Red Hat Enterprise Linux 6.

Openssh: denial-of-service in openssh

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Denial of service

Xorg: xwayland: use-after-free in syncinittrigger()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: use-after-free in playreleasedevents()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: heap overflow in xkbwritekeysyms()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

X.org: xwayland: use-after-free of the root cursor

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-390

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Command injection

Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Denial of service

Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Denial of service

Rsync: heap buffer overflow in rsync due to improper checksum length handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Rsync: race condition in rsync handling symbolic links

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Race condition

Rsync: --safe-links option bypass leads to path traversal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Path traversal

Rsync: rsync server leaks arbitrary client files

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• CWE-390

Ruby: openssl: ruby marvin attack

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-385

Openjpeg: heap buffer overflow in lib/openjp2/j2k.c

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Openjpeg: heap buffer overflow in bin/common/color.c

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

• Fast Datapath for Red Hat Enterprise Linux 7
• Fast Datapath for Red Hat Enterprise Linux 8
• CWE-20

Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root

• Fast Datapath for Red Hat Enterprise Linux 8
• Fast Datapath for Red Hat Enterprise Linux 9
• Privilege escalation

Kernel: ksmbd: read request memory leak denial-of-service vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption
• Denial of service

Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Samba: check attribute access rights for ldap adds of computers

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Privilege escalation

Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Pam: improper hostname interpretation in pam_access leads to access control bypass

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Authentication bypass

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Qemu-kvm: information leak in virtio devices

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Information disclosure

Qemu-kvm: usb: assertion failure in usb_ep_get()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Pcp: pmpost symlink attack allows escalating pcp to root user

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Path traversal

Pcp: pmcd heap corruption through metric pmstore operations

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Directory Server 11
• CWE-20

Libvirt: crash of virtinterfaced via virconnectlistinterfaces()

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Libtiff: null pointer dereference in tif_dirinfo.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Unbound: heap-buffer-overflow in unbound

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Unbound: null pointer dereference in unbound

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-662

Gtk3: gtk2: library injection from cwd

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Code injection

Openjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c

• Red Hat AI Inference Server 3.2
• Red Hat Enterprise Linux 6
• Denial of service

Openjpeg: malicious files can cause the program to enter a large loop

• Red Hat AI Inference Server 3.2
• Red Hat Enterprise Linux 6
• Denial of service

Networkmanager: denial of service

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Denial of service

389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request

• Red Hat Directory Server 12.4 for RHEL 9
• Red Hat Enterprise Linux 9
• CWE-230

Openjpeg: denail of service via crafted image file

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Denial of service

Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• CWE-364

Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Qemu-kvm: 'qemu-img info' leads to host file read/write

• Red Hat Advanced Virtualization for RHEL 8.2.1
• Red Hat Advanced Virtualization for RHEL 8.4.0.EUS
• Memory corruption

Openssh: regresshion - race condition in ssh allows rce/dos

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• CWE-364

Poppler: pdfinfo: crash in broken documents when using -dests parameter

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-20

389-ds-base: malformed userpassword hash may cause denial of service

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 for RHEL 8
• CWE-1288

Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Path traversal

Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• Broken access control

Ca: token authentication bypass vulnerability

• Red Hat Certificate System 10.4 EUS for RHEL-8
• Red Hat Enterprise Linux 7
• CWE-305

389-ds-base: potential denial of service via specially crafted kerberos as-req request

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 for RHEL 8
• CWE-20

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.8 for RHEL 8
• CWE-20