Skip to contentRed Hat Enterprise Linux 10 vulnerabilities
- samba rsync, almalinux, archlinux arch linux +44 more +46 moreRsync: info leak via uninitialized stack contentsCVE-2024-12085Public exploitFix available7.5 High
- samba rsync, almalinux, archlinux arch linux +11 more +13 moreRsync: heap buffer overflow in rsync due to improper checksum length handlingCVE-2024-12084Public exploitFix availableEPSS 72.5%9.8 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpenjpeg: heap buffer overflow in lib/openjp2/j2k.cCVE-2024-56827Fix available5.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpenjpeg: heap buffer overflow in bin/common/color.cCVE-2024-56826Fix available5.6 Medium
- red hat fast datapath for red hat enterprise linux 7, fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9 +14 more +16 moreTuned: improper sanitization of `instance_name` parameter of the `instance_create()` methodCVE-2024-52337Fix available5.5 Medium
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 7 +5 more +7 moreTuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by rootCVE-2024-52336Fix available7.8 High
- avahi, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreAvahi: avahi wide-area dns uses constant source portCVE-2024-52615Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +7 more +9 morePodman: build context bind mountCVE-2025-4953Fix available7.4 High
- mutt, neomutt, red hat enterprise linux 10 +4 more +6 moreMutt: neomutt: bcc email header field is indirectly leaked by cryptographic info blockCVE-2024-49395Fix available5.3 Medium
- mutt, neomutt, red hat enterprise linux 10 +4 more +6 moreMutt: neomutt: to and cc email header fields are not protected by cryptographic signingCVE-2024-49393Fix available6.5 Medium
- red hat ansible automation platform execution environments, ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +2 more +4 moreAnsible-core: unsafe tagging bypass via hostvars object in ansible-coreCVE-2024-11079Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 morePam: improper hostname interpretation in pam_access leads to access control bypassCVE-2024-10963Fix available7.4 High
- red hat ansible automation platform execution environments, ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +4 more +6 moreAnsible-core: ansible-core user may read/write unauthorized contentCVE-2024-9902Public exploitFix available6.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +15 more +17 moreXorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerabilityCVE-2024-9632Fix available7.8 High
- linux-pam, red hat enterprise linux 10, enterprise linux 7 +3 more +5 morePam: libpam: libpam vulnerable to read hashed passwordCVE-2024-10041Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 7.7 advanced update support +13 more +15 moreNetworkmanager-libreswan: local privilege escalation via leftupdownCVE-2024-9050Fix available7.8 High
- red hat openshift developer tools and services, enterprise linux 10, enterprise linux 8 +25 more +27 morePodman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)CVE-2024-9676Fix available6.5 Medium
- red hat ansible automation platform 2, enterprise linux 10, enterprise linux 8 +1 more +3 morePyo3: risk of use-after-free in `borrowed` reads from python weak referencesCVE-2024-9979Fix available5.3 Medium
- buildah project buildah, red hat openshift developer tools and services, enterprise linux 10 +30 more +32 moreBuildah: buildah allows arbitrary directory mountCVE-2024-9675Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreBuildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instructionCVE-2024-9407Fix available4.7 Medium
- containers common, red hat enterprise linux 10, enterprise linux 8 +10 more +12 morePodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go libraryCVE-2024-9341Fix available5.4 Medium
- red hat nbde tang server, openshift developer tools and services, openshift pipelines +34 more +36 moreGolang-fips: golang fips zeroed bufferCVE-2024-9355Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: information leak in virtio devicesCVE-2024-8612Fix available3.8 Low
- qemu, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreQemu-kvm: usb: assertion failure in usb_ep_get()CVE-2024-8354Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +12 more +14 morePcp: pmpost symlink attack allows escalating pcp to root userCVE-2024-45770Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +12 more +14 morePcp: pmcd heap corruption through metric pmstore operationsCVE-2024-45769Fix available5.5 Medium
- red hat ansible automation platform execution environments, discovery 1 for rhel 9, ansible automation platform 2.4 for rhel 8 +7 more +9 moreAnsible-core: exposure of sensitive information in ansible vault files due to improper loggingCVE-2024-8775Fix available5.5 Medium
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: heap buffer overflow in openpgp driver when generating keyCVE-2024-8443Fix available2.9 Low
- red hat directory server 11, directory server 12, enterprise linux 10 +4 more +6 more389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)CVE-2024-8445Fix available5.7 Medium
- containers aardvark-dns, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreContainers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of serviceCVE-2024-8418Fix available7.5 High
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: uninitialized values after incorrect or missing checking return values of functions in libopenscCVE-2024-45617Fix available3.9 Low
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: incorrect handling of the length of buffers or files in pkcs15initCVE-2024-45620Fix available3.9 Low
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: incorrect handling length of buffers or files in libopenscCVE-2024-45619Fix available4.3 Medium
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15initCVE-2024-45618Fix available3.9 Low
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: uninitialized values after incorrect check or usage of apdu response values in libopenscCVE-2024-45616Fix available3.9 Low
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15initCVE-2024-45615Fix available3.9 Low
- redhat libvirt, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibvirt: crash of virtinterfaced via virconnectlistinterfaces()CVE-2024-8235Fix available6.2 Medium
- libtiff, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreLibtiff: null pointer dereference in tif_dirinfo.cCVE-2024-7006Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +11 more +13 moreQemu: denial of service via improper synchronization in qemu nbd server during socket closureCVE-2024-7409Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8 advanced virtualization +1 more +3 moreLibnbd: nbd server improper certificate validationCVE-2024-7383Fix available7.4 High
- podman project podman, fedoraproject fedora, red hat enterprise linux 10 +7 more +9 morePodman: kernel: containers in shared ipc namespace are vulnerable to denial of service attackCVE-2024-3056Fix available7.7 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGtk3: gtk2: library injection from cwdCVE-2024-6655Fix available7.0 High
- redhat 389 directory server, directory server, red hat directory server 11 +7 more +9 more389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search requestCVE-2024-6237Fix available6.5 Medium
- red hat enterprise linux 9, enterprise linux 10, enterprise linux 6 +11 more +13 moreOpenssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9CVE-2024-6409Fix availableEPSS 27.9%7.0 High
- qemu, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreQemu-kvm: virtio-net: queue index out-of-bounds access in software rssCVE-2024-6505Fix available6.8 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreCockpit: authenticated user can kill any process when enabling pam_env's user_readenv optionCVE-2024-6126Fix available3.2 Low
- red hat advanced virtualization for rhel 8.2.1, advanced virtualization for rhel 8.4.0.eus, enterprise linux 10 +15 more +17 moreQemu-kvm: 'qemu-img info' leads to host file read/writeCVE-2024-4467Fix available7.8 High
- openbsd openssh, almalinux, amazon linux +71 more +73 moreOpenssh: regresshion - race condition in ssh allows rce/dosCVE-2024-6387Public exploitFix availableEPSS 99.5%8.1 High
- freedesktop poppler, red hat enterprise linux 10, enterprise linux 6 +4 more +6 morePoppler: pdfinfo: crash in broken documents when using -dests parameterCVE-2024-6239Fix available7.5 High
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 for rhel 8, directory server 11.9 for rhel 8 +9 more +11 more389-ds-base: malformed userpassword hash may cause denial of serviceCVE-2024-5953Fix available5.7 Medium
- Show moreLoading…