Skip to contentRed Hat Enterprise Linux 6 vulnerabilities
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 7 +5 more +7 moreTuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by rootCVE-2024-52336Fix available7.8 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd: read request out-of-bounds read information disclosure vulnerabilityCVE-2023-39179Fix available7.5 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd: transform header out-of-bounds read information disclosure vulnerabilityCVE-2023-39176Fix available5.8 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerabilityCVE-2023-4458Fix available4.0 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 morePam: improper hostname interpretation in pam_access leads to access control bypassCVE-2024-10963Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +15 more +17 moreXorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerabilityCVE-2024-9632Fix available7.8 High
- qemu, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerabilityCVE-2024-6519Fix available8.2 High
- apple ipados, macos, safari +17 more +19 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS...CVE-2023-43010Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: information leak in virtio devicesCVE-2024-8612Fix available3.8 Low
- qemu, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreQemu-kvm: usb: assertion failure in usb_ep_get()CVE-2024-8354Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +12 more +14 morePcp: pmpost symlink attack allows escalating pcp to root userCVE-2024-45770Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +12 more +14 morePcp: pmcd heap corruption through metric pmstore operationsCVE-2024-45769Fix available5.5 Medium
- red hat directory server 11, directory server 12, enterprise linux 10 +4 more +6 more389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)CVE-2024-8445Fix available5.7 Medium
- redhat libvirt, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibvirt: crash of virtinterfaced via virconnectlistinterfaces()CVE-2024-8235Fix available6.2 Medium
- qemu, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()CVE-2024-7730Fix available7.4 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +5 more +7 moreUnbound: heap-buffer-overflow in unboundCVE-2024-43168Fix available4.8 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +5 more +7 moreUnbound: null pointer dereference in unboundCVE-2024-43167Fix available2.8 Low
- libtiff, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreLibtiff: null pointer dereference in tif_dirinfo.cCVE-2024-7006Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +11 more +13 moreQemu: denial of service via improper synchronization in qemu nbd server during socket closureCVE-2024-7409Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGtk3: gtk2: library injection from cwdCVE-2024-6655Fix available7.0 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreNetworkmanager: denial of serviceCVE-2024-6501Fix available3.1 Low
- redhat 389 directory server, directory server, red hat directory server 11 +7 more +9 more389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search requestCVE-2024-6237Fix available6.5 Medium
- red hat enterprise linux 9, enterprise linux 10, enterprise linux 6 +11 more +13 moreOpenssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9CVE-2024-6409Fix availableEPSS 27.9%7.0 High
- qemu, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreQemu-kvm: virtio-net: queue index out-of-bounds access in software rssCVE-2024-6505Fix available6.8 Medium
- uclouvain openjpeg, red hat ai inference server 3.2, enterprise linux 6 +3 more +5 moreOpenjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.cCVE-2023-39329Fix available6.5 Medium
- uclouvain openjpeg, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreOpenjpeg: denail of service via crafted image fileCVE-2023-39328Fix available5.5 Medium
- uclouvain openjpeg, red hat ai inference server 3.2, enterprise linux 6 +3 more +5 moreOpenjpeg: malicious files can cause the program to enter a large loopCVE-2023-39327Fix available4.3 Medium
- red hat advanced virtualization for rhel 8.2.1, advanced virtualization for rhel 8.4.0.eus, enterprise linux 10 +15 more +17 moreQemu-kvm: 'qemu-img info' leads to host file read/writeCVE-2024-4467Fix available7.8 High
- openbsd openssh, almalinux, amazon linux +71 more +73 moreOpenssh: regresshion - race condition in ssh allows rce/dosCVE-2024-6387Public exploitFix availableEPSS 99.5%8.1 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd: read request memory leak denial-of-service vulnerabilityCVE-2023-39180Fix available4.0 Medium
- freedesktop poppler, red hat enterprise linux 10, enterprise linux 6 +4 more +6 morePoppler: pdfinfo: crash in broken documents when using -dests parameterCVE-2024-6239Fix available7.5 High
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 for rhel 8, directory server 11.9 for rhel 8 +9 more +11 more389-ds-base: malformed userpassword hash may cause denial of serviceCVE-2024-5953Fix available5.7 Medium
- red hat certificate system 10.4 eus for rhel-8, enterprise linux 6, enterprise linux 7 +11 more +13 moreCa: token authentication bypass vulnerabilityCVE-2023-4727Fix available7.5 High
- freeipa, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreFreeipa: delegation rules allow a proxy service to impersonate any user to access another target serviceCVE-2024-2698Fix available8.8 High
- gnu nano, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreNano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned fileCVE-2024-5742Fix available6.7 Medium
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 for rhel 8, directory server 11.8 for rhel 8 +10 more +12 more389-ds-base: potential denial of service via specially crafted kerberos as-req requestCVE-2024-3657Fix available7.5 High
- red hat directory server 11.5 e4s for rhel 8, directory server 11.8 for rhel 8, directory server 11.9 for rhel 8 +7 more +9 more389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.cCVE-2024-2199Fix available5.7 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreQemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crashCVE-2024-4693Fix available5.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +3 more +5 moreLibvirt: stack use-after-free in virnetclientioeventloop()CVE-2024-4418Fix available6.2 Medium
- redhat openssl, red hat enterprise linux 6, enterprise linux 7 +2 more +4 morePerl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)CVE-2024-2467Fix available5.9 Medium
- qemu, netapp hci compute node, red hat enterprise linux 6 +15 more +17 moreQemu: sdhci: heap buffer overflow in sdhci_write_dataport()CVE-2024-3447Fix available6.0 Medium
- fedoraproject sssd, fedora, red hat enterprise linux 6 +29 more +31 moreSssd: race condition during authorization leads to gpo policies functioning inconsistentlyCVE-2023-3758Fix available7.1 High
- qemu, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreQemu-kvm: net: assertion failure in update_sctp_checksum()CVE-2024-3567Fix available5.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreQemu: virtio: dma reentrancy issue leads to double free vulnerabilityCVE-2024-3446Fix available8.2 High
- tukaani xz, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreXz: malicious code in distributed sourceCVE-2024-3094Public exploitFix availableEPSS 90.9%10.0 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +10 more +12 morePcp: exposure of the redis server backend allows remote command execution via pmproxyCVE-2024-3019Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 moreGnutls: vulnerable to minerva side-channel information leakCVE-2024-28834Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGnutls: potential crash during chain building/verificationCVE-2024-28835Fix available5.0 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreLibvirt: negative g_new0 length can lead to unbounded memory allocationCVE-2024-2494Fix available6.2 Medium
- unixodbc, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreUnixodbc: out of bounds stack write due to pointer-to-integer types conversionCVE-2024-1013Fix available7.8 High
- Show moreLoading…