Redhat Enterprise Linux Server Aus vulnerabilities

• gnome gdk-pixbuf, red hat ai inference server 3.2, ai inference server 3.3 +35 more +37 more Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image CVE-2026-5201 Public exploitFix available 7.5 HighMarch 31, 2026
• libtiff, debian linux, red hat ai inference server 3.2 +30 more +32 more Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing CVE-2026-4775 Fix available 7.8 HighMarch 24, 2026
• libarchive, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +39 more +41 more Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing CVE-2026-4424 Fix available 7.5 HighMarch 19, 2026
• gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 more Glib: integer overflow in in g_escape_uri_string() CVE-2025-13601 Fix available 7.7 HighNovember 26, 2025
• xmlsoft libxml2, red hat discovery 2, enterprise linux 10 +46 more +48 more Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 CVE-2025-6021 Fix available 7.5 HighJune 12, 2025
• gnome yelp, debian linux, red hat enterprise linux 6 +33 more +35 more Yelp: arbitrary file read CVE-2025-3155 Fix available EPSS 13.1% 7.4 HighApril 3, 2025
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +32 more +34 more Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content CVE-2025-2784 Fix available 7.0 HighApril 3, 2025
• mongodb mongosh, redhat codeready linux builder eus, codeready linux builder for arm64 eus +10 more +12 more MongoDB Shell may be susceptible to local privilege escalation in Windows CVE-2025-1756 Fix available 7.5 HighFebruary 27, 2025
• samba rsync, almalinux, archlinux arch linux +24 more +26 more Rsync: --safe-links option bypass leads to path traversal CVE-2024-12088 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +32 more +34 more Rsync: path traversal vulnerability in rsync CVE-2024-12087 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +44 more +46 more Rsync: info leak via uninitialized stack contents CVE-2024-12085 Public exploitFix available 7.5 HighJanuary 9, 2025
• red hat openshift developer tools and services, enterprise linux 10, enterprise linux 8 +25 more +27 more Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) CVE-2024-9676 Fix available 6.5 MediumOctober 15, 2024
• buildah project buildah, red hat openshift developer tools and services, enterprise linux 10 +30 more +32 more Buildah: buildah allows arbitrary directory mount CVE-2024-9675 Fix available 7.8 HighOctober 9, 2024
• libtiff, red hat enterprise linux 10, enterprise linux 6 +8 more +10 more Libtiff: null pointer dereference in tif_dirinfo.c CVE-2024-7006 Fix available 7.5 HighAugust 6, 2024
• openbsd openssh, almalinux, amazon linux +71 more +73 more Openssh: regresshion - race condition in ssh allows rce/dos CVE-2024-6387 Public exploitFix available EPSS 99.5% 8.1 HighJuly 1, 2024
• fedoraproject sssd, fedora, red hat enterprise linux 6 +29 more +31 more Sssd: race condition during authorization leads to gpo policies functioning inconsistently CVE-2023-3758 Fix available 7.1 HighApril 18, 2024
• fedoraproject unbound, red hat enterprise linux 10, enterprise linux 6 +31 more +33 more Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation CVE-2024-1488 Fix available 8.0 HighFebruary 15, 2024
• fedoraproject fedora, red hat directory server 11.5 e4s for rhel 8, directory server 11.7 for rhel 8 +22 more +24 more 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) CVE-2024-1062 Fix available 5.5 MediumFebruary 8, 2024
• debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 more Kernel: null pointer dereference in __nvmet_req_complete CVE-2023-6536 Fix available 6.5 MediumFebruary 7, 2024
• linux kernel, red hat enterprise linux 6, enterprise linux 7 +22 more +24 more Kernel: null pointer dereference in nvmet_tcp_execute_request CVE-2023-6535 Fix available 6.5 MediumFebruary 7, 2024
• debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 more Kernel: null pointer dereference in nvmet_tcp_build_iovec CVE-2023-6356 Fix available 6.5 MediumFebruary 7, 2024
• opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +11 more +13 more Opensc: side-channel leaks while stripping encryption pkcs#1 padding CVE-2023-5992 Fix available 5.6 MediumJanuary 31, 2024
• debian linux, linux kernel, red hat enterprise linux 6 +25 more +27 more Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c CVE-2023-6915 Fix available 6.2 MediumJanuary 15, 2024
• freeipa, fedoraproject fedora, red hat enterprise linux 6 +32 more +34 more Ipa: invalid csrf protection CVE-2023-5455 Fix available 6.5 MediumJanuary 10, 2024
• linux kernel, red hat enterprise linux 6, enterprise linux 7 +26 more +28 more Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation CVE-2024-0193 Fix available 7.8 HighJanuary 2, 2024
• linux kernel, red hat enterprise linux 6, enterprise linux 7 +15 more +17 more Kernel: out-of-bounds read vulnerability in smbcalcsize CVE-2023-6606 Fix available 7.1 HighDecember 8, 2023
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 more Postgresql: role pg_signal_backend can signal certain superuser processes. CVE-2023-5870 Fix available 2.2 LowNovember 10, 2023
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +37 more +39 more Postgresql: buffer overrun from integer overflow in array modification CVE-2023-5869 Fix available 8.8 HighNovember 10, 2023
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 more Postgresql: memory disclosure in aggregate function calls CVE-2023-5868 Fix available 4.3 MediumNovember 10, 2023
• squid-cache squid, red hat enterprise linux 6, enterprise linux 7 +7 more +9 more Squid: denial of service in ftp CVE-2023-46848 Fix available EPSS 11.4% 8.6 HighNovember 2, 2023
• squid-cache squid, red hat enterprise linux 6 extended lifecycle support, enterprise linux 7 +22 more +24 more Squid: denial of service in http digest authentication CVE-2023-46847 Fix available EPSS 78.5% 8.6 HighNovember 2, 2023
• squid-cache squid, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +18 more +20 more Squid: request/response smuggling in http/1.1 and icap CVE-2023-46846 Fix available 9.3 CriticalNovember 2, 2023
• redhat insights-client, red hat enterprise linux 6, enterprise linux 7 +29 more +31 more Insights-client: unsafe handling of temporary files and directories CVE-2023-3972 Fix available 7.8 HighNovember 1, 2023
• linux kernel, red hat enterprise linux 6, enterprise linux 7 +25 more +27 more Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling CVE-2023-5633 Fix available 7.8 HighOctober 23, 2023
• gnu glibc, c library, canonical ubuntu linux +48 more +50 more Glibc: buffer overflow in ld.so leading to privilege escalation CVE-2023-4911 In KEVPublic exploitFix available EPSS 63.8% 7.8 HighOctober 3, 2023
• mariadb, fedoraproject fedora, red hat enterprise linux 7 +18 more +20 more Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6 CVE-2023-5157 Fix available 7.5 HighSeptember 19, 2023
• gnu glibc, fedoraproject fedora, red hat enterprise linux 6 +28 more +30 more Glibc: potential use-after-free in getaddrinfo() CVE-2023-4806 Fix available 5.9 MediumSeptember 18, 2023
• gnu glibc, fedoraproject fedora, netapp h300s firmware +31 more +33 more Glibc: stack read overflow in getaddrinfo in no-aaaa mode CVE-2023-4527 Fix available 6.5 MediumSeptember 18, 2023
• gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 more Glibc: potential use-after-free in gaih_inet() CVE-2023-4813 Public exploitFix available 5.9 MediumSeptember 12, 2023
• keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 more Keylime: challenge-response protocol bypass during agent registration CVE-2023-38201 Fix available 6.5 MediumAugust 25, 2023
• redhat subscription-manager, fedoraproject fedora, red hat enterprise linux 6 +30 more +32 more Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration CVE-2023-3899 Fix available 7.8 HighAugust 22, 2023
• debian linux, linux kernel, fedoraproject fedora +10 more +12 more Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free CVE-2023-4147 Public exploitFix available 7.8 HighAugust 7, 2023
• keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 more Keylime: registrar is subject to a dos against ssl connections CVE-2023-38200 Fix available 7.5 HighJuly 24, 2023
• libreswan, redhat enterprise linux, enterprise linux eus +2 more +4 more A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1... CVE-2023-2295 Fix available 7.5 HighMay 16, 2023
• gnu emacs, redhat enterprise linux, enterprise linux eus +2 more +4 more A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the ... CVE-2023-2491 Fix available 7.8 HighMay 9, 2023
• redhat enterprise linux, the webkitgtk team webkitgtk, redhat enterprise linux eus +3 more +5 more A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use... CVE-2023-2203 Fix available 8.8 HighMay 9, 2023
• x.org x server, fedoraproject fedora, redhat enterprise linux +16 more +18 more A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in... CVE-2023-0494 Fix available 7.8 HighFebruary 7, 2023
• fedoraproject sssd, redhat enterprise linux, enterprise linux desktop +10 more +12 more sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters CVE-2022-4254 Fix available 8.8 HighJanuary 27, 2023
• fedoraproject fedora, gnu grub2, redhat enterprise linux eus +5 more +7 more A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead... CVE-2022-2601 Fix available 8.6 HighNovember 15, 2022
• net-snmp, debian linux, fedoraproject fedora +12 more +14 more net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference CVE-2022-24809 Fix available 6.5 MediumJuly 8, 2022
• Show olderLoading…