Skip to contentRed Hat Enterprise Linux vulnerabilities
- postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +37 more +39 morePostgresql: buffer overrun from integer overflow in array modificationCVE-2023-5869Fix available8.8 High
- postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 morePostgresql: memory disclosure in aggregate function callsCVE-2023-5868Fix available4.3 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out-of-bounds read printing error messagesCVE-2023-40546Fix available6.2 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnectCVE-2023-6039Fix available5.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreKernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()CVE-2023-39198Fix available7.5 High
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreKernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()CVE-2023-39197Fix available4.0 Medium
- opensc project opensc, fedoraproject fedora, red hat enterprise linux 7 +3 more +5 moreOpensc: out-of-bounds read in myeid driver handling encryption using symmetric keysCVE-2023-4535Fix available4.5 Medium
- qemu, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreQemu: improper ide controller reset can lead to mbr overwriteCVE-2023-5088Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd memory exhaustion denial-of-service vulnerabilityCVE-2023-2593Fix available5.9 Medium
- linux kernel, red hat enterprise linux 8, redhat enterprise linux +4 more +6 moreKpatch: mm/mremap.c: incomplete fix for cve-2022-41222CVE-2023-14767.0 High
- squid-cache squid, red hat enterprise linux 6, enterprise linux 7 +13 more +15 moreSquid: dos against http and httpsCVE-2023-5824Fix available7.5 High
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreUse-after-free in parse_lease_state()CVE-2023-1194Fix available7.1 High
- libtiff, fedora, red hat enterprise linux 6 +4 more +6 moreHeap-buffer-overflow in extractimagesection()CVE-2023-3164Fix available5.5 Medium
- squid-cache squid, red hat enterprise linux 6, enterprise linux 7 +7 more +9 moreSquid: denial of service in ftpCVE-2023-46848Fix availableEPSS 11.4%8.6 High
- squid-cache squid, red hat enterprise linux 6 extended lifecycle support, enterprise linux 7 +22 more +24 moreSquid: denial of service in http digest authenticationCVE-2023-46847Fix availableEPSS 78.5%8.6 High
- squid-cache squid, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +18 more +20 moreSquid: request/response smuggling in http/1.1 and icapCVE-2023-46846Fix available9.3 Critical
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreUse-after-free in setup_async_work()CVE-2023-1193Fix available6.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: slab-use-after-free write in txend due to race conditionCVE-2023-3397Fix available7.0 High
- redhat insights-client, red hat enterprise linux 6, enterprise linux 7 +29 more +31 moreInsights-client: unsafe handling of temporary files and directoriesCVE-2023-3972Fix available7.8 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +3 more +5 moreXorg-x11-server: use-after-free bug in damagedestroyCVE-2023-5574Fix available7.0 High
- x.org x server, debian linux, fedoraproject fedora +6 more +8 moreXorg-x11-server: use-after-free bug in destroywindowCVE-2023-5380Fix available4.7 Medium
- debian linux, fedoraproject fedora, red hat enterprise linux 6 +25 more +27 moreXorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputpropertyCVE-2023-5367Fix available7.8 High
- samba, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: heap buffer overflow with freshness tokens in the heimdal kdcCVE-2023-5568Fix available5.9 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +25 more +27 moreKernel: vmwgfx: reference count issue leads to use-after-free in surface handlingCVE-2023-5633Fix available7.8 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreKernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrsCVE-2023-5090Fix available6.0 Medium
- linux kernel, netapp active iq unified manager, solidfire \& hci management node +21 more +23 moreKernel: use after free in nvmet_tcp_free_crypto in nvmeCVE-2023-5178Public exploitFix available8.8 High
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in avahi_alternative_host_nameCVE-2023-38473Fix available6.2 Medium
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in avahi_escape_labelCVE-2023-38470Fix available6.2 Medium
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in avahi_rdata_parseCVE-2023-38472Fix available6.2 Medium
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in dbus_set_host_nameCVE-2023-38471Fix available6.2 Medium
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in avahi_dns_packet_append_recordCVE-2023-38469Fix available6.2 Medium
- opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreOpensc: potential pin bypass when card tracks its own login stateCVE-2023-40660Fix available6.6 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: integer overflow in igmpv3_newpack leading to exploitable memory accessCVE-2023-42752Fix available5.5 Medium
- gnome tracker miners, red hat enterprise linux 7, enterprise linux 8 +12 more +14 moreTracker-miners: sandbox escapeCVE-2023-5557Fix available7.5 High
- opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreOpensc: multiple memory issues with pkcs15-init (enrollment tool)CVE-2023-40661Fix available5.4 Medium
- samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 moreSamba: smbd allows client access to unix domain sockets on the file system as rootCVE-2023-3961Fix available9.1 Critical
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty's wrapping plain trust manager silently disables hostname verificationCVE-2026-50010Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +24 more +26 morenetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory ExhaustionCVE-2026-48043Fix available5.3 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty has Insufficient Bailiwick Validation for NS RecordsCVE-2026-47691Fix available8.7 High
- netty, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, data grid 8.6.2 +8 more +10 moreNetty: SCTP reassembly nests buffers without boundCVE-2026-46340Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME RecordsCVE-2026-45674Public exploitFix available8.7 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytesCVE-2026-45416Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator MaskingCVE-2026-44249Fix available8.1 High
- netty, io.netty netty-codec-http, netty-codec-http2 +37 more +39 moreNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoSCVE-2026-42587Fix available7.5 High
- netty, io.netty netty-codec-http, red hat cryostat 4 on rhel 9 +33 more +35 moreNetty: HttpClientCodec response desynchronizationCVE-2026-42584Fix available7.3 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +32 more +34 moreNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling SanitizationCVE-2026-42581Fix available5.8 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)CVE-2026-42579Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +32 more +34 moreNetty: HTTP Header Injection via HttpProxyHandler Disabled ValidationCVE-2026-42578Fix available2.9 Low
- netty, red hat cryostat 4, cryostat 4 on rhel 9 +37 more +39 moreNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame BypassCVE-2026-33871Public exploitFix available8.7 High
- netty, red hat cryostat 4 on rhel 9, logging subsystem for red hat openshift +33 more +35 moreNetty: HTTP Request Smuggling via Chunked Extension Quoted-String ParsingCVE-2026-33870Fix available7.5 High
- Show moreLoading…