# Red Hat Enterprise Linux 8.8 Extended Update Support.

Every CVE that names Red Hat Enterprise Linux 8.8 Extended Update Support among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Shim: rce in http boot support may lead to secure boot bypass](https://agentprime.io/advisories/CVE-2023-40547.md)
  `CVE-2023-40547` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 8.3 High · Not analysed yet · Published 25 Jan 2024 · Tags: Memory corruption
- [Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer](https://agentprime.io/advisories/CVE-2023-6816.md)
  `CVE-2023-6816` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Jan 2024 · Tags: Memory corruption
- [Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination](https://agentprime.io/advisories/CVE-2024-0646.md)
  `CVE-2024-0646` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.0 High · Not analysed yet · Published 17 Jan 2024 · Tags: Memory corruption
- [Gnutls: incomplete fix for cve-2023-5981](https://agentprime.io/advisories/CVE-2024-0553.md)
  `CVE-2024-0553` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Information disclosure
- [Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client](https://agentprime.io/advisories/CVE-2024-0565.md)
  `CVE-2024-0565` · CVE record: Linux kernel and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 15 Jan 2024 · Tags: Memory corruption
- [Ipa: invalid csrf protection](https://agentprime.io/advisories/CVE-2023-5455.md)
  `CVE-2023-5455` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jan 2024 · Tags: Cross-site request forgery (CSRF)
- [Kernel: refcount leak in ctnetlink_create_conntrack()](https://agentprime.io/advisories/CVE-2023-7192.md)
  `CVE-2023-7192` · CVE record: Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 2 Jan 2024 · Tags: Denial of service
- [Shadow-utils: possible password leak during passwd(1) change](https://agentprime.io/advisories/CVE-2023-4641.md)
  `CVE-2023-4641` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 27 Dec 2023 · Tags: Authentication bypass
- [Kernel: gsm multiplexing race condition leads to privilege escalation](https://agentprime.io/advisories/CVE-2023-6546.md)
  `CVE-2023-6546` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.0 High · Not analysed yet · Published 21 Dec 2023 · Tags: CWE-366
- [Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty](https://agentprime.io/advisories/CVE-2023-6478.md)
  `CVE-2023-6478` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.6 High · Not analysed yet · Published 13 Dec 2023 · Tags: Memory corruption
- [Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions](https://agentprime.io/advisories/CVE-2023-6377.md)
  `CVE-2023-6377` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Dec 2023 · Tags: Memory corruption
- [Postgresql: role pg_signal_backend can signal certain superuser processes.](https://agentprime.io/advisories/CVE-2023-5870.md)
  `CVE-2023-5870` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 2.2 Low · Not analysed yet · Published 10 Dec 2023 · Tags: Denial of service
- [Postgresql: memory disclosure in aggregate function calls](https://agentprime.io/advisories/CVE-2023-5868.md)
  `CVE-2023-5868` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 10 Dec 2023 · Tags: CWE-686
- [Postgresql: buffer overrun from integer overflow in array modification](https://agentprime.io/advisories/CVE-2023-5869.md)
  `CVE-2023-5869` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Dec 2023 · Tags: Memory corruption
- [Kernel: oob access in smb2_dump_detail](https://agentprime.io/advisories/CVE-2023-6610.md)
  `CVE-2023-6610` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.1 High · Not analysed yet · Published 8 Dec 2023 · Tags: Memory corruption
- [Kernel: out-of-bounds read vulnerability in smbcalcsize](https://agentprime.io/advisories/CVE-2023-6606.md)
  `CVE-2023-6606` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.1 High · Not analysed yet · Published 8 Dec 2023 · Tags: Memory corruption
- [Gnutls: timing side-channel in the rsa-psk authentication](https://agentprime.io/advisories/CVE-2023-5981.md)
  `CVE-2023-5981` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 28 Nov 2023 · Tags: CWE-208
- [Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc](https://agentprime.io/advisories/CVE-2023-42669.md)
  `CVE-2023-42669` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 6 Nov 2023 · Tags: Denial of service
- [Samba: smbd allows client access to unix domain sockets on the file system as root](https://agentprime.io/advisories/CVE-2023-3961.md)
  `CVE-2023-3961` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2023 · Tags: Path traversal
- [Squid: dos against http and https](https://agentprime.io/advisories/CVE-2023-5824.md)
  `CVE-2023-5824` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Nov 2023 · Tags: CWE-755
- [Samba: smb clients can truncate files with read-only permissions](https://agentprime.io/advisories/CVE-2023-4091.md)
  `CVE-2023-4091` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2023 · Tags: Broken access control
- [Kernel: use after free in nvmet_tcp_free_crypto in nvme](https://agentprime.io/advisories/CVE-2023-5178.md)
  `CVE-2023-5178` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption
- [Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty](https://agentprime.io/advisories/CVE-2023-5367.md)
  `CVE-2023-5367` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Oct 2023 · Tags: Memory corruption
- [Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling](https://agentprime.io/advisories/CVE-2023-5633.md)
  `CVE-2023-5633` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2023 · Tags: CWE-911
- [Tracker-miners: sandbox escape](https://agentprime.io/advisories/CVE-2023-5557.md)
  `CVE-2023-5557` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2023 · Tags: CWE-693
- [Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h](https://agentprime.io/advisories/CVE-2023-4732.md)
  `CVE-2023-4732` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 3 Oct 2023 · Tags: CWE-366
- [Kernel: netfilter: potential slab-out-of-bound access due to integer underflow](https://agentprime.io/advisories/CVE-2023-42753.md)
  `CVE-2023-42753` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 7.0 High · Not analysed yet · Published 25 Sept 2023 · Tags: Memory corruption
- [Postgresql: merge fails to enforce update or select row security policies](https://agentprime.io/advisories/CVE-2023-39418.md)
  `CVE-2023-39418` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-1220
- [Postgresql: extension script @substitutions@ within quoting allow sql injection](https://agentprime.io/advisories/CVE-2023-39417.md)
  `CVE-2023-39417` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2023 · Tags: SQL injection
- [Kernel: smsusb: use-after-free caused by do_submit_urb()](https://agentprime.io/advisories/CVE-2023-4132.md)
  `CVE-2023-4132` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: Memory corruption
- [Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()](https://agentprime.io/advisories/CVE-2023-3772.md)
  `CVE-2023-3772` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 25 Jul 2023 · Tags: Memory corruption
- [Kernel: vmwgfx: race condition leading to information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-33951.md)
  `CVE-2023-33951` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-413
- [Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags](https://agentprime.io/advisories/CVE-2023-3812.md)
  `CVE-2023-3812` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption
- [Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()](https://agentprime.io/advisories/CVE-2023-3019.md)
  `CVE-2023-3019` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption
- [Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race](https://agentprime.io/advisories/CVE-2023-3567.md)
  `CVE-2023-3567` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.1 High · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption
- [Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects](https://agentprime.io/advisories/CVE-2023-33952.md)
  `CVE-2023-33952` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption
- [Samba: spotlight server-side share path disclosure](https://agentprime.io/advisories/CVE-2023-34968.md)
  `CVE-2023-34968` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2023 · Tags: Information disclosure
- [Samba: type confusion in mdssvc rpc service for spotlight](https://agentprime.io/advisories/CVE-2023-34967.md)
  `CVE-2023-34967` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · EPSS 0.61 · Not analysed yet · Published 20 Jul 2023 · Tags: Memory corruption
- [Samba: infinite loop in mdssvc rpc service for spotlight](https://agentprime.io/advisories/CVE-2023-34966.md)
  `CVE-2023-34966` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.62 · Not analysed yet · Published 20 Jul 2023 · Tags: Denial of service
- [Samba: out-of-bounds read in winbind auth_crap](https://agentprime.io/advisories/CVE-2022-2127.md)
  `CVE-2022-2127` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 20 Jul 2023 · Tags: Memory corruption
- [Kernel: use after free bug in btsdio_remove due to race condition](https://agentprime.io/advisories/CVE-2023-1989.md)
  `CVE-2023-1989` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Apr 2023 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-8-8-extended-update-support.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-enterprise-linux-8-8-extended-update-support&cursor=WyIyMDI0LTAxLTI5VDE0OjUzOjQ0LjMxOTAwMFoiLCJDVkUtMjAyMy00MDU0OCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-enterprise-linux-8-8-extended-update-support/?cursor=WyIyMDI0LTAxLTI5VDE0OjUzOjQ0LjMxOTAwMFoiLCJDVkUtMjAyMy00MDU0OCJd>. Everything for agents: <https://agentprime.io/llms.txt>.