Red Hat Enterprise Linux 7.

Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer fileinfo metadata parser

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Gstreamer1-plugins-ugly-free: gstreamer: out-of-bounds read in realmedia demuxer audio stream header parser

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Gstreamer1-plugins-bad-free: gstreamer: multiple out-of-bounds reads in pcapparse ipv4/tcp header parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Abrt: unsanitized systemd journal content written to dump directory files enables content injection

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Other injection

Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Gstreamer1-plugins-bad-free: gstreamer: stack buffer overflow in h.265 buffering period sei parser

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds write in h.266/vvc pps picture partition parser

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: stack buffer overflow in checkprefix() algorithm id parsing

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of service

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Denial of service

389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• CWE-126

389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handler

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Denial of service

Samba: denial of service against ad dc wins server

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Command injection

Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-208

Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: http request smuggling via unsigned to signed conversion error

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• HTTP request smuggling

Glib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chain

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Command injection

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Command injection

Openvswitch: open vswitch: denial of service via malformed ftp epasv command

• Red Hat Fast Datapath for RHEL 7
• Red Hat Fast Datapath for RHEL 8
• Memory corruption

Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-179

Libxml2: libxml2: denial of service via crafted xsd-validated document

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libsoup: libsoup: http request smuggling via duplicate content-length headers

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• HTTP request smuggling

Webkitgtk: authorization bypass through webpage::send-request signal handler

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Broken access control

Libopensc: opensc: multiple uses of uninitialized variable

• OpenSC
• Red Hat Enterprise Linux 10
• Memory corruption

Efivar: efivar: denial of service due to stack overflow in device path node parsing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Emacs: emacs: memory corruption vulnerability when processing svg css

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-193

Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Denial of service

Nano: nano: format string vulnerability leads to denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Binutils: binutils: denial of service via crafted elf file

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Broken access control

Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gimp: gimp: denial of service via specially crafted seattle filmworks file

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gimp: gimp: denial of service via crafted pvr image file

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gimp: gimp: application crashes or information disclosure via crafted icns image files

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gimp: gimp: denial of service due to stack buffer overflow in tim image loader

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Sssd: out-of-bounds read in the sssd

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• CWE-427

Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Command injection

Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Tar: tar: hidden file injection via crafted archives

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Unrestricted file upload

Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Util-linux: util-linux: access control bypass due to improper hostname canonicalization

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• CWE-289

Libinput: libinput: information disclosure via dangling pointer in lua plugin handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Code injection

Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-279

Libssh: libssh: denial of service via improper configuration file handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Path traversal