Skip to contentRed Hat Enterprise Linux vulnerabilities
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreKernel: netlink socket crash (null pointer deref) in netlink_dump functionCVE-2023-3106Fix available6.6 Medium
- qemu, fedora extra packages for enterprise linux, fedora +8 more +10 moreImproper i/o watch removal in tls handshake can lead to remote unauthenticated denial of serviceCVE-2023-3354Fix available7.5 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: a race condition in crypto module in the function skcipher_recvmsgCVE-2023-3108Fix available6.2 Medium
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/formats_i.cCVE-2023-34432Fix available7.8 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/hcom.cCVE-2023-34318Fix available7.8 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/voc.cCVE-2023-32627Fix available6.2 Medium
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/aiff.cCVE-2023-26590Fix available6.2 Medium
- tang project tang, fedora, red hat enterprise linux 7 +3 more +5 moreRace condition exists in the key generation and rotation functionalityCVE-2023-1672Fix available5.3 Medium
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreDistros-[dirtyvma] privilege escalation via non-rcu-protected vma traversalCVE-2023-3269Public exploitFix available7.8 High
- debian linux, linux kernel, fedora +6 more +8 moreCrash due to a null pointer dereference in the dn_nsp_send functionCVE-2023-3338Public exploitFix available6.5 Medium
- libtiff, fedora, red hat enterprise linux 6 +3 more +5 moreLibtiff: null pointer dereference in tif_dir.cCVE-2023-2908Fix available5.5 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more +4 moreImagemagick: heap-buffer-overflow in coders/tiff.cCVE-2023-3428Fix available6.2 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreOut-of-bounds read when setting hmac dataCVE-2023-2860Fix available4.4 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreNull pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.cCVE-2023-3355Fix available4.7 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +7 more +9 moreKernel: vmwgfx: double free within the handling of vmw_buffer_object objectsCVE-2023-33952Fix available6.7 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +7 more +9 moreKernel: vmwgfx: race condition leading to information disclosure vulnerabilityCVE-2023-33951Fix available6.7 Medium
- libreoffice, fedora, red hat enterprise linux 6 +4 more +6 moreArbitrary file writeCVE-2023-1183Fix availableEPSS 64.9%5.0 Medium
- gnome glib, fedora extra packages for enterprise linux, fedora +9 more +11 moreGvariant deserialisation does not match spec for non-normal dataCVE-2023-32665Fix available5.5 Medium
- gnome glib, fedora extra packages for enterprise linux, 37 +8 more +10 moreG_variant_byteswap() can take a long time with some non-normal inputsCVE-2023-32611Fix available5.5 Medium
- gnome glib, fedora extra packages for enterprise linux, 37 +8 more +10 moreGvariant offset table entry size is not checked in is_normal()CVE-2023-29499Fix available5.5 Medium
- linux kernel, fedora, netapp h300s +8 more +10 moreTree connection race condition remote code execution vulnerabilityCVE-2023-32254Fix available9.8 Critical
- linux kernel, fedora, netapp h300s +9 more +11 moreSession race condition remote code execution vulnerabilityCVE-2023-32250Fix available9.0 Critical
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: udmabuf: improper validation of array index leading to local privilege escalationCVE-2023-2008Public exploitFix available8.2 High
- debian linux, linux kernel, netapp h300s +12 more +14 moreKernel: use after free bug in btsdio_remove due to race conditionCVE-2023-1989Fix available7.0 High
- php, fedora, red hat enterprise linux 6 +5 more +7 morePotential buffer overflow in php_cli_server_startup_workersCVE-2022-4900Fix available6.2 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreField `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`CVE-2023-25588Fix available4.7 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreField `file_table` of `struct module *module` is uninitializedCVE-2023-25585Fix available4.7 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreOut of bounds read in parse_module function in bfd/vms-alpha.cCVE-2023-25584Fix available6.3 Medium
- kubernetes cri-o, fedoraproject extra packages for enterprise linux, fedora +7 more +9 moreCri-o: /etc/passwd tampering privescCVE-2022-4318Fix available7.8 High
- artifex ghostscript, debian linux, red hat enterprise linux 6 +3 more +5 moreGhostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.cCVE-2020-27792Fix available7.1 High
- red hat enterprise linuxA set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture...CVE-2022-16658.2 High
- debian linux, linux kernel, red hat enterprise linux 6 +5 more +7 moreKernel: security regression for cve-2018-13405CVE-2021-4037Fix available4.4 Medium
- isaacs node-tar, tar, red hat confidential compute attestation +40 more +42 morenode-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path SanitizationCVE-2026-23745Public exploitFix available8.2 High
- google angularjs, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreAngularJS XSS via SCE resource URL sanitization bypassCVE-2026-11998Fix available7.6 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +53 more +55 morefast-uri vulnerable to host confusion via percent-encoded authority delimitersCVE-2026-6322Fix available7.5 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +32 more +34 morefast-uri vulnerable to path traversal via percent-encoded dot segmentsCVE-2026-6321Fix available7.5 High
- red hat enterprise linux, red hat, inc. hat enterprise linux, redhat enterprise linux desktop +5 more +7 moreA non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an...CVE-2017-15121Fix available5.5 Medium
- golang net, golang.org/x/net golang.org/x/net/idna, go standard library net/http +147 more +149 moreInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821Fix available9.6 Critical
- red hat enterprise linux 6, enterprise linux 7, network proxy v 5.4 +3 more +5 moreSpacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messagesCVE-2012-0059Fix available4.9 Medium
- redhat spacewalk, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreSpacewalk: spacewalk: cross-site scripting via uri in lookup login/password formCVE-2011-33445.4 Medium
- redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 moreSpacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search formsCVE-2011-29275.4 Medium
- redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 moreSpacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.CVE-2011-29205.5 Medium
- redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 moreSpacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameterCVE-2011-15946.5 Medium
- redhat packstack, red hat openstack folsom for rhel 6, enterprise linux openstack platform 5 (icehouse) +3 more +5 morePackstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creationCVE-2013-1815Fix available6.1 Medium
- openstack essex, folsom, red hat openstack folsom for rhel 6 +2 more +4 morePuppetlabs-cinder: packstack: openstack: puppetlabs-cinder: information disclosure of openstack administrative passwords due to world-readable configuration files.CVE-2013-02665.5 Medium
- openstack essex, folsom, red hat openstack folsom for rhel 6 +2 more +4 morePackstack: packstack: arbitrary file overwrite via symlink attackCVE-2013-02618.8 High
- redhat spacewalk-java, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreSpacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgeryCVE-2009-4139Fix available6.8 Medium
- apache mod fcgid, fedora, red hat enterprise linux 7 +2 more +4 moreHttpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.cCVE-2010-3872Fix available7.5 High
- openssl, red hat enterprise linux 10, enterprise linux 3 +11 more +13 moreOpenssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypassCVE-2006-4339Fix available9.1 Critical