Red Hat Enterprise Linux 6.

Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Cups: null pointer dereference via embedded job ticket comments allows remote denial of service

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gimp: gimp: heap buffer overflow in hot color filter on oversized image

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gimp: gimp: heap buffer overflow in pcx export on oversized image dimensions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

M17n-lib: null-pointer write in read_mtext_element() on malformed utf-8

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

M17n-lib: heap use-after-free write in re_init_ic()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

M17n-lib: null dereference in minput_open_im() after failed m17n_init()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd-kcm: local denial of service via excessive memory preallocation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: denial of service via race condition in autofs responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: denial of service via incomplete identity provider authentication requests

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-1025

Sssd: sssd: information disclosure via query injection in entra id lookups

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-140

Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: denial of service via crafted passkey kerberos authentication request

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via undersized packet parsing in nss responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via out-of-bounds read in pam responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via unbounded negative cache growth

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: information disclosure via odata injection in entra id lookups

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-140

Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via missing sid extension in certificate mapping

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via packet length underflow in autofs responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: access control bypass via premature ldap access rule evaluation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-393

Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via memory exhaustion in kcm responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: denial of service via use-after-free in kcm ticket renewal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: access control bypass via improper ldap shadow expiration check

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-193

Sssd: sssd: denial of service via unprivileged autofs cache invalidation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-408

Sssd: sssd: denial of service via memory exhaustion in autofs responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: denial of service via out-of-bounds read in autofs responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via out-of-bounds read during passkey parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject

• Red Hat Certificate System 10
• Red Hat Certificate System 11
• Authentication bypass

Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader

• Red Hat Hardened Images
• Red Hat build of OpenJDK 11 ELS
• Denial of service

389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• CWE-923

389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Denial of service

Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr uncompressed scanline decoder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• HTTP request smuggling

Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: heap buffer overflow during websocket client-frame masking

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: heap buffer overflow during websocket message reassembly

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Dash: dash: heap out-of-bounds write in conv_escape via undersized unicode escape reservation

• Red Hat Enterprise Linux 6
• Memory corruption

Dash: dash: super-polynomial backtracking in pmatch when libc fnmatch is disabled

• Red Hat Enterprise Linux 6
• Denial of service

Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Command injection

Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Command injection