Skip to contentRed Hat Enterprise Linux 10 vulnerabilities
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +16 more +18 moreFreeipa: user can obtain a hash of the passwords of all domain users and perform offline brute forceCVE-2024-3183Public exploitFix available8.1 High
- gnu nano, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreNano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned fileCVE-2024-5742Fix available6.7 Medium
- clusterlabs booth, red hat enterprise linux 10, enterprise linux 7 +17 more +19 moreBooth: specially crafted hash can lead to invalid hmac being accepted by booth serverCVE-2024-3049Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 8 +11 more +13 moreLibndp: buffer overflow in route information length fieldCVE-2024-5564Fix available8.1 High
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 for rhel 8, directory server 11.8 for rhel 8 +10 more +12 more389-ds-base: potential denial of service via specially crafted kerberos as-req requestCVE-2024-3657Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreGnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificateCVE-2024-5148Fix available7.5 High
- red hat multicluster engine for kubernetes, oadp-1.3-rhel-9, openshift developer tools and services +28 more +30 moreContainers/image: digest type does not guarantee valid typeCVE-2024-3727Fix available8.3 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreRpm-ostree: world-readable /etc/shadow fileCVE-2024-2905Fix available6.2 Medium
- tukaani xz, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreXz: malicious code in distributed sourceCVE-2024-3094Public exploitFix availableEPSS 90.9%10.0 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +10 more +12 morePcp: exposure of the redis server backend allows remote command execution via pmproxyCVE-2024-3019Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreCockpit: command injection when deleting a sosreport with a crafted nameCVE-2024-2947Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 moreGnutls: vulnerable to minerva side-channel information leakCVE-2024-28834Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGnutls: potential crash during chain building/verificationCVE-2024-28835Fix available5.0 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +7 more +9 moreLibgcrypt: vulnerable to marvin attackCVE-2024-2236Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +13 more +15 moreXorg-x11-server: use-after-free in procrenderaddglyphsCVE-2024-31083Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreXorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmapCVE-2024-31082Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +13 more +15 moreXorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdeviceCVE-2024-31081Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +13 more +15 moreXorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsCVE-2024-31080Fix available7.3 High
- fedoraproject unbound, red hat enterprise linux 10, enterprise linux 6 +31 more +33 moreUnbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalationCVE-2024-1488Fix available8.0 High
- linuxfoundation runc, fedoraproject fedora, red hat ocp-tools-4.15-rhel-8 +26 more +28 morerunc container breakout through process.cwd trickery and leaked fdsCVE-2024-21626Public exploitFix availableEPSS 18.9%8.6 High
- libtiff, apple ipados, iphone os +21 more +23 moreLibtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of serviceCVE-2023-52356Public exploitFix available7.5 High
- libtiff, red hat ai inference server 3.2, discovery 2 +11 more +13 moreLibtiff: tiffrasterscanlinesize64 produce too-big size and could cause oomCVE-2023-52355Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd memory exhaustion denial-of-service vulnerabilityCVE-2023-2593Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: deadlock in ksmbd_find_crypto_ctx()CVE-2023-32253Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd brute force delay bypass via asynchronous requestsCVE-2023-32251Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: memory leak via ksmbd session setup request with unknown ntlmssp message typeCVE-2023-32255Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSamba: check attribute access rights for ldap adds of computersCVE-2020-25720Fix available7.5 High
- isaacs node-tar, tar, red hat confidential compute attestation +40 more +42 morenode-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path SanitizationCVE-2026-23745Public exploitFix available8.2 High
- google angularjs, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreAngularJS XSS via SCE resource URL sanitization bypassCVE-2026-11998Fix available7.6 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +53 more +55 morefast-uri vulnerable to host confusion via percent-encoded authority delimitersCVE-2026-6322Fix available7.5 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +32 more +34 morefast-uri vulnerable to path traversal via percent-encoded dot segmentsCVE-2026-6321Fix available7.5 High
- golang net, golang.org/x/net golang.org/x/net/idna, go standard library net/http +147 more +149 moreInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821Fix available9.6 Critical
- openssl, red hat enterprise linux 10, enterprise linux 3 +11 more +13 moreOpenssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypassCVE-2006-4339Fix available9.1 Critical