# Red Hat Enterprise Linux 6. Every CVE that names Red Hat Enterprise Linux 6 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading](https://agentprime.io/advisories/CVE-2026-108093.md) `CVE-2026-108093` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Memory corruption - [Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry](https://agentprime.io/advisories/CVE-2026-108063.md) `CVE-2026-108063` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Memory corruption - [Cups: null pointer dereference via embedded job ticket comments allows remote denial of service](https://agentprime.io/advisories/CVE-2026-107655.md) `CVE-2026-107655` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 4.0 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Memory corruption - [Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader](https://agentprime.io/advisories/CVE-2026-107651.md) `CVE-2026-107651` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Memory corruption - [Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients](https://agentprime.io/advisories/CVE-2026-107161.md) `CVE-2026-107161` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow in hot color filter on oversized image](https://agentprime.io/advisories/CVE-2026-106067.md) `CVE-2026-106067` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions](https://agentprime.io/advisories/CVE-2026-106066.md) `CVE-2026-106066` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow in pcx export on oversized image dimensions](https://agentprime.io/advisories/CVE-2026-106065.md) `CVE-2026-106065` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [M17n-lib: null-pointer write in read_mtext_element() on malformed utf-8](https://agentprime.io/advisories/CVE-2026-107169.md) `CVE-2026-107169` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [M17n-lib: heap use-after-free write in re_init_ic()](https://agentprime.io/advisories/CVE-2026-107167.md) `CVE-2026-107167` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions](https://agentprime.io/advisories/CVE-2026-106064.md) `CVE-2026-106064` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [M17n-lib: null dereference in minput_open_im() after failed m17n_init()](https://agentprime.io/advisories/CVE-2026-107170.md) `CVE-2026-107170` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 2.9 Low · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars()](https://agentprime.io/advisories/CVE-2026-107168.md) `CVE-2026-107168` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service - [Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file](https://agentprime.io/advisories/CVE-2026-106061.md) `CVE-2026-106061` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Sssd: sssd-kcm: local denial of service via excessive memory preallocation](https://agentprime.io/advisories/CVE-2026-80048.md) `CVE-2026-80048` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via race condition in autofs responder](https://agentprime.io/advisories/CVE-2026-104045.md) `CVE-2026-104045` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via incomplete identity provider authentication requests](https://agentprime.io/advisories/CVE-2026-104046.md) `CVE-2026-104046` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file](https://agentprime.io/advisories/CVE-2026-106062.md) `CVE-2026-106062` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free](https://agentprime.io/advisories/CVE-2026-101258.md) `CVE-2026-101258` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions](https://agentprime.io/advisories/CVE-2026-106063.md) `CVE-2026-106063` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation](https://agentprime.io/advisories/CVE-2026-104048.md) `CVE-2026-104048` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-1025 - [Sssd: sssd: information disclosure via query injection in entra id lookups](https://agentprime.io/advisories/CVE-2026-104047.md) `CVE-2026-104047` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-140 - [Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion](https://agentprime.io/advisories/CVE-2026-88252.md) `CVE-2026-88252` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via crafted passkey kerberos authentication request](https://agentprime.io/advisories/CVE-2026-104044.md) `CVE-2026-104044` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via undersized packet parsing in nss responder](https://agentprime.io/advisories/CVE-2026-104043.md) `CVE-2026-104043` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via out-of-bounds read in pam responder](https://agentprime.io/advisories/CVE-2026-104042.md) `CVE-2026-104042` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via unbounded negative cache growth](https://agentprime.io/advisories/CVE-2026-104041.md) `CVE-2026-104041` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: information disclosure via odata injection in entra id lookups](https://agentprime.io/advisories/CVE-2026-104040.md) `CVE-2026-104040` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-140 - [Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder](https://agentprime.io/advisories/CVE-2026-104039.md) `CVE-2026-104039` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via missing sid extension in certificate mapping](https://agentprime.io/advisories/CVE-2026-104038.md) `CVE-2026-104038` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via packet length underflow in autofs responder](https://agentprime.io/advisories/CVE-2026-104037.md) `CVE-2026-104037` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: access control bypass via premature ldap access rule evaluation](https://agentprime.io/advisories/CVE-2026-92821.md) `CVE-2026-92821` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-393 - [Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin](https://agentprime.io/advisories/CVE-2026-104036.md) `CVE-2026-104036` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via memory exhaustion in kcm responder](https://agentprime.io/advisories/CVE-2026-104035.md) `CVE-2026-104035` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via use-after-free in kcm ticket renewal](https://agentprime.io/advisories/CVE-2026-104034.md) `CVE-2026-104034` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: access control bypass via improper ldap shadow expiration check](https://agentprime.io/advisories/CVE-2026-104033.md) `CVE-2026-104033` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-193 - [Sssd: sssd: denial of service via unprivileged autofs cache invalidation](https://agentprime.io/advisories/CVE-2026-104032.md) `CVE-2026-104032` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-408 - [Sssd: sssd: denial of service via memory exhaustion in autofs responder](https://agentprime.io/advisories/CVE-2026-104031.md) `CVE-2026-104031` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Sssd: sssd: denial of service via out-of-bounds read in autofs responder](https://agentprime.io/advisories/CVE-2026-104029.md) `CVE-2026-104029` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption - [Sssd: sssd: denial of service via out-of-bounds read during passkey parsing](https://agentprime.io/advisories/CVE-2026-104030.md) `CVE-2026-104030` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption - [Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject](https://agentprime.io/advisories/CVE-2026-104988.md) `CVE-2026-104988` · CVE record: Red Hat Red Hat Certificate System 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass - [Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader](https://agentprime.io/advisories/CVE-2026-95512.md) `CVE-2026-95512` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service - [389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result](https://agentprime.io/advisories/CVE-2026-86345.md) `CVE-2026-86345` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-923 - [389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue](https://agentprime.io/advisories/CVE-2026-86344.md) `CVE-2026-86344` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service - [Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr uncompressed scanline decoder](https://agentprime.io/advisories/CVE-2026-103641.md) `CVE-2026-103641` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Memory corruption - [Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body](https://agentprime.io/advisories/CVE-2026-103399.md) `CVE-2026-103399` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: HTTP request smuggling - [Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag](https://agentprime.io/advisories/CVE-2026-103242.md) `CVE-2026-103242` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 30 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth](https://agentprime.io/advisories/CVE-2026-102560.md) `CVE-2026-102560` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow during websocket client-frame masking](https://agentprime.io/advisories/CVE-2026-102559.md) `CVE-2026-102559` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth](https://agentprime.io/advisories/CVE-2026-102558.md) `CVE-2026-102558` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding](https://agentprime.io/advisories/CVE-2026-102555.md) `CVE-2026-102555` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow during websocket message reassembly](https://agentprime.io/advisories/CVE-2026-102557.md) `CVE-2026-102557` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion](https://agentprime.io/advisories/CVE-2026-102556.md) `CVE-2026-102556` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages](https://agentprime.io/advisories/CVE-2026-95520.md) `CVE-2026-95520` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Dash: dash: heap out-of-bounds write in conv_escape via undersized unicode escape reservation](https://agentprime.io/advisories/CVE-2026-102474.md) `CVE-2026-102474` · CVE record: Red Hat Red Hat Enterprise Linux 6 · CVSS 4.0 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Dash: dash: super-polynomial backtracking in pmatch when libc fnmatch is disabled](https://agentprime.io/advisories/CVE-2026-102473.md) `CVE-2026-102473` · CVE record: Red Hat Red Hat Enterprise Linux 6 · CVSS 5.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service - [Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if](https://agentprime.io/advisories/CVE-2026-102010.md) `CVE-2026-102010` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 28 Sept 2026 · Tags: Memory corruption - [Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape](https://agentprime.io/advisories/CVE-2026-93834.md) `CVE-2026-93834` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 25 Sept 2026 · Tags: Memory corruption - [Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm](https://agentprime.io/advisories/CVE-2026-95521.md) `CVE-2026-95521` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026 · Tags: Command injection - [Rpm: code execution via macro expansion of manifest entries in \`rpmgi\` (\`-q -p\` / verify manifest flows)](https://agentprime.io/advisories/CVE-2026-95519.md) `CVE-2026-95519` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026 · Tags: Command injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .