Redhat Enterprise Linux Server vulnerabilities

• gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 more Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" CVE-2026-58016 Fix available 7.5 HighJune 30, 2026
• gnu gnutls, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +46 more +48 more Gnutls: gnutls: denial of service via dtls packet reordering vulnerability CVE-2026-42009 Fix available 7.5 HighApril 30, 2026
• gnome gdk-pixbuf, red hat ai inference server 3.2, ai inference server 3.3 +35 more +37 more Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image CVE-2026-5201 Public exploitFix available 7.5 HighMarch 31, 2026
• libtiff, debian linux, red hat ai inference server 3.2 +30 more +32 more Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing CVE-2026-4775 Fix available 7.8 HighMarch 24, 2026
• libarchive, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +39 more +41 more Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing CVE-2026-4424 Fix available 7.5 HighMarch 19, 2026
• gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 more Glib: integer overflow in in g_escape_uri_string() CVE-2025-13601 Fix available 7.7 HighNovember 26, 2025
• xmlsoft libxml2, red hat discovery 2, enterprise linux 10 +46 more +48 more Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 CVE-2025-6021 Fix available 7.5 HighJune 12, 2025
• gnome yelp, debian linux, red hat enterprise linux 6 +33 more +35 more Yelp: arbitrary file read CVE-2025-3155 Fix available EPSS 13.1% 7.4 HighApril 3, 2025
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +32 more +34 more Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content CVE-2025-2784 Fix available 7.0 HighApril 3, 2025
• mongodb mongosh, redhat codeready linux builder eus, codeready linux builder for arm64 eus +10 more +12 more MongoDB Shell may be susceptible to local privilege escalation in Windows CVE-2025-1756 Fix available 7.5 HighFebruary 27, 2025
• mongodb compass, redhat enterprise linux for arm 64, enterprise linux for ibm z systems +2 more +4 more MongoDB Compass may be susceptible to local privilege escalation in Windows CVE-2025-1755 7.5 HighFebruary 27, 2025
• samba rsync, almalinux, archlinux arch linux +24 more +26 more Rsync: --safe-links option bypass leads to path traversal CVE-2024-12088 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +32 more +34 more Rsync: path traversal vulnerability in rsync CVE-2024-12087 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +44 more +46 more Rsync: info leak via uninitialized stack contents CVE-2024-12085 Public exploitFix available 7.5 HighJanuary 9, 2025
• red hat openshift developer tools and services, enterprise linux 10, enterprise linux 8 +25 more +27 more Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) CVE-2024-9676 Fix available 6.5 MediumOctober 15, 2024
• buildah project buildah, red hat openshift developer tools and services, enterprise linux 10 +30 more +32 more Buildah: buildah allows arbitrary directory mount CVE-2024-9675 Fix available 7.8 HighOctober 9, 2024
• libtiff, red hat enterprise linux 10, enterprise linux 6 +8 more +10 more Libtiff: null pointer dereference in tif_dirinfo.c CVE-2024-7006 Fix available 7.5 HighAugust 6, 2024
• openbsd openssh, almalinux, amazon linux +71 more +73 more Openssh: regresshion - race condition in ssh allows rce/dos CVE-2024-6387 Public exploitFix available EPSS 99.5% 8.1 HighJuly 1, 2024
• clusterlabs booth, red hat enterprise linux 10, enterprise linux 7 +17 more +19 more Booth: specially crafted hash can lead to invalid hmac being accepted by booth server CVE-2024-3049 Fix available 5.9 MediumJune 6, 2024
• fedoraproject sssd, fedora, red hat enterprise linux 6 +29 more +31 more Sssd: race condition during authorization leads to gpo policies functioning inconsistently CVE-2023-3758 Fix available 7.1 HighApril 18, 2024
• fedoraproject unbound, red hat enterprise linux 10, enterprise linux 6 +31 more +33 more Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation CVE-2024-1488 Fix available 8.0 HighFebruary 15, 2024
• fedoraproject fedora, red hat directory server 11.5 e4s for rhel 8, directory server 11.7 for rhel 8 +22 more +24 more 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) CVE-2024-1062 Fix available 5.5 MediumFebruary 8, 2024
• debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 more Kernel: null pointer dereference in __nvmet_req_complete CVE-2023-6536 Fix available 6.5 MediumFebruary 7, 2024
• linux kernel, red hat enterprise linux 6, enterprise linux 7 +22 more +24 more Kernel: null pointer dereference in nvmet_tcp_execute_request CVE-2023-6535 Fix available 6.5 MediumFebruary 7, 2024
• debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 more Kernel: null pointer dereference in nvmet_tcp_build_iovec CVE-2023-6356 Fix available 6.5 MediumFebruary 7, 2024
• debian linux, linux kernel, fedoraproject fedora +15 more +17 more Use-after-free in Linux kernel's netfilter: nf_tables component CVE-2024-1086 In KEVPublic exploitFix available EPSS 28.1% 7.8 HighJanuary 31, 2024
• opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +11 more +13 more Opensc: side-channel leaks while stripping encryption pkcs#1 padding CVE-2023-5992 Fix available 5.6 MediumJanuary 31, 2024
• x.org xwayland, fedoraproject fedora, red hat enterprise linux 6 +13 more +15 more Xorg-x11-server: selinux context corruption CVE-2024-0409 Fix available 7.8 HighJanuary 16, 2024
• fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +13 more +15 more Xorg-x11-server: selinux unlabeled glx pbuffer CVE-2024-0408 Fix available 5.5 MediumJanuary 16, 2024
• debian linux, fedoraproject fedora, red hat enterprise linux 6 +19 more +21 more Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer CVE-2023-6816 Fix available 9.8 CriticalJanuary 16, 2024
• debian linux, linux kernel, red hat enterprise linux 6 +25 more +27 more Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c CVE-2023-6915 Fix available 6.2 MediumJanuary 15, 2024
• freeipa, fedoraproject fedora, red hat enterprise linux 6 +32 more +34 more Ipa: invalid csrf protection CVE-2023-5455 Fix available 6.5 MediumJanuary 10, 2024
• linux kernel, red hat enterprise linux 6, enterprise linux 7 +26 more +28 more Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation CVE-2024-0193 Fix available 7.8 HighJanuary 2, 2024
• linux kernel, red hat enterprise linux 6, enterprise linux 7 +15 more +17 more Kernel: out-of-bounds read vulnerability in smbcalcsize CVE-2023-6606 Fix available 7.1 HighDecember 8, 2023
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 more Postgresql: role pg_signal_backend can signal certain superuser processes. CVE-2023-5870 Fix available 2.2 LowNovember 10, 2023
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +37 more +39 more Postgresql: buffer overrun from integer overflow in array modification CVE-2023-5869 Fix available 8.8 HighNovember 10, 2023
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 more Postgresql: memory disclosure in aggregate function calls CVE-2023-5868 Fix available 4.3 MediumNovember 10, 2023
• linux kernel, red hat enterprise linux 8, redhat enterprise linux +4 more +6 more Kpatch: mm/mremap.c: incomplete fix for cve-2022-41222 CVE-2023-1476 7.0 HighNovember 3, 2023
• squid-cache squid, red hat enterprise linux 6, enterprise linux 7 +7 more +9 more Squid: denial of service in ftp CVE-2023-46848 Fix available EPSS 11.4% 8.6 HighNovember 2, 2023
• squid-cache squid, red hat enterprise linux 6 extended lifecycle support, enterprise linux 7 +22 more +24 more Squid: denial of service in http digest authentication CVE-2023-46847 Fix available EPSS 78.5% 8.6 HighNovember 2, 2023
• squid-cache squid, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +18 more +20 more Squid: request/response smuggling in http/1.1 and icap CVE-2023-46846 Fix available 9.3 CriticalNovember 2, 2023
• redhat insights-client, red hat enterprise linux 6, enterprise linux 7 +29 more +31 more Insights-client: unsafe handling of temporary files and directories CVE-2023-3972 Fix available 7.8 HighNovember 1, 2023
• debian linux, fedoraproject fedora, red hat enterprise linux 6 +25 more +27 more Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty CVE-2023-5367 Fix available 7.8 HighOctober 25, 2023
• linux kernel, red hat enterprise linux 6, enterprise linux 7 +25 more +27 more Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling CVE-2023-5633 Fix available 7.8 HighOctober 23, 2023
• gnu glibc, c library, canonical ubuntu linux +48 more +50 more Glibc: buffer overflow in ld.so leading to privilege escalation CVE-2023-4911 In KEVPublic exploitFix available EPSS 63.8% 7.8 HighOctober 3, 2023
• mariadb, fedoraproject fedora, red hat enterprise linux 7 +18 more +20 more Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6 CVE-2023-5157 Fix available 7.5 HighSeptember 19, 2023
• gnu glibc, fedoraproject fedora, red hat enterprise linux 6 +28 more +30 more Glibc: potential use-after-free in getaddrinfo() CVE-2023-4806 Fix available 5.9 MediumSeptember 18, 2023
• gnu glibc, fedoraproject fedora, netapp h300s firmware +31 more +33 more Glibc: stack read overflow in getaddrinfo in no-aaaa mode CVE-2023-4527 Fix available 6.5 MediumSeptember 18, 2023
• gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 more Glibc: potential use-after-free in gaih_inet() CVE-2023-4813 Public exploitFix available 5.9 MediumSeptember 12, 2023
• keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 more Keylime: challenge-response protocol bypass during agent registration CVE-2023-38201 Fix available 6.5 MediumAugust 25, 2023
• Show olderLoading…