Skip to contentRed Hat Enterprise Linux vulnerabilities
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +16 more +18 moreIcu: stack buffer overflow in the srbroot::addtag functionCVE-2025-5222Public exploitFix available7.0 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.2 advanced update support +11 more +13 moreGnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdusCVE-2025-5024Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.cCVE-2025-4969Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreLibsoup: integer overflow in cookie expiration date handling in libsoupCVE-2025-4945Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoupCVE-2025-4948Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer dereference in libsoup may lead to denial of serviceCVE-2025-4476Public exploitFix available4.3 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreGnome-remote-desktop: freerdp: unauthenticated rdp packet causes segfault in freerdp leading to denial of serviceCVE-2025-4478Fix available6.5 Medium
- nbdkit project nbdkit, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreNbd: nbdkit: integer overflow triggers an assertion resulting in denial of serviceCVE-2025-47712Fix available6.5 Medium
- nbdkit project nbdkit, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreNbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of serviceCVE-2025-47711Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +1 more +3 moreYggdrasil: local privilege escalation in yggdrasilCVE-2025-39317.8 High
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS...CVE-2025-31223Fix available8.0 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: grub allow access to encrypted device through cli once root device is unlocked via tpmCVE-2025-4382Fix available5.9 Medium
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot heap-buffer overflow on utf8_copy_oneCVE-2025-31177Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +34 more +36 moreGlib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unicharCVE-2025-4373Fix available4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: cookie domain validation bypass via uppercase characters in libsoupCVE-2025-4035Fix available4.3 Medium
- apache http server, debian linux, red hat enterprise linux 10 +14 more +16 moreMod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabledCVE-2025-3891Fix available7.5 High
- gnome glib, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGlib: glib crash after long command lineCVE-2025-4056Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreLibsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a serverCVE-2025-46421Fix available6.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreLibsoup: memory leak on soup_header_parse_quality_list() via soup-headers.cCVE-2025-46420Fix available6.5 Medium
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreXfig: fig2dev segmentation fault in read_arcobjectCVE-2025-46400Fix available5.5 Medium
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreXfig: transfig: fig2dev segmentation fault vulnerabilityCVE-2025-46399Fix available5.5 Medium
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreXfig: fig2dev stack-overflow via read_objectsCVE-2025-46398Fix available5.5 Medium
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +5 more +7 moreXfig: xfig: stack-overflow allows possible code execution via local input manipulationCVE-2025-46397Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 9, enterprise linux 9.4 extended update support +2 more +4 moreMod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requestsCVE-2024-10306Fix available5.4 Medium
- @clerk fastify, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +1 more +3 morefastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type HeaderCVE-2026-33806Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreLibsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valueCVE-2025-32911Fix available9.0 Critical
- red hat discovery 2, enterprise linux 10, enterprise linux 6 +26 more +28 moreKrb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisionsCVE-2025-3576Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of processCVE-2025-32914Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authenticationCVE-2025-32912Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with di…CVE-2025-32910Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.cCVE-2025-32909Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: denial of service on libsoup through http/2 serverCVE-2025-32908Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: denial of service in server when client requests a large amount of overlapping ranges with range headerCVE-2025-32907Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreLibsoup: out of bounds reads in soup_headers_parse_request()CVE-2025-32906Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreLibsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition headerCVE-2025-32913Fix available7.5 High
- red hat directory server 11, directory server 12, enterprise linux 10 +7 more +9 moreRust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`CVE-2025-3416Fix available3.7 Low
- red hat directory server 11, directory server 12, enterprise linux 10 +8 more +10 moreCrossbeam-channel: crossbeam-channel vulnerable to double free on dropCVE-2025-4574Fix available6.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreGnuplot: segmentation fault via io_str_init_static_internal functionCVE-2025-3359Fix available6.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +22 more +24 moreGlibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().CVE-2025-3360Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()CVE-2025-32053Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: heap buffer overflow in sniff_unknown()CVE-2025-32052Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: segmentation fault when parsing malformed data uriCVE-2025-32051Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: integer overflow in append_param_quotedCVE-2025-32050Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: denial of service attack to websocket serverCVE-2025-32049Fix available7.5 High
- gnome yelp, debian linux, red hat enterprise linux 6 +33 more +35 moreYelp: arbitrary file readCVE-2025-3155Fix availableEPSS 13.1%7.4 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +32 more +34 moreLibsoup: heap buffer over-read in `skip_insignificant_space` when sniffing contentCVE-2025-2784Fix available7.0 High
- image-size, red hat gatekeeper 3, build of podman desktop +15 more +17 moreimage-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF ParserCVE-2025-71319Fix available8.7 High
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot segmentation fault on x11_graphicsCVE-2025-31181Fix available6.2 Medium
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot segmentation fault on canvas_textCVE-2025-31180Fix available6.2 Medium
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot segmentation fault on xstrftimeCVE-2025-31179Fix available6.2 Medium
- Show moreLoading…