# Red Hat Enterprise Linux 8.2 Advanced Update Support. Every CVE that names Red Hat Enterprise Linux 8.2 Advanced Update Support among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()](https://agentprime.io/advisories/CVE-2025-26598.md) `CVE-2025-26598` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: buffer overflow in xkbchangetypesofkey()](https://agentprime.io/advisories/CVE-2025-26597.md) `CVE-2025-26597` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: heap overflow in xkbwritekeysyms()](https://agentprime.io/advisories/CVE-2025-26596.md) `CVE-2025-26596` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: buffer overflow in xkbvmodmasktext()](https://agentprime.io/advisories/CVE-2025-26595.md) `CVE-2025-26595` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [X.org: xwayland: use-after-free of the root cursor](https://agentprime.io/advisories/CVE-2025-26594.md) `CVE-2025-26594` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Grub2: net: out-of-bounds write in grub_net_search_config_file()](https://agentprime.io/advisories/CVE-2025-0624.md) `CVE-2025-0624` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.6 High · Not analysed yet · Published 19 Feb 2025 · Tags: Memory corruption - [Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme](https://agentprime.io/advisories/CVE-2025-1244.md) `CVE-2025-1244` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Feb 2025 · Tags: Command injection - [Rsync: path traversal vulnerability in rsync](https://agentprime.io/advisories/CVE-2024-12087.md) `CVE-2024-12087` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal - [Rsync: info leak via uninitialized stack contents](https://agentprime.io/advisories/CVE-2024-12085.md) `CVE-2024-12085` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2024-9632.md) `CVE-2024-9632` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 30 Oct 2024 · Tags: Memory corruption - [Networkmanager-libreswan: local privilege escalation via leftupdown](https://agentprime.io/advisories/CVE-2024-9050.md) `CVE-2024-9050` · CVE record: Red Hat Red Hat Enterprise Linux 7.7 Advanced Update Support and 4 more · CVSS 7.8 High · Not analysed yet · Published 22 Oct 2024 · Tags: Code injection - [Pcp: pmpost symlink attack allows escalating pcp to root user](https://agentprime.io/advisories/CVE-2024-45770.md) `CVE-2024-45770` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Path traversal - [Pcp: pmcd heap corruption through metric pmstore operations](https://agentprime.io/advisories/CVE-2024-45769.md) `CVE-2024-45769` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Memory corruption - [Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force](https://agentprime.io/advisories/CVE-2024-3183.md) `CVE-2024-3183` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 8.1 High · Not analysed yet · Published 12 Jun 2024 · Tags: Weak cryptography or TLS - [Libndp: buffer overflow in route information length field](https://agentprime.io/advisories/CVE-2024-5564.md) `CVE-2024-5564` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 31 May 2024 · Tags: Memory corruption - [Xorg-x11-server: use-after-free in procrenderaddglyphs](https://agentprime.io/advisories/CVE-2024-31083.md) `CVE-2024-31083` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Apr 2024 · Tags: Memory corruption - [Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice](https://agentprime.io/advisories/CVE-2024-31081.md) `CVE-2024-31081` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.3 High · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-126 - [Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents](https://agentprime.io/advisories/CVE-2024-31080.md) `CVE-2024-31080` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.3 High · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-126 - [Pcp: exposure of the redis server backend allows remote command execution via pmproxy](https://agentprime.io/advisories/CVE-2024-3019.md) `CVE-2024-3019` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 28 Mar 2024 · Tags: Information disclosure - [Xorg-x11-server: heap buffer overflow in disabledevice](https://agentprime.io/advisories/CVE-2024-21886.md) `CVE-2024-21886` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 28 Feb 2024 · Tags: Memory corruption - [Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent](https://agentprime.io/advisories/CVE-2024-21885.md) `CVE-2024-21885` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 28 Feb 2024 · Tags: Memory corruption - [Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation](https://agentprime.io/advisories/CVE-2024-1488.md) `CVE-2024-1488` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.0 High · Not analysed yet · Published 15 Feb 2024 · Tags: Broken access control - [Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access](https://agentprime.io/advisories/CVE-2024-0229.md) `CVE-2024-0229` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Feb 2024 · Tags: Memory corruption - [Shim: out of bounds read when parsing mz binaries](https://agentprime.io/advisories/CVE-2023-40551.md) `CVE-2023-40551` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 29 Jan 2024 · Tags: Memory corruption - [Shim: out-of-bounds read printing error messages](https://agentprime.io/advisories/CVE-2023-40546.md) `CVE-2023-40546` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 29 Jan 2024 · Tags: Memory corruption - [Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file](https://agentprime.io/advisories/CVE-2023-40549.md) `CVE-2023-40549` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 29 Jan 2024 · Tags: Memory corruption - [Shim: out-of-bound read in verify_buffer_sbat()](https://agentprime.io/advisories/CVE-2023-40550.md) `CVE-2023-40550` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 29 Jan 2024 · Tags: Memory corruption - [Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems](https://agentprime.io/advisories/CVE-2023-40548.md) `CVE-2023-40548` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 7.4 High · Not analysed yet · Published 29 Jan 2024 · Tags: Memory corruption - [Shim: rce in http boot support may lead to secure boot bypass](https://agentprime.io/advisories/CVE-2023-40547.md) `CVE-2023-40547` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 8.3 High · Not analysed yet · Published 25 Jan 2024 · Tags: Memory corruption - [Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer](https://agentprime.io/advisories/CVE-2023-6816.md) `CVE-2023-6816` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Jan 2024 · Tags: Memory corruption - [Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination](https://agentprime.io/advisories/CVE-2024-0646.md) `CVE-2024-0646` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.0 High · Not analysed yet · Published 17 Jan 2024 · Tags: Memory corruption - [Ipa: invalid csrf protection](https://agentprime.io/advisories/CVE-2023-5455.md) `CVE-2023-5455` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jan 2024 · Tags: Cross-site request forgery (CSRF) - [Kernel: refcount leak in ctnetlink_create_conntrack()](https://agentprime.io/advisories/CVE-2023-7192.md) `CVE-2023-7192` · CVE record: Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 2 Jan 2024 · Tags: Denial of service - [Kernel: gsm multiplexing race condition leads to privilege escalation](https://agentprime.io/advisories/CVE-2023-6546.md) `CVE-2023-6546` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.0 High · Not analysed yet · Published 21 Dec 2023 · Tags: CWE-366 - [Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty](https://agentprime.io/advisories/CVE-2023-6478.md) `CVE-2023-6478` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.6 High · Not analysed yet · Published 13 Dec 2023 · Tags: Memory corruption - [Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions](https://agentprime.io/advisories/CVE-2023-6377.md) `CVE-2023-6377` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Dec 2023 · Tags: Memory corruption - [Postgresql: role pg_signal_backend can signal certain superuser processes.](https://agentprime.io/advisories/CVE-2023-5870.md) `CVE-2023-5870` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 2.2 Low · Not analysed yet · Published 10 Dec 2023 · Tags: Denial of service - [Postgresql: memory disclosure in aggregate function calls](https://agentprime.io/advisories/CVE-2023-5868.md) `CVE-2023-5868` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 10 Dec 2023 · Tags: CWE-686 - [Postgresql: buffer overrun from integer overflow in array modification](https://agentprime.io/advisories/CVE-2023-5869.md) `CVE-2023-5869` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Dec 2023 · Tags: Memory corruption - [Squid: denial of service in http digest authentication](https://agentprime.io/advisories/CVE-2023-46847.md) `CVE-2023-46847` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support and 4 more · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.79 · Not analysed yet · Published 3 Nov 2023 · Tags: Memory corruption - [Squid: dos against http and https](https://agentprime.io/advisories/CVE-2023-5824.md) `CVE-2023-5824` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Nov 2023 · Tags: CWE-755 - [Squid: request/response smuggling in http/1.1 and icap](https://agentprime.io/advisories/CVE-2023-46846.md) `CVE-2023-46846` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2023 · Tags: HTTP request smuggling - [Kernel: use after free in nvmet_tcp_free_crypto in nvme](https://agentprime.io/advisories/CVE-2023-5178.md) `CVE-2023-5178` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption - [Insights-client: unsafe handling of temporary files and directories](https://agentprime.io/advisories/CVE-2023-3972.md) `CVE-2023-3972` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 7.8 High · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-379 - [Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty](https://agentprime.io/advisories/CVE-2023-5367.md) `CVE-2023-5367` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Oct 2023 · Tags: Memory corruption - [Tracker-miners: sandbox escape](https://agentprime.io/advisories/CVE-2023-5557.md) `CVE-2023-5557` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2023 · Tags: CWE-693 - [Kernel: netfilter: potential slab-out-of-bound access due to integer underflow](https://agentprime.io/advisories/CVE-2023-42753.md) `CVE-2023-42753` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2023 · Tags: Memory corruption - [Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration](https://agentprime.io/advisories/CVE-2023-3899.md) `CVE-2023-3899` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Aug 2023 · Tags: Broken access control - [Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()](https://agentprime.io/advisories/CVE-2023-4459.md) `CVE-2023-4459` · CVE record: Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 21 Aug 2023 · Tags: Memory corruption - [Postgresql: extension script @substitutions@ within quoting allow sql injection](https://agentprime.io/advisories/CVE-2023-39417.md) `CVE-2023-39417` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2023 · Tags: SQL injection - [Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()](https://agentprime.io/advisories/CVE-2023-4004.md) `CVE-2023-4004` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 31 Jul 2023 · Tags: Memory corruption - [Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags](https://agentprime.io/advisories/CVE-2023-3812.md) `CVE-2023-3812` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .