# Red Hat Enterprise Linux 6. Every CVE that names Red Hat Enterprise Linux 6 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Heap buffer overflow in virtio_crypto_sym_op_helper()](https://agentprime.io/advisories/CVE-2023-3180.md) `CVE-2023-3180` · CVE record: qemu and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: Memory corruption - [Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name](https://agentprime.io/advisories/CVE-2023-38560.md) `CVE-2023-38560` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 1 Aug 2023 · Tags: Memory corruption - [Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos](https://agentprime.io/advisories/CVE-2023-38559.md) `CVE-2023-38559` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 1 Aug 2023 · Tags: Memory corruption - [Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()](https://agentprime.io/advisories/CVE-2023-4004.md) `CVE-2023-4004` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 31 Jul 2023 · Tags: Memory corruption - [Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr](https://agentprime.io/advisories/CVE-2023-3773.md) `CVE-2023-3773` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 25 Jul 2023 · Tags: Memory corruption - [Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()](https://agentprime.io/advisories/CVE-2023-3772.md) `CVE-2023-3772` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 25 Jul 2023 · Tags: Memory corruption - [Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user s…](https://agentprime.io/advisories/CVE-2023-3640.md) `CVE-2023-3640` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.0 High · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-385 - [Tree connection null pointer dereference denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-32248.md) `CVE-2023-32248` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Session race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32257.md) `CVE-2023-32257` · CVE record: kernel and 4 more · CVSS 8.1 High · Not analysed yet · Published 24 Jul 2023 · Tags: Race condition - [Session null pointer dereference denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-32252.md) `CVE-2023-32252` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Session race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32258.md) `CVE-2023-32258` · CVE record: kernel and 4 more · CVSS 8.1 High · Not analysed yet · Published 24 Jul 2023 · Tags: Race condition - [Qemu: 9pfs: suid/sgid bits not dropped on file write](https://agentprime.io/advisories/CVE-2023-1386.md) `CVE-2023-1386` · CVE record: qemu and 4 more · CVSS 3.3 Low · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-281 - [Kernel: vmwgfx: race condition leading to information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-33951.md) `CVE-2023-33951` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-413 - [Session setup memory exhaustion denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-32247.md) `CVE-2023-32247` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2023 · Tags: Denial of service - [Imagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.h](https://agentprime.io/advisories/CVE-2023-3745.md) `CVE-2023-3745` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service](https://agentprime.io/advisories/CVE-2023-3750.md) `CVE-2023-3750` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-667 - [Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags](https://agentprime.io/advisories/CVE-2023-3812.md) `CVE-2023-3812` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()](https://agentprime.io/advisories/CVE-2023-3019.md) `CVE-2023-3019` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race](https://agentprime.io/advisories/CVE-2023-3567.md) `CVE-2023-3567` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.1 High · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects](https://agentprime.io/advisories/CVE-2023-33952.md) `CVE-2023-33952` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Out-of-bounds read when setting hmac data](https://agentprime.io/advisories/CVE-2023-2860.md) `CVE-2023-2860` · CVE record: kernel and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c](https://agentprime.io/advisories/CVE-2023-3863.md) `CVE-2023-3863` · CVE record: Kernel and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Samba: spotlight server-side share path disclosure](https://agentprime.io/advisories/CVE-2023-34968.md) `CVE-2023-34968` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2023 · Tags: Information disclosure - [Samba: type confusion in mdssvc rpc service for spotlight](https://agentprime.io/advisories/CVE-2023-34967.md) `CVE-2023-34967` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · EPSS 0.61 · Not analysed yet · Published 20 Jul 2023 · Tags: Memory corruption - [Samba: infinite loop in mdssvc rpc service for spotlight](https://agentprime.io/advisories/CVE-2023-34966.md) `CVE-2023-34966` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.62 · Not analysed yet · Published 20 Jul 2023 · Tags: Denial of service - [Samba: smb2 packet signing is not enforced when "server signing = required" is set](https://agentprime.io/advisories/CVE-2023-3347.md) `CVE-2023-3347` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 20 Jul 2023 · Tags: Weak cryptography or TLS, CWE-924 - [Samba: out-of-bounds read in winbind auth_crap](https://agentprime.io/advisories/CVE-2022-2127.md) `CVE-2022-2127` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 20 Jul 2023 · Tags: Memory corruption - [Possibility of deadlock in libbpf function sock_hash_delete_elem](https://agentprime.io/advisories/CVE-2023-0160.md) `CVE-2023-0160` · CVE record: kernel and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 18 Jul 2023 · Tags: Denial of service - [W3m: out of bounds read in growbuf_to_str() at w3m/indep.c](https://agentprime.io/advisories/CVE-2023-38253.md) `CVE-2023-38253` · CVE record: w3m and 3 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: Memory corruption - [W3m: out of bounds read in strnew_size() at w3m/str.c](https://agentprime.io/advisories/CVE-2023-38252.md) `CVE-2023-38252` · CVE record: Red Hat Red Hat Enterprise Linux 6 · CVSS 4.7 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: Memory corruption - [Segmentation fault in fax3encode in libtiff/tif_fax3.c](https://agentprime.io/advisories/CVE-2023-3618.md) `CVE-2023-3618` · CVE record: libtiff and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: Memory corruption - [Kernel: netlink socket crash (null pointer deref) in netlink_dump function](https://agentprime.io/advisories/CVE-2023-3106.md) `CVE-2023-3106` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.6 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: Memory corruption - [Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service](https://agentprime.io/advisories/CVE-2023-3354.md) `CVE-2023-3354` · CVE record: qemu and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2023 · Tags: Memory corruption - [Kernel: a race condition in crypto module in the function skcipher_recvmsg](https://agentprime.io/advisories/CVE-2023-3108.md) `CVE-2023-3108` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.2 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: Race condition, Denial of service - [Distros-\[dirtyvma\] privilege escalation via non-rcu-protected vma traversal](https://agentprime.io/advisories/CVE-2023-3269.md) `CVE-2023-3269` · CVE record: kernel and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jul 2023 · Tags: Memory corruption - [Heap-buffer-overflow in src/formats_i.c](https://agentprime.io/advisories/CVE-2023-34432.md) `CVE-2023-34432` · CVE record: sox and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2023 · Tags: Memory corruption - [Heap-buffer-overflow in src/hcom.c](https://agentprime.io/advisories/CVE-2023-34318.md) `CVE-2023-34318` · CVE record: sox and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2023 · Tags: Memory corruption - [Floating point exception in src/voc.c](https://agentprime.io/advisories/CVE-2023-32627.md) `CVE-2023-32627` · CVE record: sox and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 10 Jul 2023 · Tags: CWE-1077 - [Floating point exception in src/aiff.c](https://agentprime.io/advisories/CVE-2023-26590.md) `CVE-2023-26590` · CVE record: sox and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 10 Jul 2023 · Tags: CWE-1077 - [Tree connection race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32254.md) `CVE-2023-32254` · CVE record: kernel and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2023 · Tags: Race condition - [Session race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32250.md) `CVE-2023-32250` · CVE record: kernel and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2023 · Tags: Race condition - [Arbitrary file write](https://agentprime.io/advisories/CVE-2023-1183.md) `CVE-2023-1183` · CVE record: libreoffice and 4 more · CVSS 5.0 Medium · EPSS 0.65 · Not analysed yet · Published 10 Jul 2023 · Tags: CWE-20 - [Crash due to a null pointer dereference in the dn_nsp_send function](https://agentprime.io/advisories/CVE-2023-3338.md) `CVE-2023-3338` · CVE record: kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2023 · Tags: Memory corruption - [Libtiff: null pointer dereference in tif_dir.c](https://agentprime.io/advisories/CVE-2023-2908.md) `CVE-2023-2908` · CVE record: Libtiff and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 30 Jun 2023 · Tags: Memory corruption - [Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c](https://agentprime.io/advisories/CVE-2023-3355.md) `CVE-2023-3355` · CVE record: kernel and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 28 Jun 2023 · Tags: Memory corruption - [Kernel: udmabuf: improper validation of array index leading to local privilege escalation](https://agentprime.io/advisories/CVE-2023-2008.md) `CVE-2023-2008` · CVE record: Linux kernel and 4 more · CVSS 8.2 High · Not analysed yet · Published 14 Apr 2023 · Tags: CWE-129 - [Kernel: use after free bug in btsdio_remove due to race condition](https://agentprime.io/advisories/CVE-2023-1989.md) `CVE-2023-1989` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Apr 2023 · Tags: Memory corruption - [Kernel: security regression for cve-2018-13405](https://agentprime.io/advisories/CVE-2021-4037.md) `CVE-2021-4037` · CVE record: Linux kernel and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 24 Aug 2022 · Tags: Broken access control - [Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c](https://agentprime.io/advisories/CVE-2020-27792.md) `CVE-2020-27792` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 7.1 High · Not analysed yet · Published 19 Aug 2022 · Tags: Memory corruption - [Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages](https://agentprime.io/advisories/CVE-2012-0059.md) `CVE-2012-0059` · CVE record: Red Hat Red Hat Network Proxy v 5.4 and 3 more · CVSS 4.9 Medium · Not analysed yet · Published 5 Feb 2014 · Tags: Information disclosure - [Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form](https://agentprime.io/advisories/CVE-2011-3344.md) `CVE-2011-3344` · CVE record: Red Hat Red Hat Network Satellite Server v 5.4 and 2 more · CVSS 5.4 Medium · Not analysed yet · Published 5 Feb 2014 · Tags: Cross-site scripting (XSS) - [Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms](https://agentprime.io/advisories/CVE-2011-2927.md) `CVE-2011-2927` · CVE record: Red Hat Red Hat Network Satellite Server v 5.4 and 2 more · CVSS 5.4 Medium · Not analysed yet · Published 5 Feb 2014 · Tags: Cross-site scripting (XSS) - [Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.](https://agentprime.io/advisories/CVE-2011-2920.md) `CVE-2011-2920` · CVE record: Red Hat Red Hat Network Satellite Server v 5.4 and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 5 Feb 2014 · Tags: Cross-site scripting (XSS) - [Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter](https://agentprime.io/advisories/CVE-2011-1594.md) `CVE-2011-1594` · CVE record: Red Hat Red Hat Network Satellite Server v 5.4 and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 5 Feb 2014 · Tags: Open redirect - [Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery](https://agentprime.io/advisories/CVE-2009-4139.md) `CVE-2009-4139` · CVE record: Red Hat Red Hat Network Satellite Server v 5.4 and 2 more · CVSS 6.8 Medium · Not analysed yet · Published 27 Jul 2011 · Tags: CWE-346 - [Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass](https://agentprime.io/advisories/CVE-2006-4339.md) `CVE-2006-4339` · CVE record: Red Hat Red Hat Enterprise Linux 3 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2006 · Tags: Weak cryptography or TLS Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .