# Red Hat Enterprise Linux 8. Every CVE that names Red Hat Enterprise Linux 8 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Processing sftp server read may cause null dereference](https://agentprime.io/advisories/CVE-2023-3603.md) `CVE-2023-3603` · CVE record: libssh and 4 more · CVSS 3.1 Low · Not analysed yet · Published 21 Jul 2023 · Tags: Memory corruption - [Samba: spotlight server-side share path disclosure](https://agentprime.io/advisories/CVE-2023-34968.md) `CVE-2023-34968` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2023 · Tags: Information disclosure - [Samba: type confusion in mdssvc rpc service for spotlight](https://agentprime.io/advisories/CVE-2023-34967.md) `CVE-2023-34967` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · EPSS 0.61 · Not analysed yet · Published 20 Jul 2023 · Tags: Memory corruption - [Samba: infinite loop in mdssvc rpc service for spotlight](https://agentprime.io/advisories/CVE-2023-34966.md) `CVE-2023-34966` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.62 · Not analysed yet · Published 20 Jul 2023 · Tags: Denial of service - [Samba: smb2 packet signing is not enforced when "server signing = required" is set](https://agentprime.io/advisories/CVE-2023-3347.md) `CVE-2023-3347` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 20 Jul 2023 · Tags: Weak cryptography or TLS, CWE-924 - [Samba: out-of-bounds read in winbind auth_crap](https://agentprime.io/advisories/CVE-2022-2127.md) `CVE-2022-2127` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 20 Jul 2023 · Tags: Memory corruption - [Possibility of deadlock in libbpf function sock_hash_delete_elem](https://agentprime.io/advisories/CVE-2023-0160.md) `CVE-2023-0160` · CVE record: kernel and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 18 Jul 2023 · Tags: Denial of service - [Segmentation fault in fax3encode in libtiff/tif_fax3.c](https://agentprime.io/advisories/CVE-2023-3618.md) `CVE-2023-3618` · CVE record: libtiff and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: Memory corruption - [Kernel: netlink socket crash (null pointer deref) in netlink_dump function](https://agentprime.io/advisories/CVE-2023-3106.md) `CVE-2023-3106` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.6 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: Memory corruption - [Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service](https://agentprime.io/advisories/CVE-2023-3354.md) `CVE-2023-3354` · CVE record: qemu and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2023 · Tags: Memory corruption - [Kernel: a race condition in crypto module in the function skcipher_recvmsg](https://agentprime.io/advisories/CVE-2023-3108.md) `CVE-2023-3108` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.2 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: Race condition, Denial of service - [Race condition exists in the key generation and rotation functionality](https://agentprime.io/advisories/CVE-2023-1672.md) `CVE-2023-1672` · CVE record: tang and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: Race condition - [Distros-\[dirtyvma\] privilege escalation via non-rcu-protected vma traversal](https://agentprime.io/advisories/CVE-2023-3269.md) `CVE-2023-3269` · CVE record: kernel and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jul 2023 · Tags: Memory corruption - [Tree connection race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32254.md) `CVE-2023-32254` · CVE record: kernel and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2023 · Tags: Race condition - [Session race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32250.md) `CVE-2023-32250` · CVE record: kernel and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2023 · Tags: Race condition - [Arbitrary file write](https://agentprime.io/advisories/CVE-2023-1183.md) `CVE-2023-1183` · CVE record: libreoffice and 4 more · CVSS 5.0 Medium · EPSS 0.65 · Not analysed yet · Published 10 Jul 2023 · Tags: CWE-20 - [Crash due to a null pointer dereference in the dn_nsp_send function](https://agentprime.io/advisories/CVE-2023-3338.md) `CVE-2023-3338` · CVE record: kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2023 · Tags: Memory corruption - [Libtiff: null pointer dereference in tif_dir.c](https://agentprime.io/advisories/CVE-2023-2908.md) `CVE-2023-2908` · CVE record: Libtiff and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 30 Jun 2023 · Tags: Memory corruption - [Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c](https://agentprime.io/advisories/CVE-2023-3355.md) `CVE-2023-3355` · CVE record: kernel and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 28 Jun 2023 · Tags: Memory corruption - [Kernel: udmabuf: improper validation of array index leading to local privilege escalation](https://agentprime.io/advisories/CVE-2023-2008.md) `CVE-2023-2008` · CVE record: Linux kernel and 4 more · CVSS 8.2 High · Not analysed yet · Published 14 Apr 2023 · Tags: CWE-129 - [Kernel: use after free bug in btsdio_remove due to race condition](https://agentprime.io/advisories/CVE-2023-1989.md) `CVE-2023-1989` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Apr 2023 · Tags: Memory corruption - [Kernel: security regression for cve-2018-13405](https://agentprime.io/advisories/CVE-2021-4037.md) `CVE-2021-4037` · CVE record: Linux kernel and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 24 Aug 2022 · Tags: Broken access control - [Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c](https://agentprime.io/advisories/CVE-2020-27792.md) `CVE-2020-27792` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 7.1 High · Not analysed yet · Published 19 Aug 2022 · Tags: Memory corruption - [Httpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.c](https://agentprime.io/advisories/CVE-2010-3872.md) `CVE-2010-3872` · CVE record: mod_fcgid and 4 more · CVSS 7.5 High · Not analysed yet · Published 20 Nov 2010 · Tags: Memory corruption - [Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass](https://agentprime.io/advisories/CVE-2006-4339.md) `CVE-2006-4339` · CVE record: Red Hat Red Hat Enterprise Linux 3 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2006 · Tags: Weak cryptography or TLS Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .