# Red Hat Enterprise Linux 6.

Every CVE that names Red Hat Enterprise Linux 6 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Xorg-x11-server: use-after-free bug in destroywindow](https://agentprime.io/advisories/CVE-2023-5380.md)
  `CVE-2023-5380` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 3 more · CVSS 4.7 Medium · Not analysed yet · Published 25 Oct 2023 · Tags: Memory corruption
- [Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty](https://agentprime.io/advisories/CVE-2023-5367.md)
  `CVE-2023-5367` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Oct 2023 · Tags: Memory corruption
- [Samba: heap buffer overflow with freshness tokens in the heimdal kdc](https://agentprime.io/advisories/CVE-2023-5568.md)
  `CVE-2023-5568` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 24 Oct 2023 · Tags: Memory corruption
- [Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling](https://agentprime.io/advisories/CVE-2023-5633.md)
  `CVE-2023-5633` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2023 · Tags: CWE-911
- [Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access](https://agentprime.io/advisories/CVE-2023-42752.md)
  `CVE-2023-42752` · CVE record: Kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2023 · Tags: Memory corruption
- [Libxpm: out of bounds read on xpm with corrupted colormap](https://agentprime.io/advisories/CVE-2023-43789.md)
  `CVE-2023-43789` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: Memory corruption
- [Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer()](https://agentprime.io/advisories/CVE-2023-43788.md)
  `CVE-2023-43788` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Oct 2023 · Tags: Memory corruption
- [Libx11: integer overflow in xcreateimage() leading to a heap overflow](https://agentprime.io/advisories/CVE-2023-43787.md)
  `CVE-2023-43787` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 7.8 High · Not analysed yet · Published 10 Oct 2023 · Tags: Memory corruption
- [Libx11: stack exhaustion from infinite recursion in putsubimage()](https://agentprime.io/advisories/CVE-2023-43786.md)
  `CVE-2023-43786` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Oct 2023 · Tags: Denial of service
- [Libx11: out-of-bounds memory access in \_xkbreadkeysyms()](https://agentprime.io/advisories/CVE-2023-43785.md)
  `CVE-2023-43785` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Oct 2023 · Tags: Memory corruption
- [Kernel: xfrm: out-of-bounds read in \_\_xfrm_state_filter_match()](https://agentprime.io/advisories/CVE-2023-39194.md)
  `CVE-2023-39194` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 3.2 Low · Not analysed yet · Published 9 Oct 2023 · Tags: Memory corruption
- [Kernel: netfilter: xtables sctp out-of-bounds read in match_flags()](https://agentprime.io/advisories/CVE-2023-39193.md)
  `CVE-2023-39193` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 6.1 Medium · Not analysed yet · Published 9 Oct 2023 · Tags: Memory corruption
- [Kernel: netfilter: xtables out-of-bounds read in u32_match_it()](https://agentprime.io/advisories/CVE-2023-39192.md)
  `CVE-2023-39192` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Oct 2023 · Tags: Memory corruption
- [Kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()](https://agentprime.io/advisories/CVE-2023-39189.md)
  `CVE-2023-39189` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2023 · Tags: Memory corruption
- [Libtiff: potential integer overflow in raw2tiff.c](https://agentprime.io/advisories/CVE-2023-41175.md)
  `CVE-2023-41175` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2023 · Tags: Memory corruption
- [Libtiff: integer overflow in tiffcp.c](https://agentprime.io/advisories/CVE-2023-40745.md)
  `CVE-2023-40745` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2023 · Tags: Memory corruption
- [Kernel: rsvp: out-of-bounds read in rsvp_classify()](https://agentprime.io/advisories/CVE-2023-42755.md)
  `CVE-2023-42755` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2023 · Tags: Memory corruption
- [Kernel: ipv4: null pointer dereference in ipv4_send_dest_unreach()](https://agentprime.io/advisories/CVE-2023-42754.md)
  `CVE-2023-42754` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 5 Oct 2023 · Tags: Memory corruption
- [Kernel: ebpf: insufficient stack type checks in dynptr](https://agentprime.io/advisories/CVE-2023-39191.md)
  `CVE-2023-39191` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 8.2 High · Not analysed yet · Published 4 Oct 2023 · Tags: CWE-20
- [Libtiff: memory leak in tiffcrop.c](https://agentprime.io/advisories/CVE-2023-3576.md)
  `CVE-2023-3576` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 4 Oct 2023 · Tags: Memory corruption
- [Imagemagick: heap-buffer-overflow in coders/tiff.c](https://agentprime.io/advisories/CVE-2023-3428.md)
  `CVE-2023-3428` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 4 Oct 2023 · Tags: Memory corruption
- [Memory leak on tls connections](https://agentprime.io/advisories/CVE-2022-4132.md)
  `CVE-2022-4132` · CVE record: jss and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 4 Oct 2023 · Tags: Denial of service
- [Glibc: buffer overflow in ld.so leading to privilege escalation](https://agentprime.io/advisories/CVE-2023-4911.md)
  `CVE-2023-4911` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.64 · Not analysed yet · Published 3 Oct 2023 · Tags: Memory corruption
- [Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h](https://agentprime.io/advisories/CVE-2023-4732.md)
  `CVE-2023-4732` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 3 Oct 2023 · Tags: CWE-366
- [Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap](https://agentprime.io/advisories/CVE-2023-42756.md)
  `CVE-2023-42756` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 4.4 Medium · Not analysed yet · Published 28 Sept 2023 · Tags: Race condition
- [Kernel: netfilter: potential slab-out-of-bound access due to integer underflow](https://agentprime.io/advisories/CVE-2023-42753.md)
  `CVE-2023-42753` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2023 · Tags: Memory corruption
- [Heap out of bound read in builtin.c](https://agentprime.io/advisories/CVE-2023-4156.md)
  `CVE-2023-4156` · CVE record: gawk and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 25 Sept 2023 · Tags: Memory corruption
- [Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c](https://agentprime.io/advisories/CVE-2023-5158.md)
  `CVE-2023-5158` · CVE record: kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Sept 2023 · Tags: CWE-684
- [Glibc: dos due to memory leak in getaddrinfo.c](https://agentprime.io/advisories/CVE-2023-5156.md)
  `CVE-2023-5156` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2023 · Tags: Denial of service
- [Glibc: potential use-after-free in getaddrinfo()](https://agentprime.io/advisories/CVE-2023-4806.md)
  `CVE-2023-4806` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 18 Sept 2023 · Tags: Memory corruption
- [Glibc: stack read overflow in getaddrinfo in no-aaaa mode](https://agentprime.io/advisories/CVE-2023-4527.md)
  `CVE-2023-4527` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Sept 2023 · Tags: Memory corruption
- [Out of bounds read in parse_module function in bfd/vms-alpha.c](https://agentprime.io/advisories/CVE-2023-25584.md)
  `CVE-2023-25584` · CVE record: binutils and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: Memory corruption
- [Field \`file_table\` of \`struct module \*module\` is uninitialized](https://agentprime.io/advisories/CVE-2023-25585.md)
  `CVE-2023-25585` · CVE record: binutils and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: Memory corruption
- [Local variable \`ch_type\` in function \`bfd_init_section_decompress_status\` can be uninitialized](https://agentprime.io/advisories/CVE-2023-25586.md)
  `CVE-2023-25586` · CVE record: binutils and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: Memory corruption
- [Field \`the_bfd\` of \`asymbol\` is uninitialized in function \`bfd_mach_o_get_synthetic_symtab\`](https://agentprime.io/advisories/CVE-2023-25588.md)
  `CVE-2023-25588` · CVE record: binutils and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: Memory corruption
- [G_variant_byteswap() can take a long time with some non-normal inputs](https://agentprime.io/advisories/CVE-2023-32611.md)
  `CVE-2023-32611` · CVE record: glib2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: Denial of service
- [Gvariant offset table entry size is not checked in is_normal()](https://agentprime.io/advisories/CVE-2023-29499.md)
  `CVE-2023-29499` · CVE record: glib2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: Denial of service
- [Gvariant deserialisation does not match spec for non-normal data](https://agentprime.io/advisories/CVE-2023-32665.md)
  `CVE-2023-32665` · CVE record: glib2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: Denial of service
- [Dma reentrancy issue (incomplete fix for cve-2021-3750)](https://agentprime.io/advisories/CVE-2023-2680.md)
  `CVE-2023-2680` · CVE record: qemu and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Sept 2023 · Tags: Memory corruption
- [Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service](https://agentprime.io/advisories/CVE-2023-3255.md)
  `CVE-2023-3255` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Denial of service
- [Sev-es / sev-snp vmgexit double fetch vulnerability](https://agentprime.io/advisories/CVE-2023-4155.md)
  `CVE-2023-4155` · CVE record: kernel and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Race condition
- [Triggerable assertion due to race condition in hot-unplug](https://agentprime.io/advisories/CVE-2023-3301.md)
  `CVE-2023-3301` · CVE record: qemu and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Denial of service
- [Glibc: potential use-after-free in gaih_inet()](https://agentprime.io/advisories/CVE-2023-4813.md)
  `CVE-2023-4813` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 12 Sept 2023 · Tags: Memory corruption
- [Use after free race between mbind() and vma-locked page fault](https://agentprime.io/advisories/CVE-2023-4611.md)
  `CVE-2023-4611` · CVE record: Kernel and 4 more · CVSS 7.0 High · Not analysed yet · Published 29 Aug 2023 · Tags: Memory corruption
- [Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c](https://agentprime.io/advisories/CVE-2023-4569.md)
  `CVE-2023-4569` · CVE record: Kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 28 Aug 2023 · Tags: CWE-402
- [Ghostscript: incomplete fix for cve-2020-16305](https://agentprime.io/advisories/CVE-2023-4042.md)
  `CVE-2023-4042` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 23 Aug 2023 · Tags: Memory corruption
- [Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration](https://agentprime.io/advisories/CVE-2023-3899.md)
  `CVE-2023-3899` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Aug 2023 · Tags: Broken access control
- [Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()](https://agentprime.io/advisories/CVE-2023-4459.md)
  `CVE-2023-4459` · CVE record: Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 21 Aug 2023 · Tags: Memory corruption
- [Memory leak in btrfs_get_dev_args_from_path()](https://agentprime.io/advisories/CVE-2023-4394.md)
  `CVE-2023-4394` · CVE record: Kernel and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 17 Aug 2023 · Tags: Denial of service
- [Kernel: btrfs: double free in btrfs_get_root_ref()](https://agentprime.io/advisories/CVE-2023-4389.md)
  `CVE-2023-4389` · CVE record: Kernel and 4 more · CVSS 7.0 High · Not analysed yet · Published 16 Aug 2023 · Tags: Memory corruption
- [Kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()](https://agentprime.io/advisories/CVE-2023-4387.md)
  `CVE-2023-4387` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 7.1 High · Not analysed yet · Published 16 Aug 2023 · Tags: Memory corruption
- [Kernel: jfs: null pointer dereference in dbfree()](https://agentprime.io/advisories/CVE-2023-4385.md)
  `CVE-2023-4385` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 16 Aug 2023 · Tags: Memory corruption
- [Postgresql: merge fails to enforce update or select row security policies](https://agentprime.io/advisories/CVE-2023-39418.md)
  `CVE-2023-39418` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-1220
- [Postgresql: extension script @substitutions@ within quoting allow sql injection](https://agentprime.io/advisories/CVE-2023-39417.md)
  `CVE-2023-39417` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2023 · Tags: SQL injection
- [Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry](https://agentprime.io/advisories/CVE-2023-4273.md)
  `CVE-2023-4273` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 6.0 Medium · Not analysed yet · Published 9 Aug 2023 · Tags: Memory corruption
- [Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid](https://agentprime.io/advisories/CVE-2023-4194.md)
  `CVE-2023-4194` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 7 Aug 2023 · Tags: Memory corruption
- [Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free](https://agentprime.io/advisories/CVE-2023-4147.md)
  `CVE-2023-4147` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.8 High · Not analysed yet · Published 7 Aug 2023 · Tags: Memory corruption
- [Out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-4135.md)
  `CVE-2023-4135` · CVE record: qemu-kvm and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 4 Aug 2023 · Tags: Memory corruption
- [Kernel: smsusb: use-after-free caused by do_submit_urb()](https://agentprime.io/advisories/CVE-2023-4132.md)
  `CVE-2023-4132` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: Memory corruption
- [Kernel: cxgb4: use-after-free in ch_flower_stats_cb()](https://agentprime.io/advisories/CVE-2023-4133.md)
  `CVE-2023-4133` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-6.md>
Older: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-6.md?cursor=WyIyMDIzLTA4LTAzVDE0OjMyOjEyLjQyMTAwMFoiLCJDVkUtMjAyMy00MTMzIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-enterprise-linux-6&cursor=WyIyMDIzLTEwLTI1VDE5OjQ3OjAzLjEyMjAwMFoiLCJDVkUtMjAyMy01NTc0Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-6/?cursor=WyIyMDIzLTEwLTI1VDE5OjQ3OjAzLjEyMjAwMFoiLCJDVkUtMjAyMy01NTc0Il0>. Everything for agents: <https://agentprime.io/llms.txt>.