Skip to contentRed Hat Enterprise Linux 6 vulnerabilities
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreAbrt: abrt: abrt-server trusts client-supplied pid= allowing unprivileged read of other processes' /proc environCVE-2026-1103305.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreAbrt: abrt: incomplete cve-2026-54228/54229 fix — completeness gate bypassed via attacker-supplied count elementCVE-2026-1103317.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: null pointer dereference in pam responder when protocol version negotiation is skippedCVE-2026-1271015.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: local denial of service through unchecked oauth2 json code type in pam responderCVE-2026-1271005.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSssd: sssd: stack buffer overflow during rsa certificate-to-ssh key conversionCVE-2026-1270995.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreCpio: cpio: stack-based buffer overflow in write_out_tar_header() with long usernames/groupnamesCVE-2026-1268315.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSandboxed-containers: kernel: systemd-gpt-auto-generator: guest data leakage in confidential computing (sandboxed containers)CVE-2026-1218767.9 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreFreeradius: stack buffer overflow via unchecked eap-fast sessionticket lengthCVE-2026-1270307.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreFreeradius: stack-based buffer overflow via unbounded eap-sim identity lengthCVE-2026-1270297.5 High
- red hat enterprise linux 6, hardened images +1 moreBusybox: out-of-bounds read in volume_id_get_buffer() via an offset+length wraparoundCVE-2026-1247465.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: cpio hardlink target not sanitized under feature_path_traversal_protectionCVE-2026-1247446.3 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: divide-by-zero and heap over-read in the volume_id hfs+ proberCVE-2026-1247435.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: divide-by-zero in the volume_id fat prober via a zero sectors_per_cluster valueCVE-2026-1247425.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: use-after-free of requested_ipv6 in udhcpc6CVE-2026-1247404.3 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: httpd password rule bypass for pre-compressed .gz files via accept-encoding: gzipCVE-2026-1247385.3 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: stack buffer overflow in udhcpc6 send_d6_renew() and send_d6_release()CVE-2026-1247417.6 High
- red hat enterprise linux 6, hardened images +1 moreBusybox: httpd stack buffer overflow via an "i:" rule in a subdirectory httpd.confCVE-2026-1247397.5 High
- red hat enterprise linux 6, hardened images +1 moreBusybox: heap buffer overflow in the tftp client on fallback to the default block sizeCVE-2026-1247377.5 High
- red hat enterprise linux 6, hardened images +1 moreBusybox: heap buffer overflow in wget ftp resume when the resume offset exceeds the reported file sizeCVE-2026-1247477.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibstdc++: overflow leaves streambuf in inconsistent state on i/o error.CVE-2026-1257094.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-bad: gst-plugins-bad: off-by-one write in mxf demuxer temporal offset tableCVE-2026-125707Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-bad: gst-plugins-bad: missing bounds checks in mpeg ps pes header parsingCVE-2026-125706Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsingCVE-2026-125712Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handlingCVE-2026-125703Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreCockpit: cockpit-storaged: tang keyserver address from an untrusted luks header clevis token reaches curl's argument vector as an optionCVE-2026-1256726.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreOpenscap: one-byte heap buffer overflow in sds-compose may lead to denial-of-serviceCVE-2026-122056Public exploit5.9 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 gss-rpc client memory leak on xid mismatch retriesCVE-2026-112314Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory leak dos via auth_gssapi_init error pathsCVE-2026-112321Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory leak dos via gss-rpc auth flavor switchingCVE-2026-112320Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocationCVE-2026-112319Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointersCVE-2026-112318Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind authenticated memory leak dos in xdr_krb5_tl_data() decode failureCVE-2026-112316Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kdc unauthenticated memory leak dos in kdb keytab key decryption error pathCVE-2026-112317Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory leak dos in rpcsec_gss buffer decode failureCVE-2026-112315Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kdc unauthenticated cpu dos via quadratic asn.1 sequence of decodingCVE-2026-119079Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory exhaustion via failed auth_gssapi_init requestsCVE-2026-112323Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated cpu dos via auth_gssapi client states cleanupCVE-2026-112322Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds read in mxfdemux via unchecked delta_id and slice indexCVE-2026-121601Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +3 more +5 moreGst-plugins-good: gst-plugins-good: local file disclosure via unvalidated file:// uris in adaptivedemux2 manifest handlingCVE-2026-121629Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreDbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored busCVE-2026-120749Fix available6.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tailCVE-2026-1231517.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatchCVE-2026-1219978.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression lengthCVE-2026-1219968.2 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tailCVE-2026-1219957.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply lengthCVE-2026-1219948.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreHivex: hivex: denial of service via out-of-bounds read in big-data block processingCVE-2026-120740Fix available2.0 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace checkCVE-2026-119842Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of serviceCVE-2026-119729Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failureCVE-2026-119728Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: stack buffer overflow in psd image resource header loaderCVE-2026-119528Fix available7.8 High
- Show moreLoading…