# Red Hat Enterprise Linux 6. Every CVE that names Red Hat Enterprise Linux 6 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash](https://agentprime.io/advisories/CVE-2024-4693.md) `CVE-2024-4693` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 May 2024 · Tags: CWE-672 - [Libvirt: stack use-after-free in virnetclientioeventloop()](https://agentprime.io/advisories/CVE-2024-4418.md) `CVE-2024-4418` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 8 May 2024 · Tags: CWE-562 - [Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)](https://agentprime.io/advisories/CVE-2024-2467.md) `CVE-2024-2467` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.9 Medium · Not analysed yet · Published 25 Apr 2024 · Tags: CWE-208 - [Sssd: race condition during authorization leads to gpo policies functioning inconsistently](https://agentprime.io/advisories/CVE-2023-3758.md) `CVE-2023-3758` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.1 High · Not analysed yet · Published 18 Apr 2024 · Tags: Race condition - [Qemu-kvm: net: assertion failure in update_sctp_checksum()](https://agentprime.io/advisories/CVE-2024-3567.md) `CVE-2024-3567` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: Denial of service - [Qemu: virtio: dma reentrancy issue leads to double free vulnerability](https://agentprime.io/advisories/CVE-2024-3446.md) `CVE-2024-3446` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.2 High · Not analysed yet · Published 9 Apr 2024 · Tags: Memory corruption - [Xorg-x11-server: use-after-free in procrenderaddglyphs](https://agentprime.io/advisories/CVE-2024-31083.md) `CVE-2024-31083` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Apr 2024 · Tags: Memory corruption - [Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap](https://agentprime.io/advisories/CVE-2024-31082.md) `CVE-2024-31082` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.3 High · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-126 - [Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice](https://agentprime.io/advisories/CVE-2024-31081.md) `CVE-2024-31081` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.3 High · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-126 - [Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents](https://agentprime.io/advisories/CVE-2024-31080.md) `CVE-2024-31080` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.3 High · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-126 - [Xz: malicious code in distributed source](https://agentprime.io/advisories/CVE-2024-3094.md) `CVE-2024-3094` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.91 · Not analysed yet · Published 29 Mar 2024 · Tags: CWE-506 - [Pcp: exposure of the redis server backend allows remote command execution via pmproxy](https://agentprime.io/advisories/CVE-2024-3019.md) `CVE-2024-3019` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 28 Mar 2024 · Tags: Information disclosure - [Libvirt: negative g_new0 length can lead to unbounded memory allocation](https://agentprime.io/advisories/CVE-2024-2494.md) `CVE-2024-2494` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 21 Mar 2024 · Tags: Denial of service - [Gnutls: vulnerable to minerva side-channel information leak](https://agentprime.io/advisories/CVE-2024-28834.md) `CVE-2024-28834` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Mar 2024 · Tags: Weak cryptography or TLS - [Gnutls: potential crash during chain building/verification](https://agentprime.io/advisories/CVE-2024-28835.md) `CVE-2024-28835` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 21 Mar 2024 · Tags: CWE-248 - [Libvirt: null pointer dereference in udevconnectlistallinterfaces()](https://agentprime.io/advisories/CVE-2024-2496.md) `CVE-2024-2496` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 18 Mar 2024 · Tags: Memory corruption - [Unixodbc: out of bounds stack write due to pointer-to-integer types conversion](https://agentprime.io/advisories/CVE-2024-1013.md) `CVE-2024-1013` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.8 High · Not analysed yet · Published 18 Mar 2024 · Tags: CWE-823 - [Libvirt: off-by-one error in udevlistinterfacesbystatus()](https://agentprime.io/advisories/CVE-2024-1441.md) `CVE-2024-1441` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Mar 2024 · Tags: CWE-193 - [Libgcrypt: vulnerable to marvin attack](https://agentprime.io/advisories/CVE-2024-2236.md) `CVE-2024-2236` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 6 Mar 2024 · Tags: CWE-385 - [Pcp: unsafe use of directories allows pcp to root privilege escalation](https://agentprime.io/advisories/CVE-2023-6917.md) `CVE-2023-6917` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 6.0 Medium · Not analysed yet · Published 28 Feb 2024 · Tags: Race condition - [Xorg-x11-server: heap buffer overflow in disabledevice](https://agentprime.io/advisories/CVE-2024-21886.md) `CVE-2024-21886` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 28 Feb 2024 · Tags: Memory corruption - [Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent](https://agentprime.io/advisories/CVE-2024-21885.md) `CVE-2024-21885` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 28 Feb 2024 · Tags: Memory corruption - [Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation](https://agentprime.io/advisories/CVE-2024-1488.md) `CVE-2024-1488` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.0 High · Not analysed yet · Published 15 Feb 2024 · Tags: Broken access control - [389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)](https://agentprime.io/advisories/CVE-2024-1062.md) `CVE-2024-1062` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 12 Feb 2024 · Tags: Memory corruption - [Kernel: stack overflow problem in open vswitch kernel module leading to dos](https://agentprime.io/advisories/CVE-2024-1151.md) `CVE-2024-1151` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Feb 2024 · Tags: Memory corruption - [Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access](https://agentprime.io/advisories/CVE-2024-0229.md) `CVE-2024-0229` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Feb 2024 · Tags: Memory corruption - [Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu](https://agentprime.io/advisories/CVE-2024-1312.md) `CVE-2024-1312` · CVE record: kernel and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 8 Feb 2024 · Tags: Memory corruption - [Kernel: null pointer dereference in \_\_nvmet_req_complete](https://agentprime.io/advisories/CVE-2023-6536.md) `CVE-2023-6536` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Feb 2024 · Tags: Memory corruption - [Kernel: null pointer dereference in nvmet_tcp_execute_request](https://agentprime.io/advisories/CVE-2023-6535.md) `CVE-2023-6535` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Feb 2024 · Tags: Memory corruption - [Kernel: null pointer dereference in nvmet_tcp_build_iovec](https://agentprime.io/advisories/CVE-2023-6356.md) `CVE-2023-6356` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Feb 2024 · Tags: Memory corruption - [Grub2: grub2-set-bootflag can be abused by local (pseudo-)users](https://agentprime.io/advisories/CVE-2024-1048.md) `CVE-2024-1048` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 3.3 Low · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-459 - [Cpio: extraction allows symlinks which enables remote command execution](https://agentprime.io/advisories/CVE-2023-7216.md) `CVE-2023-7216` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 5 Feb 2024 · Tags: Path traversal - [Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation](https://agentprime.io/advisories/CVE-2023-6240.md) `CVE-2023-6240` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Feb 2024 · Tags: Information disclosure - [Glibc: integer overflow in \_\_vsyslog_internal()](https://agentprime.io/advisories/CVE-2023-6780.md) `CVE-2023-6780` · CVE record: glibc and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 31 Jan 2024 · Tags: Memory corruption - [Glibc: off-by-one heap-based buffer overflow in \_\_vsyslog_internal()](https://agentprime.io/advisories/CVE-2023-6779.md) `CVE-2023-6779` · CVE record: glibc and 4 more · CVSS 8.2 High · Not analysed yet · Published 31 Jan 2024 · Tags: Memory corruption - [Glibc: heap-based buffer overflow in \_\_vsyslog_internal()](https://agentprime.io/advisories/CVE-2023-6246.md) `CVE-2023-6246` · CVE record: glibc and 4 more · CVSS 8.4 High · Not analysed yet · Published 31 Jan 2024 · Tags: Memory corruption - [Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)](https://agentprime.io/advisories/CVE-2024-0914.md) `CVE-2024-0914` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 31 Jan 2024 · Tags: Information disclosure - [Kernel: max page sharing of kernel samepage merging (ksm) may cause memory deduplication](https://agentprime.io/advisories/CVE-2024-0564.md) `CVE-2024-0564` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 30 Jan 2024 · Tags: Information disclosure - [Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-6200.md) `CVE-2023-6200` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 28 Jan 2024 · Tags: Race condition - [Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function](https://agentprime.io/advisories/CVE-2024-0841.md) `CVE-2024-0841` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 6.6 Medium · Not analysed yet · Published 28 Jan 2024 · Tags: Memory corruption - [Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service](https://agentprime.io/advisories/CVE-2023-52356.md) `CVE-2023-52356` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 25 Jan 2024 · Tags: Memory corruption - [Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom](https://agentprime.io/advisories/CVE-2023-52355.md) `CVE-2023-52355` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 25 Jan 2024 · Tags: Memory corruption - [Kernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()](https://agentprime.io/advisories/CVE-2023-39197.md) `CVE-2023-39197` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 4.0 Medium · Not analysed yet · Published 23 Jan 2024 · Tags: Memory corruption - [Kernel: use-after-free while changing the mount option in \_\_ext4_remount leading](https://agentprime.io/advisories/CVE-2024-0775.md) `CVE-2024-0775` · CVE record: Linux kernel and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 22 Jan 2024 · Tags: Memory corruption - [Kernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uaf](https://agentprime.io/advisories/CVE-2023-6531.md) `CVE-2023-6531` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 7.0 High · Not analysed yet · Published 21 Jan 2024 · Tags: Race condition - [Kernel: nf_tables: pointer math issue in nft_byteorder_eval()](https://agentprime.io/advisories/CVE-2024-0607.md) `CVE-2024-0607` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.6 Medium · Not analysed yet · Published 18 Jan 2024 · Tags: CWE-229 - [Xorg-x11-server: selinux context corruption](https://agentprime.io/advisories/CVE-2024-0409.md) `CVE-2024-0409` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 3 more · CVSS 7.8 High · Not analysed yet · Published 18 Jan 2024 · Tags: Memory corruption - [Xorg-x11-server: selinux unlabeled glx pbuffer](https://agentprime.io/advisories/CVE-2024-0408.md) `CVE-2024-0408` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Jan 2024 · Tags: CWE-158 - [Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer](https://agentprime.io/advisories/CVE-2023-6816.md) `CVE-2023-6816` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Jan 2024 · Tags: Memory corruption - [Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination](https://agentprime.io/advisories/CVE-2024-0646.md) `CVE-2024-0646` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.0 High · Not analysed yet · Published 17 Jan 2024 · Tags: Memory corruption - [Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke](https://agentprime.io/advisories/CVE-2024-0641.md) `CVE-2024-0641` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Jan 2024 · Tags: Denial of service - [Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos](https://agentprime.io/advisories/CVE-2024-0639.md) `CVE-2024-0639` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Jan 2024 · Tags: Denial of service - [Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap](https://agentprime.io/advisories/CVE-2024-0582.md) `CVE-2024-0582` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 16 Jan 2024 · Tags: Memory corruption - [Gnutls: rejects certificate chain with distributed trust](https://agentprime.io/advisories/CVE-2024-0567.md) `CVE-2024-0567` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Weak cryptography or TLS - [Sqlite: use-after-free bug in jsonparseaddnodearray](https://agentprime.io/advisories/CVE-2024-0232.md) `CVE-2024-0232` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 16 Jan 2024 · Tags: Memory corruption - [Gnutls: incomplete fix for cve-2023-5981](https://agentprime.io/advisories/CVE-2024-0553.md) `CVE-2024-0553` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Information disclosure - [Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client](https://agentprime.io/advisories/CVE-2024-0565.md) `CVE-2024-0565` · CVE record: Linux kernel and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 15 Jan 2024 · Tags: Memory corruption - [Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c](https://agentprime.io/advisories/CVE-2024-0562.md) `CVE-2024-0562` · CVE record: Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Jan 2024 · Tags: Memory corruption - [Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c](https://agentprime.io/advisories/CVE-2023-6915.md) `CVE-2023-6915` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 6.2 Medium · Not analysed yet · Published 15 Jan 2024 · Tags: Memory corruption - [Qemu: vnc: null pointer dereference in qemu_clipboard_request()](https://agentprime.io/advisories/CVE-2023-6683.md) `CVE-2023-6683` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .