Red Hat Enterprise Linux 6.

Libsoup: soupserver: denial of service via http request smuggling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• HTTP request smuggling

Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libxml2: memory leak leading to local denial of service in xmllint interactive shell

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Libsoup: libsoup: credential leakage via http redirects

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Information disclosure

Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Other injection

Glib: glib: memory corruption via integer overflow in unicode case conversion

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Glib: glib: local denial of service via buffer underflow in content type parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Other injection

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Networkmanager: networkmanager file access

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• CWE-281

Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libxml2: libxml2: denial of service via crafted xml catalogs

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Libxml2: unbounded relaxng include recursion leading to stack overflow

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: out-of-bounds read in libsoup websocket frame processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• HTTP request smuggling

Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

• util-linux
• Red Hat Enterprise Linux 10
• Memory corruption

Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash

• WebKitGTK
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop

• webkitgtk
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• CWE-346

Abrt: command-injection in abrt leading to local privilege escalation

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Command injection

Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos

• webkitgtk
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libvirt: information disclosure via world-readable vm snapshots

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Broken access control

Libvirt: denial of service in xml parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Denial of service

Samba: command injection in wins server hook script

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Command injection

Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Xorg: xmayland: use-after-free in xpresentnotify structure creation

• X.Org Xwayland
• Red Hat Enterprise Linux 10
• Memory corruption

Xorg: xwayland: use-after-free in xkb client resource removal

• X.Org Xwayland
• Red Hat Enterprise Linux 10
• Memory corruption

Xorg: xmayland: value overflow in xkbsetcompatmap()

• X.Org Xwayland
• Red Hat Enterprise Linux 10
• Memory corruption

Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion

• GNOME libsoup
• Red Hat Enterprise Linux 10
• Memory corruption

Samba: vfs_streams_xattr uninitialized memory write possible

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libxslt: type confusion in exsltfuncresultcompfunction of libxslt

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Qemu-kvm: vnc websocket handshake use-after-free

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Freeipa: idm: privilege escalation from host to domain admin in freeipa

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• CWE-1220

Libsoup: out-of-bounds read in cookie date handling of libsoup http library

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libxslt: use-after-free with key data stored cross-rvt

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libtiff: libtiff write-what-where

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• CWE-123

Libssh: memory exhaustion via repeated key exchange in libssh

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Denial of service

Libsoup: improper handling of http vary header in libsoup caching

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-524

Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Path traversal

Udisks: out-of-bounds read in udisks daemon

• storaged-project udisks
• Red Hat Enterprise Linux 10
• Memory corruption

Libssh: write beyond bounds in binary to base64 conversion functions

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Kernel: deadlock in ksmbd_find_crypto_ctx()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-413

Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message type

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Kernel: ksmbd race issue from smb2 close and logoff with multichannel

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-421

Kernel: ksmbd brute force delay bypass via asynchronous requests

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Authentication bypass

Kernel: ksmbd memory exhaustion denial-of-service vulnerability

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Glib: glib crash after long command line

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Code injection

Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libssh: null pointer dereference in libssh kex session id calculation

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Libssh: use of uninitialized variable in privatekey_from_file()

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

• GNOME libxslt
• Red Hat Enterprise Linux 10
• Memory corruption

Gnutls: vulnerability in gnutls certtool template parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Gnutls: vulnerability in gnutls sct extension parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Weak cryptography or TLS