# Red Hat Enterprise Linux 8.8 Extended Update Support. Every CVE that names Red Hat Enterprise Linux 8.8 Extended Update Support among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup](https://agentprime.io/advisories/CVE-2025-4948.md) `CVE-2025-4948` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 19 May 2025 · Tags: Memory corruption - [Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server](https://agentprime.io/advisories/CVE-2025-46421.md) `CVE-2025-46421` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 24 Apr 2025 · Tags: Information disclosure - [Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c](https://agentprime.io/advisories/CVE-2025-46420.md) `CVE-2025-46420` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Apr 2025 · Tags: Denial of service - [Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value](https://agentprime.io/advisories/CVE-2025-32911.md) `CVE-2025-32911` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Apr 2025 · Tags: CWE-590 - [Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process](https://agentprime.io/advisories/CVE-2025-32914.md) `CVE-2025-32914` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 14 Apr 2025 · Tags: Memory corruption - [Libsoup: out of bounds reads in soup_headers_parse_request()](https://agentprime.io/advisories/CVE-2025-32906.md) `CVE-2025-32906` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2025 · Tags: Memory corruption - [Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header](https://agentprime.io/advisories/CVE-2025-32913.md) `CVE-2025-32913` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2025 · Tags: Memory corruption - [Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()](https://agentprime.io/advisories/CVE-2025-32053.md) `CVE-2025-32053` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Apr 2025 · Tags: CWE-126 - [Libsoup: heap buffer overflow in sniff_unknown()](https://agentprime.io/advisories/CVE-2025-32052.md) `CVE-2025-32052` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Apr 2025 · Tags: CWE-126 - [Libsoup: integer overflow in append_param_quoted](https://agentprime.io/advisories/CVE-2025-32050.md) `CVE-2025-32050` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Apr 2025 · Tags: CWE-127 - [Libsoup: denial of service attack to websocket server](https://agentprime.io/advisories/CVE-2025-32049.md) `CVE-2025-32049` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Apr 2025 · Tags: Denial of service - [Yelp: arbitrary file read](https://agentprime.io/advisories/CVE-2025-3155.md) `CVE-2025-3155` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.4 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 3 Apr 2025 · Tags: Open redirect - [Libsoup: heap buffer over-read in \`skip_insignificant_space\` when sniffing content](https://agentprime.io/advisories/CVE-2025-2784.md) `CVE-2025-2784` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 3 Apr 2025 · Tags: Memory corruption - [Libexpat: expat: improper restriction of xml entity expansion depth in libexpat](https://agentprime.io/advisories/CVE-2024-8176.md) `CVE-2024-8176` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Mar 2025 · Tags: Denial of service - [Xorg: xwayland: use-after-free in syncinittrigger()](https://agentprime.io/advisories/CVE-2025-26601.md) `CVE-2025-26601` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: use-after-free in playreleasedevents()](https://agentprime.io/advisories/CVE-2025-26600.md) `CVE-2025-26600` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: use of uninitialized pointer in compredirectwindow()](https://agentprime.io/advisories/CVE-2025-26599.md) `CVE-2025-26599` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()](https://agentprime.io/advisories/CVE-2025-26598.md) `CVE-2025-26598` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: buffer overflow in xkbchangetypesofkey()](https://agentprime.io/advisories/CVE-2025-26597.md) `CVE-2025-26597` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: heap overflow in xkbwritekeysyms()](https://agentprime.io/advisories/CVE-2025-26596.md) `CVE-2025-26596` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: buffer overflow in xkbvmodmasktext()](https://agentprime.io/advisories/CVE-2025-26595.md) `CVE-2025-26595` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [X.org: xwayland: use-after-free of the root cursor](https://agentprime.io/advisories/CVE-2025-26594.md) `CVE-2025-26594` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Grub2: net: out-of-bounds write in grub_net_search_config_file()](https://agentprime.io/advisories/CVE-2025-0624.md) `CVE-2025-0624` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.6 High · Not analysed yet · Published 19 Feb 2025 · Tags: Memory corruption - [Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme](https://agentprime.io/advisories/CVE-2025-1244.md) `CVE-2025-1244` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Feb 2025 · Tags: Command injection - [Rsync: info leak via uninitialized stack contents](https://agentprime.io/advisories/CVE-2024-12085.md) `CVE-2024-12085` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library](https://agentprime.io/advisories/CVE-2024-11614.md) `CVE-2024-11614` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 8 and 4 more · CVSS 7.4 High · Not analysed yet · Published 18 Dec 2024 · Tags: Memory corruption - [Tuned: improper sanitization of \`instance_name\` parameter of the \`instance_create()\` method](https://agentprime.io/advisories/CVE-2024-52337.md) `CVE-2024-52337` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 7 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 26 Nov 2024 · Tags: CWE-20 - [Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2024-9632.md) `CVE-2024-9632` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 30 Oct 2024 · Tags: Memory corruption - [Networkmanager-libreswan: local privilege escalation via leftupdown](https://agentprime.io/advisories/CVE-2024-9050.md) `CVE-2024-9050` · CVE record: Red Hat Red Hat Enterprise Linux 7.7 Advanced Update Support and 4 more · CVSS 7.8 High · Not analysed yet · Published 22 Oct 2024 · Tags: Code injection - [Pcp: pmpost symlink attack allows escalating pcp to root user](https://agentprime.io/advisories/CVE-2024-45770.md) `CVE-2024-45770` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Path traversal - [Pcp: pmcd heap corruption through metric pmstore operations](https://agentprime.io/advisories/CVE-2024-45769.md) `CVE-2024-45769` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Memory corruption - [Qemu-kvm: 'qemu-img info' leads to host file read/write](https://agentprime.io/advisories/CVE-2024-4467.md) `CVE-2024-4467` · CVE record: Red Hat Advanced Virtualization for RHEL 8.2.1 and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Jul 2024 · Tags: Memory corruption - [389-ds-base: malformed userpassword hash may cause denial of service](https://agentprime.io/advisories/CVE-2024-5953.md) `CVE-2024-5953` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 18 Jun 2024 · Tags: CWE-1288 - [Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force](https://agentprime.io/advisories/CVE-2024-3183.md) `CVE-2024-3183` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 8.1 High · Not analysed yet · Published 12 Jun 2024 · Tags: Weak cryptography or TLS - [Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service](https://agentprime.io/advisories/CVE-2024-2698.md) `CVE-2024-2698` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Jun 2024 · Tags: Broken access control - [Ca: token authentication bypass vulnerability](https://agentprime.io/advisories/CVE-2023-4727.md) `CVE-2023-4727` · CVE record: Red Hat Red Hat Certificate System 10.4 EUS for RHEL-8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-305 - [Booth: specially crafted hash can lead to invalid hmac being accepted by booth server](https://agentprime.io/advisories/CVE-2024-3049.md) `CVE-2024-3049` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 6 Jun 2024 · Tags: CWE-345 - [Libndp: buffer overflow in route information length field](https://agentprime.io/advisories/CVE-2024-5564.md) `CVE-2024-5564` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.1 High · Not analysed yet · Published 31 May 2024 · Tags: Memory corruption - [389-ds-base: potential denial of service via specially crafted kerberos as-req request](https://agentprime.io/advisories/CVE-2024-3657.md) `CVE-2024-3657` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 28 May 2024 · Tags: CWE-20 - [389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c](https://agentprime.io/advisories/CVE-2024-2199.md) `CVE-2024-2199` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 28 May 2024 · Tags: CWE-20 - [Sssd: race condition during authorization leads to gpo policies functioning inconsistently](https://agentprime.io/advisories/CVE-2023-3758.md) `CVE-2023-3758` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.1 High · Not analysed yet · Published 18 Apr 2024 · Tags: Race condition - [Xorg-x11-server: use-after-free in procrenderaddglyphs](https://agentprime.io/advisories/CVE-2024-31083.md) `CVE-2024-31083` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 5 Apr 2024 · Tags: Memory corruption - [Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice](https://agentprime.io/advisories/CVE-2024-31081.md) `CVE-2024-31081` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.3 High · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-126 - [Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents](https://agentprime.io/advisories/CVE-2024-31080.md) `CVE-2024-31080` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.3 High · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-126 - [Pcp: exposure of the redis server backend allows remote command execution via pmproxy](https://agentprime.io/advisories/CVE-2024-3019.md) `CVE-2024-3019` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 28 Mar 2024 · Tags: Information disclosure - [Gnutls: vulnerable to minerva side-channel information leak](https://agentprime.io/advisories/CVE-2024-28834.md) `CVE-2024-28834` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Mar 2024 · Tags: Weak cryptography or TLS - [Xorg-x11-server: heap buffer overflow in disabledevice](https://agentprime.io/advisories/CVE-2024-21886.md) `CVE-2024-21886` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 28 Feb 2024 · Tags: Memory corruption - [Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent](https://agentprime.io/advisories/CVE-2024-21885.md) `CVE-2024-21885` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 28 Feb 2024 · Tags: Memory corruption - [Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation](https://agentprime.io/advisories/CVE-2024-1488.md) `CVE-2024-1488` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.0 High · Not analysed yet · Published 15 Feb 2024 · Tags: Broken access control - [389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)](https://agentprime.io/advisories/CVE-2024-1062.md) `CVE-2024-1062` · CVE record: Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 12 Feb 2024 · Tags: Memory corruption - [Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access](https://agentprime.io/advisories/CVE-2024-0229.md) `CVE-2024-0229` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Feb 2024 · Tags: Memory corruption - [Kernel: null pointer dereference in \_\_nvmet_req_complete](https://agentprime.io/advisories/CVE-2023-6536.md) `CVE-2023-6536` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Feb 2024 · Tags: Memory corruption - [Kernel: null pointer dereference in nvmet_tcp_execute_request](https://agentprime.io/advisories/CVE-2023-6535.md) `CVE-2023-6535` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Feb 2024 · Tags: Memory corruption - [Kernel: null pointer dereference in nvmet_tcp_build_iovec](https://agentprime.io/advisories/CVE-2023-6356.md) `CVE-2023-6356` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Feb 2024 · Tags: Memory corruption - [Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)](https://agentprime.io/advisories/CVE-2024-0914.md) `CVE-2024-0914` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 31 Jan 2024 · Tags: Information disclosure - [Shim: out of bounds read when parsing mz binaries](https://agentprime.io/advisories/CVE-2023-40551.md) `CVE-2023-40551` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 29 Jan 2024 · Tags: Memory corruption - [Shim: out-of-bounds read printing error messages](https://agentprime.io/advisories/CVE-2023-40546.md) `CVE-2023-40546` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 29 Jan 2024 · Tags: Memory corruption - [Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file](https://agentprime.io/advisories/CVE-2023-40549.md) `CVE-2023-40549` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 29 Jan 2024 · Tags: Memory corruption - [Shim: out-of-bound read in verify_buffer_sbat()](https://agentprime.io/advisories/CVE-2023-40550.md) `CVE-2023-40550` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 29 Jan 2024 · Tags: Memory corruption - [Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems](https://agentprime.io/advisories/CVE-2023-40548.md) `CVE-2023-40548` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 7.4 High · Not analysed yet · Published 29 Jan 2024 · Tags: Memory corruption Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .