Fedora.

xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

• Fedora
• Red Hat Enterprise Linux 9
• Authentication bypass

PackageKit: dnf5 backend ignores SIMULATE on RepoRemove

• Fedora
• Red Hat Enterprise Linux 9
• Broken access control

NetworkManager-l2tp: local privilege escalation via ipsec.conf injection

• Fedora
• Fedora Extra Packages for Enterprise Linux (EPEL)
• Command injection

Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function

• ofono
• Fedora
• Memory corruption

Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function

• ofono
• Fedora
• Memory corruption

Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() function

• ofono
• Fedora
• Memory corruption

Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function

• ofono
• Fedora
• Memory corruption

Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet

• openvswitch
• Red Hat Fast Datapath for RHEL 7
• CWE-248

Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Glibc: integer overflow in __vsyslog_internal()

• glibc
• Red Hat Enterprise Linux 6
• Memory corruption

Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()

• glibc
• Red Hat Enterprise Linux 6
• Memory corruption

Glibc: heap-based buffer overflow in __vsyslog_internal()

• glibc
• Red Hat Enterprise Linux 6
• Memory corruption

Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths

• pkcs11-provider
• Fedora
• CWE-1300

Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Sudo: improper handling of ipa_hostname leads to privilege mismanagement

• sudo
• Red Hat Enterprise Linux 6
• Privilege escalation

W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)

• w3m
• Fedora
• Memory corruption

Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c

• tcpreplay
• Fedora Extra Packages for Enterprise Linux
• Memory corruption

Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp

• OpenImageIO
• Fedora Extra Packages for Enterprise Linux
• Memory corruption

Kernel: io_uring out of boundary memory access in __io_uaddr_map()

• kernel
• Red Hat Enterprise Linux 6
• CWE-823

Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: nvme: memory corruption via unprivileged user passthrough

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Samba: ad dc password exposure to privileged users and rodcs

• samba
• Red Hat Enterprise Linux 6
• Memory corruption

Use-after-free in parse_lease_state()

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Potential buffer overflow in php_cli_server_startup_workers

• php
• Red Hat Enterprise Linux 6
• Memory corruption

Reachable assertion in avahi_alternative_host_name

• avahi
• Red Hat Enterprise Linux 6
• Denial of service

Reachable assertion in avahi_rdata_parse

• avahi
• Red Hat Enterprise Linux 6
• Denial of service

Reachable assertion in dbus_set_host_name

• avahi
• Red Hat Enterprise Linux 6
• Denial of service

Reachable assertion in avahi_escape_label

• avahi
• Red Hat Enterprise Linux 6
• Denial of service

Reachable assertion in avahi_dns_packet_append_record

• avahi
• Red Hat Enterprise Linux 6
• Denial of service

Heap-buffer-overflow in extractimagesection()

• libtiff
• Red Hat Enterprise Linux 6
• Memory corruption

Use-after-free in setup_async_work()

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Use-after-free in smb2_is_status_io_timeout()

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Openvswitch don't match packets on nd_target field

• openvswitch
• Red Hat Fast Datapath for RHEL 7
• CWE-345

Memory leak on tls connections

• jss
• Red Hat Enterprise Linux 6
• Denial of service

Service monitor mac flow is not rate limited

• ovn
• Red Hat Fast Datapath for RHEL 7
• Denial of service

Heap out of bound read in builtin.c

• gawk
• Red Hat Enterprise Linux 6
• Memory corruption

Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c

• kernel
• Red Hat Enterprise Linux 6
• CWE-684

Out of bounds read in parse_module function in bfd/vms-alpha.c

• binutils
• Red Hat Enterprise Linux 6
• Memory corruption

Field `file_table` of `struct module *module` is uninitialized

• binutils
• Red Hat Enterprise Linux 6
• Memory corruption

Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized

• binutils
• Red Hat Enterprise Linux 6
• Memory corruption

Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`

• binutils
• Red Hat Enterprise Linux 6
• Memory corruption

Gvariant deserialisation does not match spec for non-normal data

• glib2
• Red Hat Enterprise Linux 6
• Denial of service

Dma reentrancy issue (incomplete fix for cve-2021-3750)

• qemu
• Red Hat Enterprise Linux 6
• Memory corruption

Sev-es / sev-snp vmgexit double fetch vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Triggerable assertion due to race condition in hot-unplug

• qemu
• Red Hat Enterprise Linux 6
• Denial of service

Use after free race between mbind() and vma-locked page fault

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c

• Kernel
• Red Hat Enterprise Linux 6
• CWE-402

Memory leak in btrfs_get_dev_args_from_path()

• Kernel
• Red Hat Enterprise Linux 6
• Denial of service

Kernel: btrfs: double free in btrfs_get_root_ref()

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Out-of-bounds read information disclosure vulnerability

• qemu-kvm
• Red Hat Enterprise Linux 6
• Memory corruption

Heap buffer overflow in virtio_crypto_sym_op_helper()

• qemu
• Red Hat Enterprise Linux 6
• Memory corruption

Tree connection null pointer dereference denial-of-service vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Session race condition remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Session null pointer dereference denial-of-service vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Session race condition remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Qemu: 9pfs: suid/sgid bits not dropped on file write

• qemu
• Red Hat Enterprise Linux 6
• CWE-281

Session setup memory exhaustion denial-of-service vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Denial of service

Inifinite loop in babld message parsing may cause dos

• frr
• Red Hat Enterprise Linux 8
• Denial of service