Skip to contentRed Hat Enterprise Linux 7 vulnerabilities
- gnu gnutls, red hat ceph storage 7, discovery 2 +12 more +14 moreGnutls: vulnerability in gnutls certtool template parsingCVE-2025-32990Fix available6.5 Medium
- gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 moreGnutls: vulnerability in gnutls sct extension parsingCVE-2025-32989Fix available5.3 Medium
- gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 moreGnutls: vulnerability in gnutls othername san exportCVE-2025-32988Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreGdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbufCVE-2025-7345Fix available7.5 High
- ruby net-imap, red hat 3scale api management platform 2, enterprise linux 10 +17 more +19 morenet-imap vulnerable to STARTTLS stripping via invalid response timingCVE-2026-42246Fix available7.6 High
- libssh, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreLibssh: invalid return code for chacha20 poly1305 with openssl backendCVE-2025-5987Fix available8.1 High
- libssh, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibssh: integer overflow in libssh sftp server packet length validation leading to denial of serviceCVE-2025-5449Fix available6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +13 more +15 moreLibssh: incorrect return code handling in ssh_kdf() in libsshCVE-2025-5372Fix available5.0 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: double free vulnerability in libssh key export functionsCVE-2025-5351Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibssh: use of uninitialized variable in privatekey_from_file()CVE-2025-4878Fix available3.6 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibssh: write beyond bounds in binary to base64 conversion functionsCVE-2025-4877Fix available4.5 Medium
- suse pam-config, red hat enterprise linux 7, enterprise linux 8 +1 more +3 morePam-config: lpe from unprivileged to allow_active in pamCVE-2025-6018Public exploitFix available7.8 High
- gnome gdkpixbuf, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoderCVE-2025-6199Fix available3.3 Low
- gnome libgepub, red hat enterprise linux 7 +1 moreLibgepub: integer overflow in libgepub's epub archive handlingCVE-2025-6196Fix available5.5 Medium
- red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1, discovery 2 +33 more +35 moreLinux-pam: linux-pam directory traversalCVE-2025-6020Public exploitFix available7.8 High
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 8 +10 more +12 moreLibblockdev: lpe from allow_active to root in libblockdev via udisksCVE-2025-6019Public exploitFix available7.0 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionCVE-2025-49180Fix available7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionCVE-2025-49179Fix available7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignoreCVE-2025-49178Fix available5.5 Medium
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmodeCVE-2025-49177Fix available6.1 Medium
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionCVE-2025-49176Fix available7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsCVE-2025-49175Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreFreeipa: idm: privilege escalation from host to domain admin in freeipaCVE-2025-4404Public exploitFix available9.1 Critical
- xmlsoft libxml2, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +34 more +36 moreLibxml2: stack buffer overflow in xmllint interactive shell command handlingCVE-2025-6170Fix available2.5 Low
- gnome glib, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreGlib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstringCVE-2025-6052Fix available3.7 Low
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp integer overflowCVE-2025-6035Fix available6.1 Medium
- xmlsoft libxml2, red hat discovery 2, enterprise linux 10 +46 more +48 moreLibxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2CVE-2025-6021Fix available7.5 High
- gnome libxml2, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibxml: null pointer dereference leads to denial of service (dos)CVE-2025-49795Fix available7.5 High
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, discovery 2 +43 more +45 moreLibxml: type confusion leads to denial of service (dos)CVE-2025-49796Fix available9.1 Critical
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, 3scale api management platform 2 +43 more +45 moreLibxml: heap use after free (uaf) leads to denial of service (dos)CVE-2025-49794Fix available9.1 Critical
- libarchive, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +35 more +37 moreLibarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.cCVE-2025-5914Fix available7.8 High
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: reading past eof may be triggered for piped file streamsCVE-2025-5918Fix available3.9 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.cCVE-2025-5917Fix available2.8 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: integer overflow while reading warc files at archive_read_support_format_warc.cCVE-2025-5916Fix available3.9 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.cCVE-2025-5915Public exploitFix available6.6 Medium
- samba, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreSamba: smbd doesn't pick up group membership changes when re-authenticating an expired smb sessionCVE-2025-0620Fix available4.9 Medium
- debian linux, linux kernel, systemd project systemd +14 more +16 moreSystemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dumpCVE-2025-4598Fix available4.7 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +12 more +14 moreCoreutils: heap buffer under-read in gnu coreutils sort via key specificationCVE-2025-5278Fix available4.4 Medium
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +11 more +13 moreGimp: multiple use after free in xcf parserCVE-2025-48798Fix available7.3 High
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +11 more +13 moreGimp: multiple heap buffer overflows in tga parserCVE-2025-48797Fix available7.3 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreGimp: stack-based buffer overflows in file-icoCVE-2025-48796Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +16 more +18 moreIcu: stack buffer overflow in the srbroot::addtag functionCVE-2025-5222Public exploitFix available7.0 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.cCVE-2025-4969Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreLibsoup: integer overflow in cookie expiration date handling in libsoupCVE-2025-4945Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoupCVE-2025-4948Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer dereference in libsoup may lead to denial of serviceCVE-2025-4476Public exploitFix available4.3 Medium
- nbdkit project nbdkit, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreNbd: nbdkit: integer overflow triggers an assertion resulting in denial of serviceCVE-2025-47712Fix available6.5 Medium
- nbdkit project nbdkit, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreNbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of serviceCVE-2025-47711Fix available6.5 Medium
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS...CVE-2025-31223Fix available8.0 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: grub allow access to encrypted device through cli once root device is unlocked via tpmCVE-2025-4382Fix available5.9 Medium
- Show moreLoading…