Red Hat Enterprise Linux 7.

Grub2: use-after-free in grub_file_close()

• GNU grub2
• Red Hat Enterprise Linux 10
• Memory corruption

Libvirt: information disclosure via world-readable vm snapshots

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Broken access control

Libvirt: denial of service in xml parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Denial of service

Samba: command injection in wins server hook script

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Command injection

Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion

• GNOME libsoup
• Red Hat Enterprise Linux 10
• Memory corruption

Luksmeta: data corruption when handling luks1 partitions with luksmeta

• Latchset luksmeta
• Red Hat Enterprise Linux 10
• CWE-1284

Samba: vfs_streams_xattr uninitialized memory write possible

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libxslt: type confusion in exsltfuncresultcompfunction of libxslt

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Qemu-kvm: vnc websocket handshake use-after-free

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libxslt: use-after-free with key data stored cross-rvt

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libssh: memory exhaustion via repeated key exchange in libssh

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Denial of service

Libsoup: improper handling of http vary header in libsoup caching

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-524

Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Path traversal

Libssh: write beyond bounds in binary to base64 conversion functions

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Shim: expired secure boot certificate

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-324

Kernel: deadlock in ksmbd_find_crypto_ctx()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-413

Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message type

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Kernel: ksmbd race issue from smb2 close and logoff with multichannel

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-421

Kernel: ksmbd brute force delay bypass via asynchronous requests

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Authentication bypass

Kernel: ksmbd memory exhaustion denial-of-service vulnerability

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Glib: glib crash after long command line

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Code injection

Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libssh: null pointer dereference in libssh kex session id calculation

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Pam-config: lpe from unprivileged to allow_active in pam

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Broken access control

Libssh: use of uninitialized variable in privatekey_from_file()

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

• GNOME libxslt
• Red Hat Enterprise Linux 10
• Memory corruption

Gnutls: vulnerability in gnutls certtool template parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Gnutls: vulnerability in gnutls sct extension parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Weak cryptography or TLS

Gnutls: vulnerability in gnutls othername san export

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Libssh: invalid return code for chacha20 poly1305 with openssl backend

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-393

Libssh: double free vulnerability in libssh key export functions

• libssh
• Red Hat Enterprise Linux 9
• Memory corruption

Libssh: incorrect return code handling in ssh_kdf() in libssh

• libssh
• Red Hat Enterprise Linux 8
• CWE-682

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode

• X.Org xwayland
• Red Hat Enterprise Linux 10
• Information disclosure

Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Information disclosure

Libgepub: integer overflow in libgepub's epub archive handling

• Red Hat Enterprise Linux 7
• Memory corruption

Libxml: null pointer dereference leads to denial of service (dos)

• GNOME libxml2
• Red Hat Enterprise Linux 10
• Memory corruption

Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gimp: gimp integer overflow

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Libarchive: reading past eof may be triggered for piped file streams

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-193

Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Information disclosure

Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• CWE-364

Coreutils: heap buffer under-read in gnu coreutils sort via key specification

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Icu: stack buffer overflow in the srbroot::addtag function

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Gimp: stack-based buffer overflows in file-ico

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libsoup: null pointer dereference in libsoup may lead to denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Authentication bypass

Gnuplot: gnuplot heap-buffer overflow on utf8_copy_one

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Libsoup: cookie domain validation bypass via uppercase characters in libsoup

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-178