Skip to contentRed Hat Enterprise Linux 9 vulnerabilities
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: commands/dump: the dump command is not in lockdown when secure boot is enabledCVE-2025-1118Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: read: integer overflow may lead to out-of-bounds writeCVE-2025-0690Public exploitFix available6.1 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code executionCVE-2025-0689Fix available7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading datCVE-2025-0686Fix available6.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dataCVE-2025-0685Fix available6.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dataCVE-2025-0684Fix available6.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading dataCVE-2025-0678Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinksCVE-2025-0677Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 8 +19 more +21 moreGrub2: net: out-of-bounds write in grub_net_search_config_file()CVE-2025-0624Fix available7.6 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: command/gpg: use-after-free due to hooks not being removed on module unloadCVE-2025-0622Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: fs/hfs+: refcount can be decremented twiceCVE-2024-45783Fix available4.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)CVE-2024-45782Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: fs/ufs: oob write in the heapCVE-2024-45781Fix available6.7 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/tar: integer overflow causes heap oob writeCVE-2024-45780Fix available6.7 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/bfs: integer overflow leads to heap oob read in the bfs parserCVE-2024-45779Fix available6.0 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: fs/bfs: integer overflow in the bfs parser.CVE-2024-45778Fix available4.1 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: grub-core/gettext: integer overflow leads to heap oob write.CVE-2024-45777Fix available6.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: grub-core/gettext: integer overflow leads to heap oob write and read.CVE-2024-45776Fix available6.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: commands/extcmd: missing check for failed allocationCVE-2024-45775Fix available5.2 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: reader/jpeg: heap oob write during jpeg parsingCVE-2024-45774Fix available6.7 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 moreOpenssh: denial-of-service in opensshCVE-2025-26466Public exploitFix availableEPSS 38.7%5.9 Medium
- openbsd openssh, debian linux, netapp active iq unified manager +15 more +17 moreOpenssh: machine-in-the-middle attack if verifyhostkeydns is enabledCVE-2025-26465Public exploitFix available6.8 Medium
- fedora linux, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreKernel: secure boot does not automatically enable kernel lockdownCVE-2025-1272Fix available7.7 High
- red hat enterprise linux 10, enterprise linux 9 +1 moreKeylime: keylime registrar dos due to incompatible database entry handlingCVE-2025-1057Fix available4.3 Medium
- red hat builds for red hat openshift 1.3.2, enterprise linux 10, enterprise linux 6 +14 more +16 moreEmacs: shell injection vulnerability in gnu emacs via custom "man" uri schemeCVE-2025-1244Fix available8.8 High
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +20 more +22 moreGnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dosCVE-2024-12243Fix available5.3 Medium
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +26 more +28 moreLibtasn1: inefficient der decoding in libtasn1 leading to potential remote dosCVE-2024-12133Fix available5.3 Medium
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, openshift container platform 4 +2 moreOvn: egress acls may be bypassed via specially crafted udp packetCVE-2025-0650Fix available8.1 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +14 more +16 morePodman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfileCVE-2024-11218Fix available8.6 High
- red hat .net 6.0 on red hat enterprise linux, cryostat 3, logging subsystem for red hat openshift +52 more +54 moreNpm-serialize-javascript: cross-site scripting (xss) in serialize-javascriptCVE-2024-11831Fix available5.4 Medium
- red hat enterprise linux 10, enterprise linux 9, openshift container platform 4 +2 more +4 moreUsers: `root` appended to group listingsCVE-2025-5791Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreFreeipa: administrative user data leaked through systemd journalCVE-2024-11029Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreRuby: openssl: ruby marvin attackCVE-2025-03067.4 High
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +4 more +6 moreRsync: race condition in rsync handling symbolic linksCVE-2024-12747Fix available5.6 Medium
- samba rsync, almalinux, archlinux arch linux +24 more +26 moreRsync: --safe-links option bypass leads to path traversalCVE-2024-12088Fix available6.5 Medium
- samba rsync, almalinux, archlinux arch linux +32 more +34 moreRsync: path traversal vulnerability in rsyncCVE-2024-12087Fix available6.5 Medium
- samba rsync, almalinux, archlinux arch linux +13 more +15 moreRsync: rsync server leaks arbitrary client filesCVE-2024-12086Fix available6.1 Medium
- samba rsync, almalinux, archlinux arch linux +44 more +46 moreRsync: info leak via uninitialized stack contentsCVE-2024-12085Public exploitFix available7.5 High
- samba rsync, almalinux, archlinux arch linux +11 more +13 moreRsync: heap buffer overflow in rsync due to improper checksum length handlingCVE-2024-12084Public exploitFix availableEPSS 72.5%9.8 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpenjpeg: heap buffer overflow in lib/openjp2/j2k.cCVE-2024-56827Fix available5.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpenjpeg: heap buffer overflow in bin/common/color.cCVE-2024-56826Fix available5.6 Medium
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 7 +12 more +14 moreDpdk: denial of service from malicious guest on hypervisors using dpdk vhost libraryCVE-2024-11614Fix available7.4 High
- red hat enterprise linux 8, enterprise linux 9, openshift container platform 3.11 +5 more +7 moreCri-o: checkpoint restore can be triggered from different namespacesCVE-2024-8676Fix available7.4 High
- red hat fast datapath for red hat enterprise linux 7, fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9 +14 more +16 moreTuned: improper sanitization of `instance_name` parameter of the `instance_create()` methodCVE-2024-52337Fix available5.5 Medium
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 7 +5 more +7 moreTuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by rootCVE-2024-52336Fix available7.8 High
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 moreAvahi: avahi wide-area dns predictable transaction idsCVE-2024-52616Fix available5.3 Medium
- avahi, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreAvahi: avahi wide-area dns uses constant source portCVE-2024-52615Fix available5.3 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd: read request out-of-bounds read information disclosure vulnerabilityCVE-2023-39179Fix available7.5 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd: transform header out-of-bounds read information disclosure vulnerabilityCVE-2023-39176Fix available5.8 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +7 more +9 morePodman: build context bind mountCVE-2025-4953Fix available7.4 High
- Show moreLoading…