Red Hat Enterprise Linux 6.

Heap buffer overflow in virtio_crypto_sym_op_helper()

• qemu
• Red Hat Enterprise Linux 6
• Memory corruption

Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user s…

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• CWE-385

Tree connection null pointer dereference denial-of-service vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Session race condition remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Session null pointer dereference denial-of-service vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Session race condition remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Qemu: 9pfs: suid/sgid bits not dropped on file write

• qemu
• Red Hat Enterprise Linux 6
• CWE-281

Kernel: vmwgfx: race condition leading to information disclosure vulnerability

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-413

Session setup memory exhaustion denial-of-service vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Denial of service

Imagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.h

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• CWE-667

Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions
• Memory corruption

Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• Memory corruption

Out-of-bounds read when setting hmac data

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Samba: spotlight server-side share path disclosure

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Information disclosure

Samba: type confusion in mdssvc rpc service for spotlight

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Samba: infinite loop in mdssvc rpc service for spotlight

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Denial of service

Samba: smb2 packet signing is not enforced when "server signing = required" is set

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Weak cryptography or TLS
• CWE-924

Samba: out-of-bounds read in winbind auth_crap

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Possibility of deadlock in libbpf function sock_hash_delete_elem

• kernel
• Red Hat Enterprise Linux 6
• Denial of service

W3m: out of bounds read in growbuf_to_str() at w3m/indep.c

• w3m
• Red Hat Enterprise Linux 6
• Memory corruption

W3m: out of bounds read in strnew_size() at w3m/str.c

• Red Hat Enterprise Linux 6
• Memory corruption

Segmentation fault in fax3encode in libtiff/tif_fax3.c

• libtiff
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: netlink socket crash (null pointer deref) in netlink_dump function

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service

• qemu
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: a race condition in crypto module in the function skcipher_recvmsg

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Race condition
• Denial of service

Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Heap-buffer-overflow in src/formats_i.c

• sox
• Red Hat Enterprise Linux 6
• Memory corruption

Heap-buffer-overflow in src/hcom.c

• sox
• Red Hat Enterprise Linux 6
• Memory corruption

Floating point exception in src/voc.c

• sox
• Red Hat Enterprise Linux 6
• CWE-1077

Floating point exception in src/aiff.c

• sox
• Red Hat Enterprise Linux 6
• CWE-1077

Tree connection race condition remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Session race condition remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Arbitrary file write

• libreoffice
• Red Hat Enterprise Linux 6
• CWE-20

Crash due to a null pointer dereference in the dn_nsp_send function

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Libtiff: null pointer dereference in tif_dir.c

• Libtiff
• Red Hat Enterprise Linux 6
• Memory corruption

Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: udmabuf: improper validation of array index leading to local privilege escalation

• Linux kernel
• Red Hat Enterprise Linux 9
• CWE-129

Kernel: use after free bug in btsdio_remove due to race condition

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: security regression for cve-2018-13405

• Linux kernel
• Red Hat Enterprise Linux 8
• Broken access control

Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 6
• Memory corruption

Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages

• Red Hat Network Proxy v 5.4
• Red Hat Network Satellite Server v 5.4
• Information disclosure

Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form

• Red Hat Network Satellite Server v 5.4
• Red Hat Enterprise Linux 6
• Cross-site scripting (XSS)

Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms

• Red Hat Network Satellite Server v 5.4
• Red Hat Enterprise Linux 6
• Cross-site scripting (XSS)

Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.

• Red Hat Network Satellite Server v 5.4
• Red Hat Enterprise Linux 6
• Cross-site scripting (XSS)

Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter

• Red Hat Network Satellite Server v 5.4
• Red Hat Enterprise Linux 6
• Open redirect

Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery

• Red Hat Network Satellite Server v 5.4
• Red Hat Enterprise Linux 6
• CWE-346

Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass

• Red Hat Enterprise Linux 3
• Red Hat Enterprise Linux 4
• Weak cryptography or TLS