Redhat Enterprise Linux Eus vulnerabilities

• red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +6 more +8 more Gimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c) CVE-2026-42169 Fix available 7.3 HighAugust 4, 2026
• libssh, red hat enterprise linux 10, enterprise linux 8 +11 more +13 more Libssh: libssh: authentication bypass via missing gssapi principal check CVE-2026-59851 Fix available 8.8 HighJuly 21, 2026
• gimp, red hat enterprise linux 6, enterprise linux 7 +8 more +10 more Gimp: gimp: heap buffer overflow in read_channel_data() CVE-2026-58379 Fix available 7.3 HighJuly 3, 2026
• gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 more Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" CVE-2026-58016 Fix available 7.5 HighJune 30, 2026
• linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 more net: skbuff: preserve shared-frag marker during coalescing CVE-2026-46300 In KEVPublic exploitFix available EPSS 16.1% 7.8 HighMay 14, 2026
• amazon linux, linux kernel, arista cloudvision agni +142 more +144 more crypto: algif_aead - Revert to operating out-of-place CVE-2026-31431 In KEVPublic exploitFix available EPSS 98.1% 7.8 HighApril 22, 2026
• jqlang jq, red hat ai inference server 3.2, ai inference server 3.3 +38 more +40 more jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers CVE-2026-39979 Fix available 6.9 MediumApril 13, 2026
• apache tomcat, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 more Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor CVE-2026-34486 In KEVPublic exploitFix available EPSS 98.5% 7.5 HighApril 9, 2026
• gnome gdk-pixbuf, red hat ai inference server 3.2, ai inference server 3.3 +35 more +37 more Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image CVE-2026-5201 Public exploitFix available 7.5 HighMarch 31, 2026
• nodejs node, node.js, red hat enterprise linux 10 +7 more +9 more A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received... CVE-2026-21710 Public exploitFix available EPSS 25.4% 7.5 HighMarch 26, 2026
• libtiff, debian linux, red hat ai inference server 3.2 +30 more +32 more Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing CVE-2026-4775 Fix available 7.8 HighMarch 24, 2026
• keylime, red hat enterprise linux 10, enterprise linux 10.0 extended update support +9 more +11 more Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication CVE-2026-1709 Fix available 9.4 CriticalFebruary 6, 2026
• x.org x server, debian linux, ibm aix +25 more +27 more Xorg: xmayland: value overflow in xkbsetcompatmap() CVE-2025-62231 Fix available 7.3 HighOctober 28, 2025
• x.org x server, xwayland, debian linux +25 more +27 more Xorg: xwayland: use-after-free in xkb client resource removal CVE-2025-62230 Fix available 7.3 HighOctober 28, 2025
• apple ipados, macos, safari +30 more +32 more The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6,... CVE-2025-31277 In KEVPublic exploitFix available 8.8 HighJuly 29, 2025
• xmlsoft libxml2, red hat discovery 2, enterprise linux 10 +46 more +48 more Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 CVE-2025-6021 Fix available 7.5 HighJune 12, 2025
• gnome yelp, debian linux, red hat enterprise linux 6 +33 more +35 more Yelp: arbitrary file read CVE-2025-3155 Fix available EPSS 13.1% 7.4 HighApril 3, 2025
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +32 more +34 more Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content CVE-2025-2784 Fix available 7.0 HighApril 3, 2025
• mongodb mongosh, redhat codeready linux builder eus, codeready linux builder for arm64 eus +10 more +12 more MongoDB Shell may be susceptible to local privilege escalation in Windows CVE-2025-1756 Fix available 7.5 HighFebruary 27, 2025
• samba rsync, almalinux, archlinux arch linux +24 more +26 more Rsync: --safe-links option bypass leads to path traversal CVE-2024-12088 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +32 more +34 more Rsync: path traversal vulnerability in rsync CVE-2024-12087 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +44 more +46 more Rsync: info leak via uninitialized stack contents CVE-2024-12085 Public exploitFix available 7.5 HighJanuary 9, 2025
• red hat openshift developer tools and services, enterprise linux 10, enterprise linux 8 +25 more +27 more Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) CVE-2024-9676 Fix available 6.5 MediumOctober 15, 2024
• buildah project buildah, red hat openshift developer tools and services, enterprise linux 10 +30 more +32 more Buildah: buildah allows arbitrary directory mount CVE-2024-9675 Fix available 7.8 HighOctober 9, 2024
• openbsd openssh, almalinux, amazon linux +71 more +73 more Openssh: regresshion - race condition in ssh allows rce/dos CVE-2024-6387 Public exploitFix available EPSS 99.5% 8.1 HighJuly 1, 2024
• red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +16 more +18 more Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force CVE-2024-3183 Public exploitFix available 8.1 HighJune 10, 2024
• clusterlabs booth, red hat enterprise linux 10, enterprise linux 7 +17 more +19 more Booth: specially crafted hash can lead to invalid hmac being accepted by booth server CVE-2024-3049 Fix available 5.9 MediumJune 6, 2024
• fedoraproject sssd, fedora, red hat enterprise linux 6 +29 more +31 more Sssd: race condition during authorization leads to gpo policies functioning inconsistently CVE-2023-3758 Fix available 7.1 HighApril 18, 2024
• fedoraproject unbound, red hat enterprise linux 10, enterprise linux 6 +31 more +33 more Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation CVE-2024-1488 Fix available 8.0 HighFebruary 15, 2024
• fedoraproject fedora, red hat directory server 11.5 e4s for rhel 8, directory server 11.7 for rhel 8 +22 more +24 more 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) CVE-2024-1062 Fix available 5.5 MediumFebruary 8, 2024
• debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 more Kernel: null pointer dereference in __nvmet_req_complete CVE-2023-6536 Fix available 6.5 MediumFebruary 7, 2024
• linux kernel, red hat enterprise linux 6, enterprise linux 7 +22 more +24 more Kernel: null pointer dereference in nvmet_tcp_execute_request CVE-2023-6535 Fix available 6.5 MediumFebruary 7, 2024
• debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 more Kernel: null pointer dereference in nvmet_tcp_build_iovec CVE-2023-6356 Fix available 6.5 MediumFebruary 7, 2024
• opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +11 more +13 more Opensc: side-channel leaks while stripping encryption pkcs#1 padding CVE-2023-5992 Fix available 5.6 MediumJanuary 31, 2024
• libtiff, apple ipados, iphone os +21 more +23 more Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service CVE-2023-52356 Public exploitFix available 7.5 HighJanuary 25, 2024
• fedoraproject fedora, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +20 more +22 more Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access CVE-2024-0229 Fix available 7.8 HighJanuary 16, 2024
• debian linux, linux kernel, red hat enterprise linux 6 +25 more +27 more Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c CVE-2023-6915 Fix available 6.2 MediumJanuary 15, 2024
• freeipa, fedoraproject fedora, red hat enterprise linux 6 +32 more +34 more Ipa: invalid csrf protection CVE-2023-5455 Fix available 6.5 MediumJanuary 10, 2024
• debian linux, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +17 more +19 more Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty CVE-2023-6478 Fix available 7.6 HighDecember 13, 2023
• debian linux, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +17 more +19 more Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions CVE-2023-6377 Fix available 7.8 HighDecember 13, 2023
• linux kernel, red hat enterprise linux 6, enterprise linux 7 +15 more +17 more Kernel: out-of-bounds read vulnerability in smbcalcsize CVE-2023-6606 Fix available 7.1 HighDecember 8, 2023
• perl, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 more Perl: write past buffer end via illegal user-defined unicode property CVE-2023-47038 Fix available 7.0 HighNovember 25, 2023
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 more Postgresql: role pg_signal_backend can signal certain superuser processes. CVE-2023-5870 Fix available 2.2 LowNovember 10, 2023
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +37 more +39 more Postgresql: buffer overrun from integer overflow in array modification CVE-2023-5869 Fix available 8.8 HighNovember 10, 2023
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 more Postgresql: memory disclosure in aggregate function calls CVE-2023-5868 Fix available 4.3 MediumNovember 10, 2023
• linux kernel, red hat enterprise linux 8, redhat enterprise linux +4 more +6 more Kpatch: mm/mremap.c: incomplete fix for cve-2022-41222 CVE-2023-1476 7.0 HighNovember 3, 2023
• squid-cache squid, red hat enterprise linux 6, enterprise linux 7 +7 more +9 more Squid: denial of service in ftp CVE-2023-46848 Fix available EPSS 11.4% 8.6 HighNovember 2, 2023
• squid-cache squid, red hat enterprise linux 6 extended lifecycle support, enterprise linux 7 +22 more +24 more Squid: denial of service in http digest authentication CVE-2023-46847 Fix available EPSS 78.5% 8.6 HighNovember 2, 2023
• squid-cache squid, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +18 more +20 more Squid: request/response smuggling in http/1.1 and icap CVE-2023-46846 Fix available 9.3 CriticalNovember 2, 2023
• redhat insights-client, red hat enterprise linux 6, enterprise linux 7 +29 more +31 more Insights-client: unsafe handling of temporary files and directories CVE-2023-3972 Fix available 7.8 HighNovember 1, 2023
• Show olderLoading…