Red Hat Enterprise Linux 6.

Xorg-x11-server: use-after-free bug in destroywindow

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Samba: heap buffer overflow with freshness tokens in the heimdal kdc

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-911

Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Libxpm: out of bounds read on xpm with corrupted colormap

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Libx11: integer overflow in xcreateimage() leading to a heap overflow

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Libx11: stack exhaustion from infinite recursion in putsubimage()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Denial of service

Libx11: out-of-bounds memory access in _xkbreadkeysyms()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: xfrm: out-of-bounds read in __xfrm_state_filter_match()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: netfilter: xtables sctp out-of-bounds read in match_flags()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: netfilter: xtables out-of-bounds read in u32_match_it()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Libtiff: potential integer overflow in raw2tiff.c

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Memory corruption

Libtiff: integer overflow in tiffcp.c

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: rsvp: out-of-bounds read in rsvp_classify()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: ipv4: null pointer dereference in ipv4_send_dest_unreach()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: ebpf: insufficient stack type checks in dynptr

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• CWE-20

Libtiff: memory leak in tiffcrop.c

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Memory corruption

Imagemagick: heap-buffer-overflow in coders/tiff.c

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Memory leak on tls connections

• jss
• Red Hat Enterprise Linux 6
• Denial of service

Glibc: buffer overflow in ld.so leading to privilege escalation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• CWE-366

Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Race condition

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 7.7 Advanced Update Support
• Memory corruption

Heap out of bound read in builtin.c

• gawk
• Red Hat Enterprise Linux 6
• Memory corruption

Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c

• kernel
• Red Hat Enterprise Linux 6
• CWE-684

Glibc: dos due to memory leak in getaddrinfo.c

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Denial of service

Glibc: potential use-after-free in getaddrinfo()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Glibc: stack read overflow in getaddrinfo in no-aaaa mode

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Out of bounds read in parse_module function in bfd/vms-alpha.c

• binutils
• Red Hat Enterprise Linux 6
• Memory corruption

Field `file_table` of `struct module *module` is uninitialized

• binutils
• Red Hat Enterprise Linux 6
• Memory corruption

Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized

• binutils
• Red Hat Enterprise Linux 6
• Memory corruption

Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`

• binutils
• Red Hat Enterprise Linux 6
• Memory corruption

G_variant_byteswap() can take a long time with some non-normal inputs

• glib2
• Red Hat Enterprise Linux 6
• Denial of service

Gvariant offset table entry size is not checked in is_normal()

• glib2
• Red Hat Enterprise Linux 6
• Denial of service

Gvariant deserialisation does not match spec for non-normal data

• glib2
• Red Hat Enterprise Linux 6
• Denial of service

Dma reentrancy issue (incomplete fix for cve-2021-3750)

• qemu
• Red Hat Enterprise Linux 6
• Memory corruption

Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Denial of service

Sev-es / sev-snp vmgexit double fetch vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Triggerable assertion due to race condition in hot-unplug

• qemu
• Red Hat Enterprise Linux 6
• Denial of service

Glibc: potential use-after-free in gaih_inet()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Use after free race between mbind() and vma-locked page fault

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c

• Kernel
• Red Hat Enterprise Linux 6
• CWE-402

Ghostscript: incomplete fix for cve-2020-16305

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 6
• Memory corruption

Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Broken access control

Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()

• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Red Hat Enterprise Linux 8.2 Telecommunications Update Service
• Memory corruption

Memory leak in btrfs_get_dev_args_from_path()

• Kernel
• Red Hat Enterprise Linux 6
• Denial of service

Kernel: btrfs: double free in btrfs_get_root_ref()

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: jfs: null pointer dereference in dbfree()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Postgresql: merge fails to enforce update or select row security policies

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-1220

Postgresql: extension script @substitutions@ within quoting allow sql injection

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 8
• SQL injection

Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Extended Update Support
• Memory corruption

Out-of-bounds read information disclosure vulnerability

• qemu-kvm
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: smsusb: use-after-free caused by do_submit_urb()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: cxgb4: use-after-free in ch_flower_stats_cb()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption