# Red Hat Enterprise Linux 7.

Every CVE that names Red Hat Enterprise Linux 7 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Avahi: avahi wide-area dns predictable transaction ids](https://agentprime.io/advisories/CVE-2024-52616.md)
  `CVE-2024-52616` · CVE record: avahi and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Nov 2024 · Tags: CWE-334
- [Avahi: avahi wide-area dns uses constant source port](https://agentprime.io/advisories/CVE-2024-52615.md)
  `CVE-2024-52615` · CVE record: avahi avahi and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Nov 2024 · Tags: Weak cryptography or TLS
- [Kernel: ksmbd: read request memory leak denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-39180.md)
  `CVE-2023-39180` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 4.0 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Memory corruption, Denial of service
- [Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-39179.md)
  `CVE-2023-39179` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.5 High · Not analysed yet · Published 18 Nov 2024 · Tags: Memory corruption
- [Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-39176.md)
  `CVE-2023-39176` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.8 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Memory corruption
- [Samba: check attribute access rights for ldap adds of computers](https://agentprime.io/advisories/CVE-2020-25720.md)
  `CVE-2020-25720` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 17 Nov 2024 · Tags: Privilege escalation
- [Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()](https://agentprime.io/advisories/CVE-2024-7730.md)
  `CVE-2024-7730` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 7.4 High · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption
- [Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()](https://agentprime.io/advisories/CVE-2024-3447.md)
  `CVE-2024-3447` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption
- [Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-4458.md)
  `CVE-2023-4458` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 4.0 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption
- [Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()](https://agentprime.io/advisories/CVE-2023-4134.md)
  `CVE-2023-4134` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption
- [Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block](https://agentprime.io/advisories/CVE-2024-49395.md)
  `CVE-2024-49395` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-1230
- [Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing](https://agentprime.io/advisories/CVE-2024-49394.md)
  `CVE-2024-49394` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Weak cryptography or TLS
- [Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing](https://agentprime.io/advisories/CVE-2024-49393.md)
  `CVE-2024-49393` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Weak cryptography or TLS
- [Mpg123: buffer overflow when writing decoded pcm samples](https://agentprime.io/advisories/CVE-2024-10573.md)
  `CVE-2024-10573` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 2 more · CVSS 6.7 Medium · Not analysed yet · Published 31 Oct 2024 · Tags: Memory corruption
- [Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2024-9632.md)
  `CVE-2024-9632` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 30 Oct 2024 · Tags: Memory corruption
- [Pam: libpam: libpam vulnerable to read hashed password](https://agentprime.io/advisories/CVE-2024-10041.md)
  `CVE-2024-10041` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: Information disclosure
- [Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2024-6519.md)
  `CVE-2024-6519` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 8.2 High · Not analysed yet · Published 21 Oct 2024 · Tags: Memory corruption
- [Qemu-kvm: information leak in virtio devices](https://agentprime.io/advisories/CVE-2024-8612.md)
  `CVE-2024-8612` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.8 Low · Not analysed yet · Published 20 Sept 2024 · Tags: Information disclosure
- [Qemu-kvm: usb: assertion failure in usb_ep_get()](https://agentprime.io/advisories/CVE-2024-8354.md)
  `CVE-2024-8354` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Denial of service
- [Pcp: pmpost symlink attack allows escalating pcp to root user](https://agentprime.io/advisories/CVE-2024-45770.md)
  `CVE-2024-45770` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Path traversal
- [Pcp: pmcd heap corruption through metric pmstore operations](https://agentprime.io/advisories/CVE-2024-45769.md)
  `CVE-2024-45769` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Memory corruption
- [Libopensc: heap buffer overflow in openpgp driver when generating key](https://agentprime.io/advisories/CVE-2024-8443.md)
  `CVE-2024-8443` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 2.9 Low · Not analysed yet · Published 10 Sept 2024 · Tags: Memory corruption
- [Libopensc: incorrect handling of the length of buffers or files in pkcs15init](https://agentprime.io/advisories/CVE-2024-45620.md)
  `CVE-2024-45620` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption
- [Libopensc: incorrect handling length of buffers or files in libopensc](https://agentprime.io/advisories/CVE-2024-45619.md)
  `CVE-2024-45619` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption
- [Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init](https://agentprime.io/advisories/CVE-2024-45618.md)
  `CVE-2024-45618` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption
- [Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc](https://agentprime.io/advisories/CVE-2024-45617.md)
  `CVE-2024-45617` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption
- [Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc](https://agentprime.io/advisories/CVE-2024-45616.md)
  `CVE-2024-45616` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption
- [Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init](https://agentprime.io/advisories/CVE-2024-45615.md)
  `CVE-2024-45615` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption
- [Libvirt: crash of virtinterfaced via virconnectlistinterfaces()](https://agentprime.io/advisories/CVE-2024-8235.md)
  `CVE-2024-8235` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 30 Aug 2024 · Tags: Memory corruption
- [Libtiff: null pointer dereference in tif_dirinfo.c](https://agentprime.io/advisories/CVE-2024-7006.md)
  `CVE-2024-7006` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Aug 2024 · Tags: Memory corruption
- [Unbound: heap-buffer-overflow in unbound](https://agentprime.io/advisories/CVE-2024-43168.md)
  `CVE-2024-43168` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 8 Aug 2024 · Tags: Memory corruption
- [Unbound: null pointer dereference in unbound](https://agentprime.io/advisories/CVE-2024-43167.md)
  `CVE-2024-43167` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 2.8 Low · Not analysed yet · Published 8 Aug 2024 · Tags: Memory corruption
- [Qemu: denial of service via improper synchronization in qemu nbd server during socket closure](https://agentprime.io/advisories/CVE-2024-7409.md)
  `CVE-2024-7409` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2024 · Tags: CWE-662
- [Gtk3: gtk2: library injection from cwd](https://agentprime.io/advisories/CVE-2024-6655.md)
  `CVE-2024-6655` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.0 High · Not analysed yet · Published 16 Jul 2024 · Tags: Code injection
- [Openjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c](https://agentprime.io/advisories/CVE-2023-39329.md)
  `CVE-2023-39329` · CVE record: Red Hat Red Hat AI Inference Server 3.2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Jul 2024 · Tags: Denial of service
- [Openjpeg: malicious files can cause the program to enter a large loop](https://agentprime.io/advisories/CVE-2023-39327.md)
  `CVE-2023-39327` · CVE record: Red Hat Red Hat AI Inference Server 3.2 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 13 Jul 2024 · Tags: Denial of service
- [Networkmanager: denial of service](https://agentprime.io/advisories/CVE-2024-6501.md)
  `CVE-2024-6501` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 9 Jul 2024 · Tags: Denial of service
- [389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request](https://agentprime.io/advisories/CVE-2024-6237.md)
  `CVE-2024-6237` · CVE record: Red Hat Red Hat Directory Server 12.4 for RHEL 9 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-230
- [Openjpeg: denail of service via crafted image file](https://agentprime.io/advisories/CVE-2023-39328.md)
  `CVE-2023-39328` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: Denial of service
- [Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9](https://agentprime.io/advisories/CVE-2024-6409.md)
  `CVE-2024-6409` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.28 · Not analysed yet · Published 8 Jul 2024 · Tags: CWE-364
- [Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss](https://agentprime.io/advisories/CVE-2024-6505.md)
  `CVE-2024-6505` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 5 Jul 2024 · Tags: Memory corruption
- [Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option](https://agentprime.io/advisories/CVE-2024-6126.md)
  `CVE-2024-6126` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 3.2 Low · Not analysed yet · Published 3 Jul 2024 · Tags: Denial of service
- [Qemu-kvm: 'qemu-img info' leads to host file read/write](https://agentprime.io/advisories/CVE-2024-4467.md)
  `CVE-2024-4467` · CVE record: Red Hat Advanced Virtualization for RHEL 8.2.1 and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Jul 2024 · Tags: Memory corruption
- [Openssh: regresshion - race condition in ssh allows rce/dos](https://agentprime.io/advisories/CVE-2024-6387.md)
  `CVE-2024-6387` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 1.00 · Not analysed yet · Published 1 Jul 2024 · Tags: CWE-364
- [Poppler: pdfinfo: crash in broken documents when using -dests parameter](https://agentprime.io/advisories/CVE-2024-6239.md)
  `CVE-2024-6239` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 21 Jun 2024 · Tags: CWE-20
- [Nano: running \`chmod\` and \`chown\` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file](https://agentprime.io/advisories/CVE-2024-5742.md)
  `CVE-2024-5742` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 Jun 2024 · Tags: Path traversal
- [Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force](https://agentprime.io/advisories/CVE-2024-3183.md)
  `CVE-2024-3183` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 8.1 High · Not analysed yet · Published 12 Jun 2024 · Tags: Weak cryptography or TLS
- [Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service](https://agentprime.io/advisories/CVE-2024-2698.md)
  `CVE-2024-2698` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Jun 2024 · Tags: Broken access control
- [Ca: token authentication bypass vulnerability](https://agentprime.io/advisories/CVE-2023-4727.md)
  `CVE-2023-4727` · CVE record: Red Hat Red Hat Certificate System 10.4 EUS for RHEL-8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-305
- [Booth: specially crafted hash can lead to invalid hmac being accepted by booth server](https://agentprime.io/advisories/CVE-2024-3049.md)
  `CVE-2024-3049` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 6 Jun 2024 · Tags: CWE-345
- [389-ds-base: potential denial of service via specially crafted kerberos as-req request](https://agentprime.io/advisories/CVE-2024-3657.md)
  `CVE-2024-3657` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 28 May 2024 · Tags: CWE-20
- [389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c](https://agentprime.io/advisories/CVE-2024-2199.md)
  `CVE-2024-2199` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 28 May 2024 · Tags: CWE-20
- [Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash](https://agentprime.io/advisories/CVE-2024-4693.md)
  `CVE-2024-4693` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 May 2024 · Tags: CWE-672
- [Libvirt: stack use-after-free in virnetclientioeventloop()](https://agentprime.io/advisories/CVE-2024-4418.md)
  `CVE-2024-4418` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 8 May 2024 · Tags: CWE-562
- [Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)](https://agentprime.io/advisories/CVE-2024-2467.md)
  `CVE-2024-2467` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.9 Medium · Not analysed yet · Published 25 Apr 2024 · Tags: CWE-208
- [Sssd: race condition during authorization leads to gpo policies functioning inconsistently](https://agentprime.io/advisories/CVE-2023-3758.md)
  `CVE-2023-3758` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.1 High · Not analysed yet · Published 18 Apr 2024 · Tags: Race condition
- [Freeipa: specially crafted http requests potentially lead to denial of service](https://agentprime.io/advisories/CVE-2024-1481.md)
  `CVE-2024-1481` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: CWE-20
- [Qemu-kvm: net: assertion failure in update_sctp_checksum()](https://agentprime.io/advisories/CVE-2024-3567.md)
  `CVE-2024-3567` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: Denial of service
- [Qemu: virtio: dma reentrancy issue leads to double free vulnerability](https://agentprime.io/advisories/CVE-2024-3446.md)
  `CVE-2024-3446` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.2 High · Not analysed yet · Published 9 Apr 2024 · Tags: Memory corruption
- [Xorg-x11-server: use-after-free in procrenderaddglyphs](https://agentprime.io/advisories/CVE-2024-31083.md)
  `CVE-2024-31083` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Apr 2024 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-7.md>
Older: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-7.md?cursor=WyIyMDI0LTA0LTA1VDEyOjA0OjQ5LjQxNDAwMFoiLCJDVkUtMjAyNC0zMTA4MyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-enterprise-linux-7&cursor=WyIyMDI0LTExLTI2VDE1OjIxOjEzLjUxODAwMFoiLCJDVkUtMjAyNC01MjMzNiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-7/?cursor=WyIyMDI0LTExLTI2VDE1OjIxOjEzLjUxODAwMFoiLCJDVkUtMjAyNC01MjMzNiJd>. Everything for agents: <https://agentprime.io/llms.txt>.