Red Hat Enterprise Linux 7.

Gnutls: incomplete fix for cve-2023-5981

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Information disclosure

Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client

• Linux kernel
• Red Hat Enterprise Linux 8
• Memory corruption

Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c

• Red Hat Enterprise Linux 8.6 Extended Update Support
• Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
• Memory corruption

Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Qemu: vnc: null pointer dereference in qemu_clipboard_request()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9.2 Extended Update Support
• CWE-402

Ipa: invalid csrf protection

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Cross-site request forgery (CSRF)

Kernel: information disclosure in vhost/vhost.c:vhost_new_msg()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Information disclosure

Kernel: aoe: improper reference count leads to use-after-free vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Packagekitd: use-after-free in idle function callback

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Other injection

Kernel: refcount leak in ctnetlink_create_conntrack()

• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Red Hat Enterprise Linux 8.2 Telecommunications Update Service
• Denial of service

Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• Memory corruption

Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Perl: perl for windows binary hijacking vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Shadow-utils: possible password leak during passwd(1) change

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Authentication bypass

Sudo: improper handling of ipa_hostname leads to privilege mismanagement

• sudo
• Red Hat Enterprise Linux 6
• Privilege escalation

Kernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: gsm multiplexing race condition leads to privilege escalation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• CWE-366

Libssh: missing checks for return values for digests

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-252

Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Perl: write past buffer end via illegal user-defined unicode property

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• Memory corruption

Postgresql: role pg_signal_backend can signal certain superuser processes.

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 8
• Denial of service

Postgresql: memory disclosure in aggregate function calls

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 8
• CWE-686

Postgresql: buffer overrun from integer overflow in array modification

• Red Hat Advanced Cluster Security 4.2
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: io_uring out of boundary memory access in __io_uaddr_map()

• kernel
• Red Hat Enterprise Linux 6
• CWE-823

Kernel: null pointer dereference vulnerability in nft_dynset_init()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: oob access in smb2_dump_detail

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: out-of-bounds read vulnerability in smbcalcsize

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Gnutls: timing side-channel in the rsa-psk authentication

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• CWE-208

Libnbd: malicious nbd server may crash libnbd

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Denial of service

Libtiff: out-of-memory in tiffopen via a craft file

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Denial of service

Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: nvme: memory corruption via unprivileged user passthrough

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Imagemagick: heap use-after-free in coders/bmp.c

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: local dos vulnerability in scatterwalk_copychunks

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9

Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect

• Kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Samba: ad dc password exposure to privileged users and rodcs

• samba
• Red Hat Enterprise Linux 6
• Memory corruption

Opensc: multiple memory issues with pkcs15-init (enrollment tool)

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Opensc: potential pin bypass when card tracks its own login state

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Authentication bypass

Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-755

Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Denial of service

Qemu: improper ide controller reset can lead to mbr overwrite

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-821

Samba: smbd allows client access to unix domain sockets on the file system as root

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Path traversal

Squid: denial of service in http digest authentication

• Red Hat Enterprise Linux 6 Extended Lifecycle Support
• Red Hat Enterprise Linux 7
• Memory corruption

Squid: denial of service in ftp

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Extended Update Support
• CWE-681

Samba: ad dc busy rpc multiple listener dos

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Denial of service

Squid: dos against http and https

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• CWE-755

Samba: smb clients can truncate files with read-only permissions

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Broken access control

Use-after-free in parse_lease_state()

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Potential buffer overflow in php_cli_server_startup_workers

• php
• Red Hat Enterprise Linux 6
• Memory corruption

Reachable assertion in avahi_alternative_host_name

• avahi
• Red Hat Enterprise Linux 6
• Denial of service

Reachable assertion in avahi_rdata_parse

• avahi
• Red Hat Enterprise Linux 6
• Denial of service

Reachable assertion in dbus_set_host_name

• avahi
• Red Hat Enterprise Linux 6
• Denial of service