Red Hat Enterprise Linux 7.

Avahi: avahi wide-area dns predictable transaction ids

• avahi
• Red Hat Enterprise Linux 9
• CWE-334

Avahi: avahi wide-area dns uses constant source port

• avahi
• Red Hat Enterprise Linux 10
• Weak cryptography or TLS

Kernel: ksmbd: read request memory leak denial-of-service vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption
• Denial of service

Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Samba: check attribute access rights for ldap adds of computers

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Privilege escalation

Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-1230

Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Weak cryptography or TLS

Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Weak cryptography or TLS

Mpg123: buffer overflow when writing decoded pcm samples

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Pam: libpam: libpam vulnerable to read hashed password

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Information disclosure

Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Qemu-kvm: information leak in virtio devices

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Information disclosure

Qemu-kvm: usb: assertion failure in usb_ep_get()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Pcp: pmpost symlink attack allows escalating pcp to root user

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Path traversal

Pcp: pmcd heap corruption through metric pmstore operations

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Libopensc: heap buffer overflow in openpgp driver when generating key

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: incorrect handling of the length of buffers or files in pkcs15init

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: incorrect handling length of buffers or files in libopensc

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libvirt: crash of virtinterfaced via virconnectlistinterfaces()

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Libtiff: null pointer dereference in tif_dirinfo.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Unbound: heap-buffer-overflow in unbound

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Unbound: null pointer dereference in unbound

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-662

Gtk3: gtk2: library injection from cwd

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Code injection

Openjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c

• Red Hat AI Inference Server 3.2
• Red Hat Enterprise Linux 6
• Denial of service

Openjpeg: malicious files can cause the program to enter a large loop

• Red Hat AI Inference Server 3.2
• Red Hat Enterprise Linux 6
• Denial of service

Networkmanager: denial of service

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Denial of service

389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request

• Red Hat Directory Server 12.4 for RHEL 9
• Red Hat Enterprise Linux 9
• CWE-230

Openjpeg: denail of service via crafted image file

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Denial of service

Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• CWE-364

Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Denial of service

Qemu-kvm: 'qemu-img info' leads to host file read/write

• Red Hat Advanced Virtualization for RHEL 8.2.1
• Red Hat Advanced Virtualization for RHEL 8.4.0.EUS
• Memory corruption

Openssh: regresshion - race condition in ssh allows rce/dos

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• CWE-364

Poppler: pdfinfo: crash in broken documents when using -dests parameter

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-20

Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Path traversal

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Weak cryptography or TLS

Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• Broken access control

Ca: token authentication bypass vulnerability

• Red Hat Certificate System 10.4 EUS for RHEL-8
• Red Hat Enterprise Linux 7
• CWE-305

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• CWE-345

389-ds-base: potential denial of service via specially crafted kerberos as-req request

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 for RHEL 8
• CWE-20

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.8 for RHEL 8
• CWE-20

Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• CWE-672

Libvirt: stack use-after-free in virnetclientioeventloop()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-562

Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• CWE-208

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Race condition

Freeipa: specially crafted http requests potentially lead to denial of service

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-20

Qemu-kvm: net: assertion failure in update_sctp_checksum()

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Denial of service

Qemu: virtio: dma reentrancy issue leads to double free vulnerability

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 6
• Memory corruption

Xorg-x11-server: use-after-free in procrenderaddglyphs

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption