Advisories · Technology
Red Hat Enterprise Linux 7 Extended Lifecycle Support.
Every CVE that names Red Hat Enterprise Linux 7 Extended Lifecycle Support among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.5 Medium
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore
- X.Org xwayland
- Red Hat Enterprise Linux 10
- CWE-667
- CVSS 7.3 High
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension
- X.Org xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 6.1 Medium
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors
- X.Org xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Freeipa: idm: privilege escalation from host to domain admin in freeipa
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- CWE-1220
- CVSS 7.8 High
Linux-pam: linux-pam directory traversal
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Path traversal
- CVSS 9.1 CriticalCritical · CVSS 9+
Libxml: heap use after free (uaf) leads to denial of service (dos)
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Libxml: type confusion leads to denial of service (dos)
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.5 High
Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.8 High
Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.3 High
Gimp: multiple use after free in xcf parser
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 7.3 High
Gimp: multiple heap buffer overflows in tga parser
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 3.7 Low
Libsoup: integer overflow in cookie expiration date handling in libsoup
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.5 High
Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 9.0 CriticalCritical · CVSS 9+
Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- CWE-590
- CVSS 7.4 High
Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.5 High
Libsoup: out of bounds reads in soup_headers_parse_request()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.5 High
Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 7.5 High
Libsoup: denial of service attack to websocket server
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Denial of service
- CVSS 7.0 High
Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: use-after-free in syncinittrigger()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: use-after-free in playreleasedevents()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: use of uninitialized pointer in compredirectwindow()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: buffer overflow in xkbchangetypesofkey()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: heap overflow in xkbwritekeysyms()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: buffer overflow in xkbvmodmasktext()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
X.org: xwayland: use-after-free of the root cursor
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.6 High
Grub2: net: out-of-bounds write in grub_net_search_config_file()
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 8.8 High
Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- Command injection
- CVSS 6.5 Medium
Rsync: path traversal vulnerability in rsync
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Path traversal
- CVSS 7.5 High
Rsync: info leak via uninitialized stack contents
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 5.5 Medium
Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
- Fast Datapath for Red Hat Enterprise Linux 7
- Fast Datapath for Red Hat Enterprise Linux 8
- CWE-20
- CVSS 7.8 High
Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.8 High
Networkmanager-libreswan: local privilege escalation via leftupdown
- Red Hat Enterprise Linux 7.7 Advanced Update Support
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Code injection
- CVSS 5.7 Medium
389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Directory Server 11
- CWE-20
- CVSS 5.7 Medium
389-ds-base: malformed userpassword hash may cause denial of service
- Red Hat Directory Server 11.5 E4S for RHEL 8
- Red Hat Directory Server 11.7 for RHEL 8
- CWE-1288
- CVSS 8.1 High
Libndp: buffer overflow in route information length field
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
Squid: request/response smuggling in http/1.1 and icap
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- HTTP request smuggling