# Red Hat Enterprise Linux 8. Every CVE that names Red Hat Enterprise Linux 8 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Freeipa: administrative user data leaked through systemd journal](https://agentprime.io/advisories/CVE-2024-11029.md) `CVE-2024-11029` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: Information disclosure - [Rsync: path traversal vulnerability in rsync](https://agentprime.io/advisories/CVE-2024-12087.md) `CVE-2024-12087` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal - [Rsync: race condition in rsync handling symbolic links](https://agentprime.io/advisories/CVE-2024-12747.md) `CVE-2024-12747` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Race condition - [Rsync: --safe-links option bypass leads to path traversal](https://agentprime.io/advisories/CVE-2024-12088.md) `CVE-2024-12088` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal - [Rsync: rsync server leaks arbitrary client files](https://agentprime.io/advisories/CVE-2024-12086.md) `CVE-2024-12086` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-390 - [Rsync: info leak via uninitialized stack contents](https://agentprime.io/advisories/CVE-2024-12085.md) `CVE-2024-12085` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Ruby: openssl: ruby marvin attack](https://agentprime.io/advisories/CVE-2025-0306.md) `CVE-2025-0306` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 9 Jan 2025 · Tags: CWE-385 - [Openjpeg: heap buffer overflow in lib/openjp2/j2k.c](https://agentprime.io/advisories/CVE-2024-56827.md) `CVE-2024-56827` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 9 Jan 2025 · Tags: Memory corruption - [Openjpeg: heap buffer overflow in bin/common/color.c](https://agentprime.io/advisories/CVE-2024-56826.md) `CVE-2024-56826` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 9 Jan 2025 · Tags: Memory corruption - [Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library](https://agentprime.io/advisories/CVE-2024-11614.md) `CVE-2024-11614` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 8 and 4 more · CVSS 7.4 High · Not analysed yet · Published 18 Dec 2024 · Tags: Memory corruption - [Tuned: improper sanitization of \`instance_name\` parameter of the \`instance_create()\` method](https://agentprime.io/advisories/CVE-2024-52337.md) `CVE-2024-52337` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 7 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 26 Nov 2024 · Tags: CWE-20 - [Tuned: \`script_pre\` and \`script_post\` options allow to pass arbitrary scripts executed by root](https://agentprime.io/advisories/CVE-2024-52336.md) `CVE-2024-52336` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 26 Nov 2024 · Tags: Privilege escalation - [Avahi: avahi wide-area dns predictable transaction ids](https://agentprime.io/advisories/CVE-2024-52616.md) `CVE-2024-52616` · CVE record: avahi and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Nov 2024 · Tags: CWE-334 - [Avahi: avahi wide-area dns uses constant source port](https://agentprime.io/advisories/CVE-2024-52615.md) `CVE-2024-52615` · CVE record: avahi avahi and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Nov 2024 · Tags: Weak cryptography or TLS - [Kernel: ksmbd: read request memory leak denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-39180.md) `CVE-2023-39180` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 4.0 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Memory corruption, Denial of service - [Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-39179.md) `CVE-2023-39179` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.5 High · Not analysed yet · Published 18 Nov 2024 · Tags: Memory corruption - [Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-39176.md) `CVE-2023-39176` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.8 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Memory corruption - [Samba: check attribute access rights for ldap adds of computers](https://agentprime.io/advisories/CVE-2020-25720.md) `CVE-2020-25720` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 17 Nov 2024 · Tags: Privilege escalation - [Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()](https://agentprime.io/advisories/CVE-2024-7730.md) `CVE-2024-7730` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 7.4 High · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()](https://agentprime.io/advisories/CVE-2024-3447.md) `CVE-2024-3447` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-4458.md) `CVE-2023-4458` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 4.0 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()](https://agentprime.io/advisories/CVE-2023-4134.md) `CVE-2023-4134` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block](https://agentprime.io/advisories/CVE-2024-49395.md) `CVE-2024-49395` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-1230 - [Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing](https://agentprime.io/advisories/CVE-2024-49394.md) `CVE-2024-49394` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Weak cryptography or TLS - [Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing](https://agentprime.io/advisories/CVE-2024-49393.md) `CVE-2024-49393` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Weak cryptography or TLS - [Pam: improper hostname interpretation in pam_access leads to access control bypass](https://agentprime.io/advisories/CVE-2024-10963.md) `CVE-2024-10963` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.4 High · Not analysed yet · Published 7 Nov 2024 · Tags: Authentication bypass - [Mpg123: buffer overflow when writing decoded pcm samples](https://agentprime.io/advisories/CVE-2024-10573.md) `CVE-2024-10573` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 2 more · CVSS 6.7 Medium · Not analysed yet · Published 31 Oct 2024 · Tags: Memory corruption - [Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2024-9632.md) `CVE-2024-9632` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 30 Oct 2024 · Tags: Memory corruption - [Pam: libpam: libpam vulnerable to read hashed password](https://agentprime.io/advisories/CVE-2024-10041.md) `CVE-2024-10041` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: Information disclosure - [Networkmanager-libreswan: local privilege escalation via leftupdown](https://agentprime.io/advisories/CVE-2024-9050.md) `CVE-2024-9050` · CVE record: Red Hat Red Hat Enterprise Linux 7.7 Advanced Update Support and 4 more · CVSS 7.8 High · Not analysed yet · Published 22 Oct 2024 · Tags: Code injection - [Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2024-6519.md) `CVE-2024-6519` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 8.2 High · Not analysed yet · Published 21 Oct 2024 · Tags: Memory corruption - [Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)](https://agentprime.io/advisories/CVE-2024-9676.md) `CVE-2024-9676` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Oct 2024 · Tags: Path traversal - [Qemu-kvm: information leak in virtio devices](https://agentprime.io/advisories/CVE-2024-8612.md) `CVE-2024-8612` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.8 Low · Not analysed yet · Published 20 Sept 2024 · Tags: Information disclosure - [Qemu-kvm: usb: assertion failure in usb_ep_get()](https://agentprime.io/advisories/CVE-2024-8354.md) `CVE-2024-8354` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Denial of service - [Pcp: pmpost symlink attack allows escalating pcp to root user](https://agentprime.io/advisories/CVE-2024-45770.md) `CVE-2024-45770` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Path traversal - [Pcp: pmcd heap corruption through metric pmstore operations](https://agentprime.io/advisories/CVE-2024-45769.md) `CVE-2024-45769` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Memory corruption - [Libopensc: heap buffer overflow in openpgp driver when generating key](https://agentprime.io/advisories/CVE-2024-8443.md) `CVE-2024-8443` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 2.9 Low · Not analysed yet · Published 10 Sept 2024 · Tags: Memory corruption - [389-ds-base: server crash while modifying \`userpassword\` using malformed input (incomplete fix for cve-2024-2199)](https://agentprime.io/advisories/CVE-2024-8445.md) `CVE-2024-8445` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 5 Sept 2024 · Tags: CWE-20 - [Libopensc: incorrect handling of the length of buffers or files in pkcs15init](https://agentprime.io/advisories/CVE-2024-45620.md) `CVE-2024-45620` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Libopensc: incorrect handling length of buffers or files in libopensc](https://agentprime.io/advisories/CVE-2024-45619.md) `CVE-2024-45619` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init](https://agentprime.io/advisories/CVE-2024-45618.md) `CVE-2024-45618` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc](https://agentprime.io/advisories/CVE-2024-45617.md) `CVE-2024-45617` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc](https://agentprime.io/advisories/CVE-2024-45616.md) `CVE-2024-45616` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init](https://agentprime.io/advisories/CVE-2024-45615.md) `CVE-2024-45615` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate](https://agentprime.io/advisories/CVE-2024-5148.md) `CVE-2024-5148` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 7.5 High · Not analysed yet · Published 2 Sept 2024 · Tags: CWE-488 - [Libvirt: crash of virtinterfaced via virconnectlistinterfaces()](https://agentprime.io/advisories/CVE-2024-8235.md) `CVE-2024-8235` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 30 Aug 2024 · Tags: Memory corruption - [Libtiff: null pointer dereference in tif_dirinfo.c](https://agentprime.io/advisories/CVE-2024-7006.md) `CVE-2024-7006` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Aug 2024 · Tags: Memory corruption - [Unbound: heap-buffer-overflow in unbound](https://agentprime.io/advisories/CVE-2024-43168.md) `CVE-2024-43168` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 8 Aug 2024 · Tags: Memory corruption - [Unbound: null pointer dereference in unbound](https://agentprime.io/advisories/CVE-2024-43167.md) `CVE-2024-43167` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 2.8 Low · Not analysed yet · Published 8 Aug 2024 · Tags: Memory corruption - [Qemu: denial of service via improper synchronization in qemu nbd server during socket closure](https://agentprime.io/advisories/CVE-2024-7409.md) `CVE-2024-7409` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2024 · Tags: CWE-662 - [Libnbd: nbd server improper certificate validation](https://agentprime.io/advisories/CVE-2024-7383.md) `CVE-2024-7383` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 7.4 High · Not analysed yet · Published 5 Aug 2024 · Tags: Weak cryptography or TLS - [Gtk3: gtk2: library injection from cwd](https://agentprime.io/advisories/CVE-2024-6655.md) `CVE-2024-6655` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.0 High · Not analysed yet · Published 16 Jul 2024 · Tags: Code injection - [Openjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c](https://agentprime.io/advisories/CVE-2023-39329.md) `CVE-2023-39329` · CVE record: Red Hat Red Hat AI Inference Server 3.2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Jul 2024 · Tags: Denial of service - [Openjpeg: malicious files can cause the program to enter a large loop](https://agentprime.io/advisories/CVE-2023-39327.md) `CVE-2023-39327` · CVE record: Red Hat Red Hat AI Inference Server 3.2 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 13 Jul 2024 · Tags: Denial of service - [Networkmanager: denial of service](https://agentprime.io/advisories/CVE-2024-6501.md) `CVE-2024-6501` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 9 Jul 2024 · Tags: Denial of service - [389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request](https://agentprime.io/advisories/CVE-2024-6237.md) `CVE-2024-6237` · CVE record: Red Hat Red Hat Directory Server 12.4 for RHEL 9 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-230 - [Openjpeg: denail of service via crafted image file](https://agentprime.io/advisories/CVE-2023-39328.md) `CVE-2023-39328` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: Denial of service - [Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9](https://agentprime.io/advisories/CVE-2024-6409.md) `CVE-2024-6409` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.28 · Not analysed yet · Published 8 Jul 2024 · Tags: CWE-364 - [Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss](https://agentprime.io/advisories/CVE-2024-6505.md) `CVE-2024-6505` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 5 Jul 2024 · Tags: Memory corruption - [Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option](https://agentprime.io/advisories/CVE-2024-6126.md) `CVE-2024-6126` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 3.2 Low · Not analysed yet · Published 3 Jul 2024 · Tags: Denial of service Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .