# Red Hat Enterprise Linux 10. Every CVE that names Red Hat Enterprise Linux 10 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme](https://agentprime.io/advisories/CVE-2025-1244.md) `CVE-2025-1244` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Feb 2025 · Tags: Command injection - [Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos](https://agentprime.io/advisories/CVE-2024-12243.md) `CVE-2024-12243` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: Denial of service - [Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos](https://agentprime.io/advisories/CVE-2024-12133.md) `CVE-2024-12133` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: Denial of service - [Rsync: heap buffer overflow in rsync due to improper checksum length handling](https://agentprime.io/advisories/CVE-2024-12084.md) `CVE-2024-12084` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.73 · Not analysed yet · Published 15 Jan 2025 · Tags: Memory corruption - [Freeipa: administrative user data leaked through systemd journal](https://agentprime.io/advisories/CVE-2024-11029.md) `CVE-2024-11029` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: Information disclosure - [Rsync: path traversal vulnerability in rsync](https://agentprime.io/advisories/CVE-2024-12087.md) `CVE-2024-12087` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal - [Rsync: race condition in rsync handling symbolic links](https://agentprime.io/advisories/CVE-2024-12747.md) `CVE-2024-12747` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Race condition - [Rsync: --safe-links option bypass leads to path traversal](https://agentprime.io/advisories/CVE-2024-12088.md) `CVE-2024-12088` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal - [Rsync: rsync server leaks arbitrary client files](https://agentprime.io/advisories/CVE-2024-12086.md) `CVE-2024-12086` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-390 - [Rsync: info leak via uninitialized stack contents](https://agentprime.io/advisories/CVE-2024-12085.md) `CVE-2024-12085` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Ruby: openssl: ruby marvin attack](https://agentprime.io/advisories/CVE-2025-0306.md) `CVE-2025-0306` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 9 Jan 2025 · Tags: CWE-385 - [Openjpeg: heap buffer overflow in lib/openjp2/j2k.c](https://agentprime.io/advisories/CVE-2024-56827.md) `CVE-2024-56827` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 9 Jan 2025 · Tags: Memory corruption - [Openjpeg: heap buffer overflow in bin/common/color.c](https://agentprime.io/advisories/CVE-2024-56826.md) `CVE-2024-56826` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 9 Jan 2025 · Tags: Memory corruption - [Tuned: improper sanitization of \`instance_name\` parameter of the \`instance_create()\` method](https://agentprime.io/advisories/CVE-2024-52337.md) `CVE-2024-52337` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 7 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 26 Nov 2024 · Tags: CWE-20 - [Tuned: \`script_pre\` and \`script_post\` options allow to pass arbitrary scripts executed by root](https://agentprime.io/advisories/CVE-2024-52336.md) `CVE-2024-52336` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 26 Nov 2024 · Tags: Privilege escalation - [Avahi: avahi wide-area dns uses constant source port](https://agentprime.io/advisories/CVE-2024-52615.md) `CVE-2024-52615` · CVE record: avahi avahi and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Nov 2024 · Tags: Weak cryptography or TLS - [Samba: check attribute access rights for ldap adds of computers](https://agentprime.io/advisories/CVE-2020-25720.md) `CVE-2020-25720` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 17 Nov 2024 · Tags: Privilege escalation - [Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block](https://agentprime.io/advisories/CVE-2024-49395.md) `CVE-2024-49395` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-1230 - [Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing](https://agentprime.io/advisories/CVE-2024-49393.md) `CVE-2024-49393` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Weak cryptography or TLS - [Pam: improper hostname interpretation in pam_access leads to access control bypass](https://agentprime.io/advisories/CVE-2024-10963.md) `CVE-2024-10963` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.4 High · Not analysed yet · Published 7 Nov 2024 · Tags: Authentication bypass - [Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2024-9632.md) `CVE-2024-9632` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 30 Oct 2024 · Tags: Memory corruption - [Pam: libpam: libpam vulnerable to read hashed password](https://agentprime.io/advisories/CVE-2024-10041.md) `CVE-2024-10041` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: Information disclosure - [Networkmanager-libreswan: local privilege escalation via leftupdown](https://agentprime.io/advisories/CVE-2024-9050.md) `CVE-2024-9050` · CVE record: Red Hat Red Hat Enterprise Linux 7.7 Advanced Update Support and 4 more · CVSS 7.8 High · Not analysed yet · Published 22 Oct 2024 · Tags: Code injection - [Qemu-kvm: information leak in virtio devices](https://agentprime.io/advisories/CVE-2024-8612.md) `CVE-2024-8612` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.8 Low · Not analysed yet · Published 20 Sept 2024 · Tags: Information disclosure - [Qemu-kvm: usb: assertion failure in usb_ep_get()](https://agentprime.io/advisories/CVE-2024-8354.md) `CVE-2024-8354` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Denial of service - [Pcp: pmpost symlink attack allows escalating pcp to root user](https://agentprime.io/advisories/CVE-2024-45770.md) `CVE-2024-45770` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Path traversal - [Pcp: pmcd heap corruption through metric pmstore operations](https://agentprime.io/advisories/CVE-2024-45769.md) `CVE-2024-45769` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Memory corruption - [Libopensc: heap buffer overflow in openpgp driver when generating key](https://agentprime.io/advisories/CVE-2024-8443.md) `CVE-2024-8443` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 2.9 Low · Not analysed yet · Published 10 Sept 2024 · Tags: Memory corruption - [389-ds-base: server crash while modifying \`userpassword\` using malformed input (incomplete fix for cve-2024-2199)](https://agentprime.io/advisories/CVE-2024-8445.md) `CVE-2024-8445` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 5 Sept 2024 · Tags: CWE-20 - [Libopensc: incorrect handling of the length of buffers or files in pkcs15init](https://agentprime.io/advisories/CVE-2024-45620.md) `CVE-2024-45620` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Libopensc: incorrect handling length of buffers or files in libopensc](https://agentprime.io/advisories/CVE-2024-45619.md) `CVE-2024-45619` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init](https://agentprime.io/advisories/CVE-2024-45618.md) `CVE-2024-45618` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc](https://agentprime.io/advisories/CVE-2024-45617.md) `CVE-2024-45617` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc](https://agentprime.io/advisories/CVE-2024-45616.md) `CVE-2024-45616` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init](https://agentprime.io/advisories/CVE-2024-45615.md) `CVE-2024-45615` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate](https://agentprime.io/advisories/CVE-2024-5148.md) `CVE-2024-5148` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 7.5 High · Not analysed yet · Published 2 Sept 2024 · Tags: CWE-488 - [Libvirt: crash of virtinterfaced via virconnectlistinterfaces()](https://agentprime.io/advisories/CVE-2024-8235.md) `CVE-2024-8235` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 30 Aug 2024 · Tags: Memory corruption - [Libtiff: null pointer dereference in tif_dirinfo.c](https://agentprime.io/advisories/CVE-2024-7006.md) `CVE-2024-7006` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Aug 2024 · Tags: Memory corruption - [Qemu: denial of service via improper synchronization in qemu nbd server during socket closure](https://agentprime.io/advisories/CVE-2024-7409.md) `CVE-2024-7409` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2024 · Tags: CWE-662 - [Libnbd: nbd server improper certificate validation](https://agentprime.io/advisories/CVE-2024-7383.md) `CVE-2024-7383` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 7.4 High · Not analysed yet · Published 5 Aug 2024 · Tags: Weak cryptography or TLS - [Gtk3: gtk2: library injection from cwd](https://agentprime.io/advisories/CVE-2024-6655.md) `CVE-2024-6655` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.0 High · Not analysed yet · Published 16 Jul 2024 · Tags: Code injection - [389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request](https://agentprime.io/advisories/CVE-2024-6237.md) `CVE-2024-6237` · CVE record: Red Hat Red Hat Directory Server 12.4 for RHEL 9 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-230 - [Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9](https://agentprime.io/advisories/CVE-2024-6409.md) `CVE-2024-6409` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.28 · Not analysed yet · Published 8 Jul 2024 · Tags: CWE-364 - [Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss](https://agentprime.io/advisories/CVE-2024-6505.md) `CVE-2024-6505` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 5 Jul 2024 · Tags: Memory corruption - [Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option](https://agentprime.io/advisories/CVE-2024-6126.md) `CVE-2024-6126` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 3.2 Low · Not analysed yet · Published 3 Jul 2024 · Tags: Denial of service - [Qemu-kvm: 'qemu-img info' leads to host file read/write](https://agentprime.io/advisories/CVE-2024-4467.md) `CVE-2024-4467` · CVE record: Red Hat Advanced Virtualization for RHEL 8.2.1 and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Jul 2024 · Tags: Memory corruption - [Openssh: regresshion - race condition in ssh allows rce/dos](https://agentprime.io/advisories/CVE-2024-6387.md) `CVE-2024-6387` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 1.00 · Not analysed yet · Published 1 Jul 2024 · Tags: CWE-364 - [Poppler: pdfinfo: crash in broken documents when using -dests parameter](https://agentprime.io/advisories/CVE-2024-6239.md) `CVE-2024-6239` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 21 Jun 2024 · Tags: CWE-20 - [389-ds-base: malformed userpassword hash may cause denial of service](https://agentprime.io/advisories/CVE-2024-5953.md) `CVE-2024-5953` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 18 Jun 2024 · Tags: CWE-1288 - [Nano: running \`chmod\` and \`chown\` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file](https://agentprime.io/advisories/CVE-2024-5742.md) `CVE-2024-5742` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 Jun 2024 · Tags: Path traversal - [Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force](https://agentprime.io/advisories/CVE-2024-3183.md) `CVE-2024-3183` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 8.1 High · Not analysed yet · Published 12 Jun 2024 · Tags: Weak cryptography or TLS - [Booth: specially crafted hash can lead to invalid hmac being accepted by booth server](https://agentprime.io/advisories/CVE-2024-3049.md) `CVE-2024-3049` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 6 Jun 2024 · Tags: CWE-345 - [Libndp: buffer overflow in route information length field](https://agentprime.io/advisories/CVE-2024-5564.md) `CVE-2024-5564` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 31 May 2024 · Tags: Memory corruption - [389-ds-base: potential denial of service via specially crafted kerberos as-req request](https://agentprime.io/advisories/CVE-2024-3657.md) `CVE-2024-3657` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 28 May 2024 · Tags: CWE-20 - [Rpm-ostree: world-readable /etc/shadow file](https://agentprime.io/advisories/CVE-2024-2905.md) `CVE-2024-2905` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 25 Apr 2024 · Tags: Broken access control - [Xorg-x11-server: use-after-free in procrenderaddglyphs](https://agentprime.io/advisories/CVE-2024-31083.md) `CVE-2024-31083` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Apr 2024 · Tags: Memory corruption - [Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap](https://agentprime.io/advisories/CVE-2024-31082.md) `CVE-2024-31082` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.3 High · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-126 - [Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice](https://agentprime.io/advisories/CVE-2024-31081.md) `CVE-2024-31081` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.3 High · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-126 - [Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents](https://agentprime.io/advisories/CVE-2024-31080.md) `CVE-2024-31080` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.3 High · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-126 - [Xz: malicious code in distributed source](https://agentprime.io/advisories/CVE-2024-3094.md) `CVE-2024-3094` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.91 · Not analysed yet · Published 29 Mar 2024 · Tags: CWE-506 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .