Red Hat Enterprise Linux 7.

Luksmeta: missing slot-range validation permits out-of-gap device i/o

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-1285

Spice-server: spice: heap oob read/write via unchecked migration data offsets

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Spice-server: spice: heap buffer overflow via glz dictionary max_encoders integer truncation

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Command injection

Evolution-data-server: local file disclosure via attach file:// uris

• GNOME evolution-data-server
• Red Hat Enterprise Linux 10
• Information disclosure

Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Information disclosure

Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-214

Clevis: clevis: pkcs#11 token pin written to world-readable file

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Information disclosure

Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Authentication bypass

Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp characters

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Mutter: mutter: client-triggered use-after-free in wayland color-management icc image description path

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Cups: null pointer dereference via embedded job ticket comments allows remote denial of service

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-1284

Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gimp: gimp: heap buffer overflow in hot color filter on oversized image

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gimp: gimp: heap buffer overflow in pcx export on oversized image dimensions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

M17n-lib: null-pointer write in read_mtext_element() on malformed utf-8

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

M17n-lib: heap use-after-free write in re_init_ic()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

M17n-lib: null dereference in minput_open_im() after failed m17n_init()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd-kcm: local denial of service via excessive memory preallocation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: denial of service via race condition in autofs responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: denial of service via incomplete identity provider authentication requests

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-1025

Sssd: sssd: information disclosure via query injection in entra id lookups

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-140

Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: denial of service via crafted passkey kerberos authentication request

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via undersized packet parsing in nss responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via out-of-bounds read in pam responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via unbounded negative cache growth

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: information disclosure via odata injection in entra id lookups

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-140

Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via missing sid extension in certificate mapping

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via packet length underflow in autofs responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: access control bypass via premature ldap access rule evaluation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-393

Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via memory exhaustion in kcm responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: denial of service via use-after-free in kcm ticket renewal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: access control bypass via improper ldap shadow expiration check

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-193

Sssd: sssd: denial of service via unprivileged autofs cache invalidation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-408

Sssd: sssd: denial of service via memory exhaustion in autofs responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Sssd: sssd: denial of service via out-of-bounds read in autofs responder

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: sssd: denial of service via out-of-bounds read during passkey parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject

• Red Hat Certificate System 10
• Red Hat Certificate System 11
• Authentication bypass

Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader

• Red Hat Hardened Images
• Red Hat build of OpenJDK 11 ELS
• Denial of service