# Red Hat Enterprise Linux 6. Every CVE that names Red Hat Enterprise Linux 6 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Openssh: denial-of-service in openssh](https://agentprime.io/advisories/CVE-2025-26466.md) `CVE-2025-26466` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · EPSS 0.39 · Not analysed yet · Published 28 Feb 2025 · Tags: Denial of service - [Xorg: xwayland: use-after-free in syncinittrigger()](https://agentprime.io/advisories/CVE-2025-26601.md) `CVE-2025-26601` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: use-after-free in playreleasedevents()](https://agentprime.io/advisories/CVE-2025-26600.md) `CVE-2025-26600` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: use of uninitialized pointer in compredirectwindow()](https://agentprime.io/advisories/CVE-2025-26599.md) `CVE-2025-26599` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()](https://agentprime.io/advisories/CVE-2025-26598.md) `CVE-2025-26598` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: buffer overflow in xkbchangetypesofkey()](https://agentprime.io/advisories/CVE-2025-26597.md) `CVE-2025-26597` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: heap overflow in xkbwritekeysyms()](https://agentprime.io/advisories/CVE-2025-26596.md) `CVE-2025-26596` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: buffer overflow in xkbvmodmasktext()](https://agentprime.io/advisories/CVE-2025-26595.md) `CVE-2025-26595` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [X.org: xwayland: use-after-free of the root cursor](https://agentprime.io/advisories/CVE-2025-26594.md) `CVE-2025-26594` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled](https://agentprime.io/advisories/CVE-2025-26465.md) `CVE-2025-26465` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: CWE-390 - [Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme](https://agentprime.io/advisories/CVE-2025-1244.md) `CVE-2025-1244` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Feb 2025 · Tags: Command injection - [Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos](https://agentprime.io/advisories/CVE-2024-12243.md) `CVE-2024-12243` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: Denial of service - [Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos](https://agentprime.io/advisories/CVE-2024-12133.md) `CVE-2024-12133` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: Denial of service - [Rsync: heap buffer overflow in rsync due to improper checksum length handling](https://agentprime.io/advisories/CVE-2024-12084.md) `CVE-2024-12084` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.73 · Not analysed yet · Published 15 Jan 2025 · Tags: Memory corruption - [Rsync: race condition in rsync handling symbolic links](https://agentprime.io/advisories/CVE-2024-12747.md) `CVE-2024-12747` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Race condition - [Rsync: --safe-links option bypass leads to path traversal](https://agentprime.io/advisories/CVE-2024-12088.md) `CVE-2024-12088` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal - [Rsync: rsync server leaks arbitrary client files](https://agentprime.io/advisories/CVE-2024-12086.md) `CVE-2024-12086` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-390 - [Ruby: openssl: ruby marvin attack](https://agentprime.io/advisories/CVE-2025-0306.md) `CVE-2025-0306` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 9 Jan 2025 · Tags: CWE-385 - [Openjpeg: heap buffer overflow in lib/openjp2/j2k.c](https://agentprime.io/advisories/CVE-2024-56827.md) `CVE-2024-56827` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 9 Jan 2025 · Tags: Memory corruption - [Openjpeg: heap buffer overflow in bin/common/color.c](https://agentprime.io/advisories/CVE-2024-56826.md) `CVE-2024-56826` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 9 Jan 2025 · Tags: Memory corruption - [Tuned: improper sanitization of \`instance_name\` parameter of the \`instance_create()\` method](https://agentprime.io/advisories/CVE-2024-52337.md) `CVE-2024-52337` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 7 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 26 Nov 2024 · Tags: CWE-20 - [Tuned: \`script_pre\` and \`script_post\` options allow to pass arbitrary scripts executed by root](https://agentprime.io/advisories/CVE-2024-52336.md) `CVE-2024-52336` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 26 Nov 2024 · Tags: Privilege escalation - [Kernel: ksmbd: read request memory leak denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-39180.md) `CVE-2023-39180` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 4.0 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Memory corruption, Denial of service - [Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-39179.md) `CVE-2023-39179` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.5 High · Not analysed yet · Published 18 Nov 2024 · Tags: Memory corruption - [Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-39176.md) `CVE-2023-39176` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.8 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Memory corruption - [Samba: check attribute access rights for ldap adds of computers](https://agentprime.io/advisories/CVE-2020-25720.md) `CVE-2020-25720` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 17 Nov 2024 · Tags: Privilege escalation - [Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()](https://agentprime.io/advisories/CVE-2024-7730.md) `CVE-2024-7730` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 7.4 High · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()](https://agentprime.io/advisories/CVE-2024-3447.md) `CVE-2024-3447` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-4458.md) `CVE-2023-4458` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 4.0 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()](https://agentprime.io/advisories/CVE-2023-4134.md) `CVE-2023-4134` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [Pam: improper hostname interpretation in pam_access leads to access control bypass](https://agentprime.io/advisories/CVE-2024-10963.md) `CVE-2024-10963` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.4 High · Not analysed yet · Published 7 Nov 2024 · Tags: Authentication bypass - [Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2024-9632.md) `CVE-2024-9632` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 30 Oct 2024 · Tags: Memory corruption - [Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2024-6519.md) `CVE-2024-6519` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 8.2 High · Not analysed yet · Published 21 Oct 2024 · Tags: Memory corruption - [Qemu-kvm: information leak in virtio devices](https://agentprime.io/advisories/CVE-2024-8612.md) `CVE-2024-8612` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.8 Low · Not analysed yet · Published 20 Sept 2024 · Tags: Information disclosure - [Qemu-kvm: usb: assertion failure in usb_ep_get()](https://agentprime.io/advisories/CVE-2024-8354.md) `CVE-2024-8354` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Denial of service - [Pcp: pmpost symlink attack allows escalating pcp to root user](https://agentprime.io/advisories/CVE-2024-45770.md) `CVE-2024-45770` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Path traversal - [Pcp: pmcd heap corruption through metric pmstore operations](https://agentprime.io/advisories/CVE-2024-45769.md) `CVE-2024-45769` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Memory corruption - [389-ds-base: server crash while modifying \`userpassword\` using malformed input (incomplete fix for cve-2024-2199)](https://agentprime.io/advisories/CVE-2024-8445.md) `CVE-2024-8445` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 5 Sept 2024 · Tags: CWE-20 - [Libvirt: crash of virtinterfaced via virconnectlistinterfaces()](https://agentprime.io/advisories/CVE-2024-8235.md) `CVE-2024-8235` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 30 Aug 2024 · Tags: Memory corruption - [Libtiff: null pointer dereference in tif_dirinfo.c](https://agentprime.io/advisories/CVE-2024-7006.md) `CVE-2024-7006` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Aug 2024 · Tags: Memory corruption - [Unbound: heap-buffer-overflow in unbound](https://agentprime.io/advisories/CVE-2024-43168.md) `CVE-2024-43168` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 8 Aug 2024 · Tags: Memory corruption - [Unbound: null pointer dereference in unbound](https://agentprime.io/advisories/CVE-2024-43167.md) `CVE-2024-43167` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 2.8 Low · Not analysed yet · Published 8 Aug 2024 · Tags: Memory corruption - [Qemu: denial of service via improper synchronization in qemu nbd server during socket closure](https://agentprime.io/advisories/CVE-2024-7409.md) `CVE-2024-7409` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2024 · Tags: CWE-662 - [Gtk3: gtk2: library injection from cwd](https://agentprime.io/advisories/CVE-2024-6655.md) `CVE-2024-6655` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.0 High · Not analysed yet · Published 16 Jul 2024 · Tags: Code injection - [Openjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c](https://agentprime.io/advisories/CVE-2023-39329.md) `CVE-2023-39329` · CVE record: Red Hat Red Hat AI Inference Server 3.2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Jul 2024 · Tags: Denial of service - [Openjpeg: malicious files can cause the program to enter a large loop](https://agentprime.io/advisories/CVE-2023-39327.md) `CVE-2023-39327` · CVE record: Red Hat Red Hat AI Inference Server 3.2 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 13 Jul 2024 · Tags: Denial of service - [Networkmanager: denial of service](https://agentprime.io/advisories/CVE-2024-6501.md) `CVE-2024-6501` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 9 Jul 2024 · Tags: Denial of service - [389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request](https://agentprime.io/advisories/CVE-2024-6237.md) `CVE-2024-6237` · CVE record: Red Hat Red Hat Directory Server 12.4 for RHEL 9 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-230 - [Openjpeg: denail of service via crafted image file](https://agentprime.io/advisories/CVE-2023-39328.md) `CVE-2023-39328` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: Denial of service - [Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9](https://agentprime.io/advisories/CVE-2024-6409.md) `CVE-2024-6409` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.28 · Not analysed yet · Published 8 Jul 2024 · Tags: CWE-364 - [Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss](https://agentprime.io/advisories/CVE-2024-6505.md) `CVE-2024-6505` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 5 Jul 2024 · Tags: Memory corruption - [Qemu-kvm: 'qemu-img info' leads to host file read/write](https://agentprime.io/advisories/CVE-2024-4467.md) `CVE-2024-4467` · CVE record: Red Hat Advanced Virtualization for RHEL 8.2.1 and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Jul 2024 · Tags: Memory corruption - [Openssh: regresshion - race condition in ssh allows rce/dos](https://agentprime.io/advisories/CVE-2024-6387.md) `CVE-2024-6387` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 1.00 · Not analysed yet · Published 1 Jul 2024 · Tags: CWE-364 - [Poppler: pdfinfo: crash in broken documents when using -dests parameter](https://agentprime.io/advisories/CVE-2024-6239.md) `CVE-2024-6239` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 21 Jun 2024 · Tags: CWE-20 - [389-ds-base: malformed userpassword hash may cause denial of service](https://agentprime.io/advisories/CVE-2024-5953.md) `CVE-2024-5953` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 18 Jun 2024 · Tags: CWE-1288 - [Nano: running \`chmod\` and \`chown\` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file](https://agentprime.io/advisories/CVE-2024-5742.md) `CVE-2024-5742` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 Jun 2024 · Tags: Path traversal - [Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service](https://agentprime.io/advisories/CVE-2024-2698.md) `CVE-2024-2698` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Jun 2024 · Tags: Broken access control - [Ca: token authentication bypass vulnerability](https://agentprime.io/advisories/CVE-2023-4727.md) `CVE-2023-4727` · CVE record: Red Hat Red Hat Certificate System 10.4 EUS for RHEL-8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-305 - [389-ds-base: potential denial of service via specially crafted kerberos as-req request](https://agentprime.io/advisories/CVE-2024-3657.md) `CVE-2024-3657` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 28 May 2024 · Tags: CWE-20 - [389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c](https://agentprime.io/advisories/CVE-2024-2199.md) `CVE-2024-2199` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 28 May 2024 · Tags: CWE-20 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .