# Red Hat Enterprise Linux 6.

Every CVE that names Red Hat Enterprise Linux 6 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.](https://agentprime.io/advisories/CVE-2024-0443.md)
  `CVE-2024-0443` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Jan 2024 · Tags: CWE-402
- [Ipa: invalid csrf protection](https://agentprime.io/advisories/CVE-2023-5455.md)
  `CVE-2023-5455` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jan 2024 · Tags: Cross-site request forgery (CSRF)
- [Kernel: information disclosure in vhost/vhost.c:vhost_new_msg()](https://agentprime.io/advisories/CVE-2024-0340.md)
  `CVE-2024-0340` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Information disclosure
- [Kernel: aoe: improper reference count leads to use-after-free vulnerability](https://agentprime.io/advisories/CVE-2023-6270.md)
  `CVE-2023-6270` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.0 High · Not analysed yet · Published 4 Jan 2024 · Tags: Memory corruption
- [Packagekitd: use-after-free in idle function callback](https://agentprime.io/advisories/CVE-2024-0217.md)
  `CVE-2024-0217` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 3.3 Low · Not analysed yet · Published 3 Jan 2024 · Tags: Memory corruption
- [Kernel: refcount leak in ctnetlink_create_conntrack()](https://agentprime.io/advisories/CVE-2023-7192.md)
  `CVE-2023-7192` · CVE record: Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 2 Jan 2024 · Tags: Denial of service
- [Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation](https://agentprime.io/advisories/CVE-2024-0193.md)
  `CVE-2024-0193` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()](https://agentprime.io/advisories/CVE-2023-6693.md)
  `CVE-2023-6693` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Perl: perl for windows binary hijacking vulnerability](https://agentprime.io/advisories/CVE-2023-47039.md)
  `CVE-2023-47039` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.8 High · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Shadow-utils: possible password leak during passwd(1) change](https://agentprime.io/advisories/CVE-2023-4641.md)
  `CVE-2023-4641` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 27 Dec 2023 · Tags: Authentication bypass
- [Sudo: improper handling of ipa_hostname leads to privilege mismanagement](https://agentprime.io/advisories/CVE-2023-7090.md)
  `CVE-2023-7090` · CVE record: sudo and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 23 Dec 2023 · Tags: Privilege escalation
- [Kernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()](https://agentprime.io/advisories/CVE-2023-7042.md)
  `CVE-2023-7042` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 4.4 Medium · Not analysed yet · Published 21 Dec 2023 · Tags: Memory corruption
- [Kernel: gsm multiplexing race condition leads to privilege escalation](https://agentprime.io/advisories/CVE-2023-6546.md)
  `CVE-2023-6546` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.0 High · Not analysed yet · Published 21 Dec 2023 · Tags: CWE-366
- [Libssh: missing checks for return values for digests](https://agentprime.io/advisories/CVE-2023-6918.md)
  `CVE-2023-6918` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 3.7 Low · Not analysed yet · Published 18 Dec 2023 · Tags: CWE-252
- [Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c](https://agentprime.io/advisories/CVE-2023-6228.md)
  `CVE-2023-6228` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 3.3 Low · Not analysed yet · Published 18 Dec 2023 · Tags: Memory corruption
- [Perl: write past buffer end via illegal user-defined unicode property](https://agentprime.io/advisories/CVE-2023-47038.md)
  `CVE-2023-47038` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 7.0 High · Not analysed yet · Published 18 Dec 2023 · Tags: Memory corruption
- [Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty](https://agentprime.io/advisories/CVE-2023-6478.md)
  `CVE-2023-6478` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.6 High · Not analysed yet · Published 13 Dec 2023 · Tags: Memory corruption
- [Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions](https://agentprime.io/advisories/CVE-2023-6377.md)
  `CVE-2023-6377` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Dec 2023 · Tags: Memory corruption
- [Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c](https://agentprime.io/advisories/CVE-2023-6679.md)
  `CVE-2023-6679` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Dec 2023 · Tags: Memory corruption
- [Postgresql: role pg_signal_backend can signal certain superuser processes.](https://agentprime.io/advisories/CVE-2023-5870.md)
  `CVE-2023-5870` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 2.2 Low · Not analysed yet · Published 10 Dec 2023 · Tags: Denial of service
- [Postgresql: memory disclosure in aggregate function calls](https://agentprime.io/advisories/CVE-2023-5868.md)
  `CVE-2023-5868` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 10 Dec 2023 · Tags: CWE-686
- [Postgresql: buffer overrun from integer overflow in array modification](https://agentprime.io/advisories/CVE-2023-5869.md)
  `CVE-2023-5869` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Dec 2023 · Tags: Memory corruption
- [Kernel: io_uring out of boundary memory access in \_\_io_uaddr_map()](https://agentprime.io/advisories/CVE-2023-6560.md)
  `CVE-2023-6560` · CVE record: kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Dec 2023 · Tags: CWE-823
- [Kernel: null pointer dereference vulnerability in nft_dynset_init()](https://agentprime.io/advisories/CVE-2023-6622.md)
  `CVE-2023-6622` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Dec 2023 · Tags: Memory corruption
- [Kernel: oob access in smb2_dump_detail](https://agentprime.io/advisories/CVE-2023-6610.md)
  `CVE-2023-6610` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.1 High · Not analysed yet · Published 8 Dec 2023 · Tags: Memory corruption
- [Kernel: out-of-bounds read vulnerability in smbcalcsize](https://agentprime.io/advisories/CVE-2023-6606.md)
  `CVE-2023-6606` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.1 High · Not analysed yet · Published 8 Dec 2023 · Tags: Memory corruption
- [Gnutls: timing side-channel in the rsa-psk authentication](https://agentprime.io/advisories/CVE-2023-5981.md)
  `CVE-2023-5981` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 28 Nov 2023 · Tags: CWE-208
- [Libnbd: malicious nbd server may crash libnbd](https://agentprime.io/advisories/CVE-2023-5871.md)
  `CVE-2023-5871` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 27 Nov 2023 · Tags: Denial of service
- [Libtiff: out-of-memory in tiffopen via a craft file](https://agentprime.io/advisories/CVE-2023-6277.md)
  `CVE-2023-6277` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Nov 2023 · Tags: Denial of service
- [Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c](https://agentprime.io/advisories/CVE-2023-5972.md)
  `CVE-2023-5972` · CVE record: kernel and 4 more · CVSS 7.0 High · Not analysed yet · Published 23 Nov 2023 · Tags: Memory corruption
- [Kernel: nvme: memory corruption via unprivileged user passthrough](https://agentprime.io/advisories/CVE-2023-6238.md)
  `CVE-2023-6238` · CVE record: kernel and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 21 Nov 2023 · Tags: Memory corruption
- [Imagemagick: heap use-after-free in coders/bmp.c](https://agentprime.io/advisories/CVE-2023-5341.md)
  `CVE-2023-5341` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 19 Nov 2023 · Tags: Memory corruption
- [Kernel: local dos vulnerability in scatterwalk_copychunks](https://agentprime.io/advisories/CVE-2023-6176.md)
  `CVE-2023-6176` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 4.7 Medium · Not analysed yet · Published 16 Nov 2023
- [Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get](https://agentprime.io/advisories/CVE-2023-6121.md)
  `CVE-2023-6121` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 16 Nov 2023 · Tags: Memory corruption
- [Kernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()](https://agentprime.io/advisories/CVE-2023-39198.md)
  `CVE-2023-39198` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 7.5 High · Not analysed yet · Published 9 Nov 2023 · Tags: Memory corruption
- [Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect](https://agentprime.io/advisories/CVE-2023-6039.md)
  `CVE-2023-6039` · CVE record: Kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Nov 2023 · Tags: Memory corruption
- [Samba: ad dc password exposure to privileged users and rodcs](https://agentprime.io/advisories/CVE-2023-4154.md)
  `CVE-2023-4154` · CVE record: samba and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Nov 2023 · Tags: Memory corruption
- [Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs](https://agentprime.io/advisories/CVE-2023-5090.md)
  `CVE-2023-5090` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 6 Nov 2023 · Tags: CWE-755
- [Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc](https://agentprime.io/advisories/CVE-2023-42669.md)
  `CVE-2023-42669` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 6 Nov 2023 · Tags: Denial of service
- [Qemu: improper ide controller reset can lead to mbr overwrite](https://agentprime.io/advisories/CVE-2023-5088.md)
  `CVE-2023-5088` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 3 Nov 2023 · Tags: CWE-821
- [Samba: smbd allows client access to unix domain sockets on the file system as root](https://agentprime.io/advisories/CVE-2023-3961.md)
  `CVE-2023-3961` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2023 · Tags: Path traversal
- [Squid: denial of service in ftp](https://agentprime.io/advisories/CVE-2023-46848.md)
  `CVE-2023-46848` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 3 Nov 2023 · Tags: CWE-681
- [Samba: ad dc busy rpc multiple listener dos](https://agentprime.io/advisories/CVE-2023-42670.md)
  `CVE-2023-42670` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2023 · Tags: Denial of service
- [Squid: dos against http and https](https://agentprime.io/advisories/CVE-2023-5824.md)
  `CVE-2023-5824` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Nov 2023 · Tags: CWE-755
- [Samba: smb clients can truncate files with read-only permissions](https://agentprime.io/advisories/CVE-2023-4091.md)
  `CVE-2023-4091` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2023 · Tags: Broken access control
- [Use-after-free in parse_lease_state()](https://agentprime.io/advisories/CVE-2023-1194.md)
  `CVE-2023-1194` · CVE record: kernel and 4 more · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2023 · Tags: Memory corruption
- [Squid: request/response smuggling in http/1.1 and icap](https://agentprime.io/advisories/CVE-2023-46846.md)
  `CVE-2023-46846` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2023 · Tags: HTTP request smuggling
- [Potential buffer overflow in php_cli_server_startup_workers](https://agentprime.io/advisories/CVE-2022-4900.md)
  `CVE-2022-4900` · CVE record: php and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Memory corruption
- [Reachable assertion in avahi_alternative_host_name](https://agentprime.io/advisories/CVE-2023-38473.md)
  `CVE-2023-38473` · CVE record: avahi avahi and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Denial of service
- [Reachable assertion in avahi_rdata_parse](https://agentprime.io/advisories/CVE-2023-38472.md)
  `CVE-2023-38472` · CVE record: avahi avahi and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Denial of service
- [Reachable assertion in dbus_set_host_name](https://agentprime.io/advisories/CVE-2023-38471.md)
  `CVE-2023-38471` · CVE record: avahi avahi and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Denial of service
- [Reachable assertion in avahi_escape_label](https://agentprime.io/advisories/CVE-2023-38470.md)
  `CVE-2023-38470` · CVE record: avahi avahi and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Denial of service
- [Reachable assertion in avahi_dns_packet_append_record](https://agentprime.io/advisories/CVE-2023-38469.md)
  `CVE-2023-38469` · CVE record: avahi avahi and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Denial of service
- [Heap-buffer-overflow in extractimagesection()](https://agentprime.io/advisories/CVE-2023-3164.md)
  `CVE-2023-3164` · CVE record: libtiff and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Memory corruption
- [Use-after-free in setup_async_work()](https://agentprime.io/advisories/CVE-2023-1193.md)
  `CVE-2023-1193` · CVE record: Kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption
- [Kernel: slab-use-after-free write in txend due to race condition](https://agentprime.io/advisories/CVE-2023-3397.md)
  `CVE-2023-3397` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.0 High · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption
- [Use-after-free in smb2_is_status_io_timeout()](https://agentprime.io/advisories/CVE-2023-1192.md)
  `CVE-2023-1192` · CVE record: kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption
- [Kernel: use after free in nvmet_tcp_free_crypto in nvme](https://agentprime.io/advisories/CVE-2023-5178.md)
  `CVE-2023-5178` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption
- [Insights-client: unsafe handling of temporary files and directories](https://agentprime.io/advisories/CVE-2023-3972.md)
  `CVE-2023-3972` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 7.8 High · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-379
- [Xorg-x11-server: use-after-free bug in damagedestroy](https://agentprime.io/advisories/CVE-2023-5574.md)
  `CVE-2023-5574` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 7.0 High · Not analysed yet · Published 25 Oct 2023 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-6.md>
Older: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-6.md?cursor=WyIyMDIzLTEwLTI1VDE5OjQ3OjAzLjEyMjAwMFoiLCJDVkUtMjAyMy01NTc0Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-enterprise-linux-6&cursor=WyIyMDI0LTAxLTEyVDE5OjAxOjI1LjU0MjAwMFoiLCJDVkUtMjAyMy02NjgzIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-6/?cursor=WyIyMDI0LTAxLTEyVDE5OjAxOjI1LjU0MjAwMFoiLCJDVkUtMjAyMy02NjgzIl0>. Everything for agents: <https://agentprime.io/llms.txt>.