Skip to contentRed Hat Enterprise Linux 10 vulnerabilities
- xmlsoft libxml2, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +34 more +36 moreLibxml2: stack buffer overflow in xmllint interactive shell command handlingCVE-2025-6170Fix available2.5 Low
- gnome glib, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreGlib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstringCVE-2025-6052Fix available3.7 Low
- xmlsoft libxml2, red hat discovery 2, enterprise linux 10 +46 more +48 moreLibxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2CVE-2025-6021Fix available7.5 High
- gnome libxml2, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibxml: null pointer dereference leads to denial of service (dos)CVE-2025-49795Fix available7.5 High
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, discovery 2 +43 more +45 moreLibxml: type confusion leads to denial of service (dos)CVE-2025-49796Fix available9.1 Critical
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, 3scale api management platform 2 +43 more +45 moreLibxml: heap use after free (uaf) leads to denial of service (dos)CVE-2025-49794Fix available9.1 Critical
- red hat builds for red hat openshift, custom metric autoscaler operator for red hat openshift, multicluster global hub +24 more +26 moreGithub.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect resultsCVE-2025-8556Fix available3.7 Low
- libarchive, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +35 more +37 moreLibarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.cCVE-2025-5914Fix available7.8 High
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: reading past eof may be triggered for piped file streamsCVE-2025-5918Fix available3.9 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.cCVE-2025-5917Fix available2.8 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: integer overflow while reading warc files at archive_read_support_format_warc.cCVE-2025-5916Fix available3.9 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.cCVE-2025-5915Public exploitFix available6.6 Medium
- samba, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreSamba: smbd doesn't pick up group membership changes when re-authenticating an expired smb sessionCVE-2025-0620Fix available4.9 Medium
- debian linux, linux kernel, systemd project systemd +14 more +16 moreSystemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dumpCVE-2025-4598Fix available4.7 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +12 more +14 moreCoreutils: heap buffer under-read in gnu coreutils sort via key specificationCVE-2025-5278Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +16 more +18 moreIcu: stack buffer overflow in the srbroot::addtag functionCVE-2025-5222Public exploitFix available7.0 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.2 advanced update support +11 more +13 moreGnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdusCVE-2025-5024Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.cCVE-2025-4969Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreLibsoup: integer overflow in cookie expiration date handling in libsoupCVE-2025-4945Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoupCVE-2025-4948Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer dereference in libsoup may lead to denial of serviceCVE-2025-4476Public exploitFix available4.3 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreGnome-remote-desktop: freerdp: unauthenticated rdp packet causes segfault in freerdp leading to denial of serviceCVE-2025-4478Fix available6.5 Medium
- nbdkit project nbdkit, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreNbd: nbdkit: integer overflow triggers an assertion resulting in denial of serviceCVE-2025-47712Fix available6.5 Medium
- nbdkit project nbdkit, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreNbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of serviceCVE-2025-47711Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreYggdrasil: local privilege escalation in yggdrasilCVE-2025-39317.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: grub allow access to encrypted device through cli once root device is unlocked via tpmCVE-2025-4382Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +34 more +36 moreGlib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unicharCVE-2025-4373Fix available4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: cookie domain validation bypass via uppercase characters in libsoupCVE-2025-4035Fix available4.3 Medium
- apache http server, debian linux, red hat enterprise linux 10 +14 more +16 moreMod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabledCVE-2025-3891Fix available7.5 High
- gnome glib, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGlib: glib crash after long command lineCVE-2025-4056Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreLibsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a serverCVE-2025-46421Fix available6.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreLibsoup: memory leak on soup_header_parse_quality_list() via soup-headers.cCVE-2025-46420Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 9, enterprise linux 9.4 extended update support +2 more +4 moreMod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requestsCVE-2024-10306Fix available5.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreLibsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valueCVE-2025-32911Fix available9.0 Critical
- red hat discovery 2, enterprise linux 10, enterprise linux 6 +26 more +28 moreKrb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisionsCVE-2025-3576Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of processCVE-2025-32914Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authenticationCVE-2025-32912Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with di…CVE-2025-32910Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.cCVE-2025-32909Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: denial of service on libsoup through http/2 serverCVE-2025-32908Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: denial of service in server when client requests a large amount of overlapping ranges with range headerCVE-2025-32907Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreLibsoup: out of bounds reads in soup_headers_parse_request()CVE-2025-32906Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreLibsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition headerCVE-2025-32913Fix available7.5 High
- red hat directory server 11, directory server 12, enterprise linux 10 +7 more +9 moreRust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`CVE-2025-3416Fix available3.7 Low
- red hat directory server 11, directory server 12, enterprise linux 10 +8 more +10 moreCrossbeam-channel: crossbeam-channel vulnerable to double free on dropCVE-2025-4574Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +22 more +24 moreGlibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().CVE-2025-3360Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()CVE-2025-32053Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: heap buffer overflow in sniff_unknown()CVE-2025-32052Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: segmentation fault when parsing malformed data uriCVE-2025-32051Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: integer overflow in append_param_quotedCVE-2025-32050Fix available5.9 Medium
- Show moreLoading…