Advisories · Technology
Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION.
Every CVE that names Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Weak cryptography or TLS
- CVSS 9.8 CriticalCritical · CVSS 9+
389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property
- Red Hat Directory Server 11.5 E4S for RHEL 8
- Red Hat Directory Server 11.7 E4S for RHEL 8
- Authentication bypass
- CVSS 7.5 High
Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 7.5 High
Dracut: dracut: root code execution via dhcp options command injection
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 5.5 Medium
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 5.5 Medium
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.8 High
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.8 High
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.8 High
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.8 High
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.8 High
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.8 High
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.1 High
Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Weak cryptography or TLS
- CVSS 6.1 Medium
Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 6.1 Medium
Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.3 High
Xorg: xmayland: use-after-free in xpresentnotify structure creation
- X.Org Xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 7.3 High
Xorg: xwayland: use-after-free in xkb client resource removal
- X.Org Xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 7.3 High
Xorg: xmayland: value overflow in xkbsetcompatmap()
- X.Org Xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 7.8 High
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension
- X.Org xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 7.3 High
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension
- X.Org xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.5 Medium
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore
- X.Org xwayland
- Red Hat Enterprise Linux 10
- CWE-667
- CVSS 7.3 High
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension
- X.Org xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 6.1 Medium
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors
- X.Org xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: use-after-free in syncinittrigger()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: use-after-free in playreleasedevents()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: use of uninitialized pointer in compredirectwindow()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: buffer overflow in xkbchangetypesofkey()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: heap overflow in xkbwritekeysyms()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: buffer overflow in xkbvmodmasktext()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
X.org: xwayland: use-after-free of the root cursor
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 6.5 Medium
Rsync: path traversal vulnerability in rsync
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Path traversal
- CVSS 7.5 High
Rsync: info leak via uninitialized stack contents
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Xorg-x11-server: use-after-free in procrenderaddglyphs
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 7.3 High
Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Red Hat Enterprise Linux 7
- CWE-126
- CVSS 7.3 High
Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Red Hat Enterprise Linux 7
- CWE-126
- CVSS 7.8 High
Xorg-x11-server: heap buffer overflow in disabledevice
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 7.8 High
Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 7.8 High
Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 7.6 High
Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 7.8 High
Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 7.8 High
Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Red Hat Enterprise Linux 7
- Memory corruption