Redhat Enterprise Linux Server Tus vulnerabilities

• gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 more Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" CVE-2026-58016 Fix available 7.5 HighJune 30, 2026
• gnome gdk-pixbuf, red hat ai inference server 3.2, ai inference server 3.3 +35 more +37 more Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image CVE-2026-5201 Public exploitFix available 7.5 HighMarch 31, 2026
• libtiff, debian linux, red hat ai inference server 3.2 +30 more +32 more Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing CVE-2026-4775 Fix available 7.8 HighMarch 24, 2026
• gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 more Glib: integer overflow in in g_escape_uri_string() CVE-2025-13601 Fix available 7.7 HighNovember 26, 2025
• xmlsoft libxml2, red hat discovery 2, enterprise linux 10 +46 more +48 more Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 CVE-2025-6021 Fix available 7.5 HighJune 12, 2025
• gnome yelp, debian linux, red hat enterprise linux 6 +33 more +35 more Yelp: arbitrary file read CVE-2025-3155 Fix available EPSS 13.1% 7.4 HighApril 3, 2025
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +32 more +34 more Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content CVE-2025-2784 Fix available 7.0 HighApril 3, 2025
• samba rsync, almalinux, archlinux arch linux +44 more +46 more Rsync: info leak via uninitialized stack contents CVE-2024-12085 Public exploitFix available 7.5 HighJanuary 9, 2025
• buildah project buildah, red hat openshift developer tools and services, enterprise linux 10 +30 more +32 more Buildah: buildah allows arbitrary directory mount CVE-2024-9675 Fix available 7.8 HighOctober 9, 2024
• fedoraproject sssd, fedora, red hat enterprise linux 6 +29 more +31 more Sssd: race condition during authorization leads to gpo policies functioning inconsistently CVE-2023-3758 Fix available 7.1 HighApril 18, 2024
• fedoraproject unbound, red hat enterprise linux 10, enterprise linux 6 +31 more +33 more Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation CVE-2024-1488 Fix available 8.0 HighFebruary 15, 2024
• fedoraproject fedora, red hat directory server 11.5 e4s for rhel 8, directory server 11.7 for rhel 8 +22 more +24 more 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) CVE-2024-1062 Fix available 5.5 MediumFebruary 8, 2024
• debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 more Kernel: null pointer dereference in __nvmet_req_complete CVE-2023-6536 Fix available 6.5 MediumFebruary 7, 2024
• linux kernel, red hat enterprise linux 6, enterprise linux 7 +22 more +24 more Kernel: null pointer dereference in nvmet_tcp_execute_request CVE-2023-6535 Fix available 6.5 MediumFebruary 7, 2024
• debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 more Kernel: null pointer dereference in nvmet_tcp_build_iovec CVE-2023-6356 Fix available 6.5 MediumFebruary 7, 2024
• freeipa, fedoraproject fedora, red hat enterprise linux 6 +32 more +34 more Ipa: invalid csrf protection CVE-2023-5455 Fix available 6.5 MediumJanuary 10, 2024
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 more Postgresql: role pg_signal_backend can signal certain superuser processes. CVE-2023-5870 Fix available 2.2 LowNovember 10, 2023
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +37 more +39 more Postgresql: buffer overrun from integer overflow in array modification CVE-2023-5869 Fix available 8.8 HighNovember 10, 2023
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 more Postgresql: memory disclosure in aggregate function calls CVE-2023-5868 Fix available 4.3 MediumNovember 10, 2023
• linux kernel, red hat enterprise linux 8, redhat enterprise linux +4 more +6 more Kpatch: mm/mremap.c: incomplete fix for cve-2022-41222 CVE-2023-1476 7.0 HighNovember 3, 2023
• squid-cache squid, red hat enterprise linux 6, enterprise linux 7 +7 more +9 more Squid: denial of service in ftp CVE-2023-46848 Fix available EPSS 11.4% 8.6 HighNovember 2, 2023
• squid-cache squid, red hat enterprise linux 6 extended lifecycle support, enterprise linux 7 +22 more +24 more Squid: denial of service in http digest authentication CVE-2023-46847 Fix available EPSS 78.5% 8.6 HighNovember 2, 2023
• squid-cache squid, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +18 more +20 more Squid: request/response smuggling in http/1.1 and icap CVE-2023-46846 Fix available 9.3 CriticalNovember 2, 2023
• redhat insights-client, red hat enterprise linux 6, enterprise linux 7 +29 more +31 more Insights-client: unsafe handling of temporary files and directories CVE-2023-3972 Fix available 7.8 HighNovember 1, 2023
• linux kernel, red hat enterprise linux 6, enterprise linux 7 +25 more +27 more Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling CVE-2023-5633 Fix available 7.8 HighOctober 23, 2023
• gnu glibc, c library, canonical ubuntu linux +48 more +50 more Glibc: buffer overflow in ld.so leading to privilege escalation CVE-2023-4911 In KEVPublic exploitFix available EPSS 63.8% 7.8 HighOctober 3, 2023
• mariadb, fedoraproject fedora, red hat enterprise linux 7 +18 more +20 more Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6 CVE-2023-5157 Fix available 7.5 HighSeptember 19, 2023
• gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 more Glibc: potential use-after-free in gaih_inet() CVE-2023-4813 Public exploitFix available 5.9 MediumSeptember 12, 2023
• redhat subscription-manager, fedoraproject fedora, red hat enterprise linux 6 +30 more +32 more Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration CVE-2023-3899 Fix available 7.8 HighAugust 22, 2023
• libreswan, redhat enterprise linux, enterprise linux eus +2 more +4 more A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1... CVE-2023-2295 Fix available 7.5 HighMay 16, 2023
• gnu emacs, redhat enterprise linux, enterprise linux eus +2 more +4 more A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the ... CVE-2023-2491 Fix available 7.8 HighMay 9, 2023
• redhat enterprise linux, the webkitgtk team webkitgtk, redhat enterprise linux eus +3 more +5 more A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use... CVE-2023-2203 Fix available 8.8 HighMay 9, 2023
• x.org x server, fedoraproject fedora, redhat enterprise linux +16 more +18 more A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in... CVE-2023-0494 Fix available 7.8 HighFebruary 7, 2023
• fedoraproject sssd, redhat enterprise linux, enterprise linux desktop +10 more +12 more sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters CVE-2022-4254 Fix available 8.8 HighJanuary 27, 2023
• fedoraproject fedora, gnu grub2, redhat enterprise linux eus +5 more +7 more A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead... CVE-2022-2601 Fix available 8.6 HighNovember 15, 2022
• gnu grub2, redhat codeready linux builder, developer tools +9 more +11 more A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user... CVE-2021-3697 Fix available 7.0 HighJune 10, 2022
• gnu grub2, netapp ontap select deploy administration utility, redhat codeready linux builder +10 more +12 more A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader.... CVE-2021-3696 Fix available 4.5 MediumJune 10, 2022
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +11 more +13 more A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An... CVE-2021-3695 Fix available 4.5 MediumJune 10, 2022
• podman project podman, fedoraproject fedora, psgo project psgo +13 more +15 more Podman publishes a malicious image to public registries CVE-2022-1227 Public exploitFix available 8.8 HighApril 29, 2022
• containers podman, fedoraproject fedora, redhat developer tools +11 more +13 more Podman's default inheritable capabilities for linux container not empty CVE-2022-27649 Fix available 7.5 HighApril 1, 2022
• debian linux, linux kernel, fedoraproject fedora +27 more +29 more A flaw use after free in the Linux kernel FUSE filesystem was found in the way user triggers... CVE-2022-1011 Public exploitFix available 7.8 HighMarch 18, 2022
• linux kernel, fedoraproject fedora, netapp h300e firmware +26 more +28 more Important: kernel security, bug fix, and enhancement update CVE-2022-0847 In KEVPublic exploitFix available EPSS 92.8% 7.8 HighMarch 7, 2022
• debian linux, linux kernel, fedoraproject fedora +20 more +22 more A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in... CVE-2022-0516 Fix available 7.8 HighMarch 1, 2022
• linux kernel, ovirt node, fedoraproject fedora +27 more +29 more Important: kernel security, bug fix, and enhancement update CVE-2022-0435 Public exploitFix available EPSS 67.8% 8.8 HighFebruary 10, 2022
• debian linux, linux kernel, canonical ubuntu linux +24 more +26 more Important: kernel security, bug fix, and enhancement update CVE-2022-0492 In KEVPublic exploitFix available 7.8 HighFebruary 8, 2022
• samba, canonical ubuntu linux, debian linux +20 more +22 more The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced... CVE-2021-44142 Public exploitFix available EPSS 73.6% 8.8 HighJanuary 31, 2022
• linux kernel, fedoraproject fedora, netapp h300e firmware +35 more +37 more Important: kernel security, bug fix, and enhancement update CVE-2022-0330 Fix available 7.8 HighJanuary 26, 2022
• polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 more A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec... CVE-2021-4034 In KEVPublic exploitFix available EPSS 94.9% 7.8 HighJanuary 25, 2022
• debian linux, fedoraproject fedora, libarchive +11 more +13 more An improper link resolution flaw can occur while extracting an archive leading to changing modes,... CVE-2021-31566 Fix available 7.8 HighDecember 24, 2021
• debian linux, fedoraproject fedora, libarchive +10 more +12 more An improper link resolution flaw while extracting an archive can lead to changing the access... CVE-2021-23177 Fix available 7.8 HighDecember 24, 2021
• Show olderLoading…