openssl: timing based side-channel can lead to a bleichenbacher style attackCVE-2024-32965.9 Medium
- tukaani xz, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreXz: malicious code in distributed sourceCVE-2024-3094Public exploitFix availableEPSS 90.9%10.0 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +10 more +12 morePcp: exposure of the redis server backend allows remote command execution via pmproxyCVE-2024-3019Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreCockpit: command injection when deleting a sosreport with a crafted nameCVE-2024-2947Fix available7.3 High
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +2 moreFreeipa: specially crafted http requests potentially lead to denial of serviceCVE-2024-1481Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 moreGnutls: vulnerable to minerva side-channel information leakCVE-2024-28834Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGnutls: potential crash during chain building/verificationCVE-2024-28835Fix available5.0 Medium
- red hat nbde tang server, openshift developer tools and services, openshift pipelines +32 more +34 moreGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloadsCVE-2024-1394Fix available7.5 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreLibvirt: negative g_new0 length can lead to unbounded memory allocationCVE-2024-2494Fix available6.2 Medium
- red hat enterprise linux 8, enterprise linux 9 +1 moreOsbuild-composer: race condition may disable gpg verification for package repositoriesCVE-2024-2307Fix available6.1 Medium
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 8.6 extended update support +9 more +11 moreBuildah: buildah: container escape via improper bind mount validationCVE-2024-1753Fix available8.6 High
- libdwarf project libdwarf, fedoraproject fedora, red hat enterprise linux 7 +2 more +4 moreLibdwarf: crashes randomly on fuzzed objectCVE-2024-2002Fix available7.5 High
- es iperf3, red hat enterprise linux 7, enterprise linux 8 +5 more +7 moreIperf3: possible denial of serviceCVE-2023-7250Fix available5.3 Medium
- unixodbc, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreUnixodbc: out of bounds stack write due to pointer-to-integer types conversionCVE-2024-1013Fix available7.8 High
- redhat libvirt, debian linux, red hat enterprise linux 6 +5 more +7 moreLibvirt: null pointer dereference in udevconnectlistallinterfaces()CVE-2024-2496Fix available5.0 Medium
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 10 +5 more +7 moreOvn: insufficient validation of bfd packets may lead to denial of serviceCVE-2024-2182Fix available6.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreLibvirt: off-by-one error in udevlistinterfacesbystatus()CVE-2024-1441Public exploitFix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +7 more +9 moreLibgcrypt: vulnerable to marvin attackCVE-2024-2236Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +13 more +15 moreXorg-x11-server: use-after-free in procrenderaddglyphsCVE-2024-31083Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreXorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmapCVE-2024-31082Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +13 more +15 moreXorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdeviceCVE-2024-31081Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +13 more +15 moreXorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsCVE-2024-31080Fix available7.3 High
- sgi performance co-pilot, red hat enterprise linux 6, enterprise linux 7 +3 more +5 morePcp: unsafe use of directories allows pcp to root privilege escalationCVE-2023-6917Fix available6.0 Medium
- fedoraproject unbound, red hat enterprise linux 10, enterprise linux 6 +31 more +33 moreUnbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalationCVE-2024-1488Fix available8.0 High
- opensc project opensc, fedoraproject fedora, red hat enterprise linux 7 +3 more +5 moreOpensc: memory use after free in authentic driver when updating token infoCVE-2024-1454Fix available3.4 Low
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: stack overflow problem in open vswitch kernel module leading to dosCVE-2024-1151Fix available5.5 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: race condition leads to use after free during vma lock in lock_vma_under_rcuCVE-2024-1312Fix available5.1 Medium
- fedoraproject fedora, red hat directory server 11.5 e4s for rhel 8, directory server 11.7 for rhel 8 +22 more +24 more389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)CVE-2024-1062Fix available5.5 Medium
- fedora, openvswitch, rdo openstack rdo +5 more +7 moreOpenvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packetCVE-2023-3966Fix available7.5 High
- debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 moreKernel: null pointer dereference in __nvmet_req_completeCVE-2023-6536Fix available6.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +22 more +24 moreKernel: null pointer dereference in nvmet_tcp_execute_requestCVE-2023-6535Fix available6.5 Medium
- debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 moreKernel: null pointer dereference in nvmet_tcp_build_iovecCVE-2023-6356Fix available6.5 Medium
- gnu grub2, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreGrub2: grub2-set-bootflag can be abused by local (pseudo-)usersCVE-2024-1048Fix available3.3 Low
- redhat ansible, fedoraproject fedora, red hat ansible automation platform 2.4 for rhel 8 +7 more +9 moreAnsible-core: possible information leak in tasks that ignore ansible_no_log configurationCVE-2024-0690Fix available5.0 Medium
- m2crypto project m2crypto, red hat enterprise linux 6, enterprise linux 7 +7 more +9 moreM2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657CVE-2023-50781Fix available7.5 High
- gnu cpio, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreCpio: extraction allows symlinks which enables remote command executionCVE-2023-72165.3 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +5 more +7 moreKernel: marvin vulnerability side-channel leakage in the rsa decryption operationCVE-2023-6240Fix available6.5 Medium
- linuxfoundation runc, fedoraproject fedora, red hat ocp-tools-4.15-rhel-8 +26 more +28 morerunc container breakout through process.cwd trickery and leaked fdsCVE-2024-21626Public exploitFix availableEPSS 18.9%8.6 High
- opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +11 more +13 moreOpensc: side-channel leaks while stripping encryption pkcs#1 paddingCVE-2023-5992Fix available5.6 Medium
- Show moreLoading…