Skip to contentRed Hat Enterprise Linux vulnerabilities
- samba rsync, almalinux, archlinux arch linux +13 more +15 moreRsync: rsync server leaks arbitrary client filesCVE-2024-12086Fix available6.1 Medium
- samba rsync, almalinux, archlinux arch linux +44 more +46 moreRsync: info leak via uninitialized stack contentsCVE-2024-12085Public exploitFix available7.5 High
- samba rsync, almalinux, archlinux arch linux +11 more +13 moreRsync: heap buffer overflow in rsync due to improper checksum length handlingCVE-2024-12084Public exploitFix availableEPSS 72.5%9.8 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpenjpeg: heap buffer overflow in lib/openjp2/j2k.cCVE-2024-56827Fix available5.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpenjpeg: heap buffer overflow in bin/common/color.cCVE-2024-56826Fix available5.6 Medium
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 7 +12 more +14 moreDpdk: denial of service from malicious guest on hypervisors using dpdk vhost libraryCVE-2024-11614Fix available7.4 High
- red hat enterprise linux 8, enterprise linux 9, openshift container platform 3.11 +5 more +7 moreCri-o: checkpoint restore can be triggered from different namespacesCVE-2024-8676Fix available7.4 High
- red hat fast datapath for red hat enterprise linux 7, fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9 +14 more +16 moreTuned: improper sanitization of `instance_name` parameter of the `instance_create()` methodCVE-2024-52337Fix available5.5 Medium
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 7 +5 more +7 moreTuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by rootCVE-2024-52336Fix available7.8 High
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 moreAvahi: avahi wide-area dns predictable transaction idsCVE-2024-52616Fix available5.3 Medium
- avahi, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreAvahi: avahi wide-area dns uses constant source portCVE-2024-52615Fix available5.3 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd: read request out-of-bounds read information disclosure vulnerabilityCVE-2023-39179Fix available7.5 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd: transform header out-of-bounds read information disclosure vulnerabilityCVE-2023-39176Fix available5.8 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +7 more +9 morePodman: build context bind mountCVE-2025-4953Fix available7.4 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerabilityCVE-2023-4458Fix available4.0 Medium
- mutt, neomutt, red hat enterprise linux 10 +4 more +6 moreMutt: neomutt: bcc email header field is indirectly leaked by cryptographic info blockCVE-2024-49395Fix available5.3 Medium
- mutt, neomutt, red hat enterprise linux 7 +3 more +5 moreMutt: neomutt: in-reply-to email header field it not protected by cryptograpic signingCVE-2024-49394Fix available5.3 Medium
- mutt, neomutt, red hat enterprise linux 10 +4 more +6 moreMutt: neomutt: to and cc email header fields are not protected by cryptographic signingCVE-2024-49393Fix available6.5 Medium
- red hat ansible automation platform execution environments, ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +2 more +4 moreAnsible-core: unsafe tagging bypass via hostvars object in ansible-coreCVE-2024-11079Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 morePam: improper hostname interpretation in pam_access leads to access control bypassCVE-2024-10963Fix available7.4 High
- red hat ansible automation platform execution environments, ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +4 more +6 moreAnsible-core: ansible-core user may read/write unauthorized contentCVE-2024-9902Public exploitFix available6.3 Medium
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +2 moreMpg123: buffer overflow when writing decoded pcm samplesCVE-2024-10573Fix available6.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +15 more +17 moreXorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerabilityCVE-2024-9632Fix available7.8 High
- linux-pam, red hat enterprise linux 10, enterprise linux 7 +3 more +5 morePam: libpam: libpam vulnerable to read hashed passwordCVE-2024-10041Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 7.7 advanced update support +13 more +15 moreNetworkmanager-libreswan: local privilege escalation via leftupdownCVE-2024-9050Fix available7.8 High
- qemu, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerabilityCVE-2024-6519Fix available8.2 High
- apple ipados, macos, safari +17 more +19 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS...CVE-2023-43010Fix available8.8 High
- red hat openshift developer tools and services, enterprise linux 10, enterprise linux 8 +25 more +27 morePodman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)CVE-2024-9676Fix available6.5 Medium
- red hat ansible automation platform 2, enterprise linux 10, enterprise linux 8 +1 more +3 morePyo3: risk of use-after-free in `borrowed` reads from python weak referencesCVE-2024-9979Fix available5.3 Medium
- buildah project buildah, red hat openshift developer tools and services, enterprise linux 10 +30 more +32 moreBuildah: buildah allows arbitrary directory mountCVE-2024-9675Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreBuildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instructionCVE-2024-9407Fix available4.7 Medium
- containers common, red hat enterprise linux 10, enterprise linux 8 +10 more +12 morePodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go libraryCVE-2024-9341Fix available5.4 Medium
- red hat nbde tang server, openshift developer tools and services, openshift pipelines +34 more +36 moreGolang-fips: golang fips zeroed bufferCVE-2024-9355Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: information leak in virtio devicesCVE-2024-8612Fix available3.8 Low
- qemu, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreQemu-kvm: usb: assertion failure in usb_ep_get()CVE-2024-8354Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +12 more +14 morePcp: pmpost symlink attack allows escalating pcp to root userCVE-2024-45770Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +12 more +14 morePcp: pmcd heap corruption through metric pmstore operationsCVE-2024-45769Fix available5.5 Medium
- red hat enterprise linux ai (rhel ai)Vllm: denials of service in vllm json web apiCVE-2024-89396.2 Medium
- red hat enterprise linux ai (rhel ai)Vllm: a completions api request with an empty prompt will crash the vllm api server.CVE-2024-8768Fix available7.5 High
- red hat ansible automation platform execution environments, discovery 1 for rhel 9, ansible automation platform 2.4 for rhel 8 +7 more +9 moreAnsible-core: exposure of sensitive information in ansible vault files due to improper loggingCVE-2024-8775Fix available5.5 Medium
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: heap buffer overflow in openpgp driver when generating keyCVE-2024-8443Fix available2.9 Low
- red hat directory server 11, directory server 12, enterprise linux 10 +4 more +6 more389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)CVE-2024-8445Fix available5.7 Medium
- containers aardvark-dns, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreContainers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of serviceCVE-2024-8418Fix available7.5 High
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: uninitialized values after incorrect or missing checking return values of functions in libopenscCVE-2024-45617Fix available3.9 Low
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: incorrect handling of the length of buffers or files in pkcs15initCVE-2024-45620Fix available3.9 Low
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: incorrect handling length of buffers or files in libopenscCVE-2024-45619Fix available4.3 Medium
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15initCVE-2024-45618Fix available3.9 Low
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: uninitialized values after incorrect check or usage of apdu response values in libopenscCVE-2024-45616Fix available3.9 Low
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15initCVE-2024-45615Fix available3.9 Low
- redhat libvirt, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibvirt: crash of virtinterfaced via virconnectlistinterfaces()CVE-2024-8235Fix available6.2 Medium
- Show moreLoading…