Red Hat Enterprise Linux 8.

Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with dige…

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 10
• Memory corruption

Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 10
• Memory corruption

Libsoup: denial of service on libsoup through http/2 server

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-115

Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• CWE-1050

Libsoup: out of bounds reads in soup_headers_parse_request()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Memory corruption

Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gnuplot: segmentation fault via io_str_init_static_internal function

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• CWE-754

Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-126

Libsoup: heap buffer overflow in sniff_unknown()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-126

Libsoup: segmentation fault when parsing malformed data uri

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-754

Libsoup: integer overflow in append_param_quoted

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• CWE-127

Libsoup: denial of service attack to websocket server

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Denial of service

Yelp: arbitrary file read

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Open redirect

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

Gnuplot: gnuplot segmentation fault on x11_graphics

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gnuplot: gnuplot segmentation fault on canvas_text

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gnuplot: gnuplot segmentation fault on xstrftime

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gnuplot: gnuplot segmentation fault on getannotatestring

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gnuplot: gnuplot segmentation fault on plot3d_points

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

389-ds-base: null pointer dereference leads to denial of service

• Red Hat Directory Server 12.4 EUS for RHEL 9
• Red Hat Enterprise Linux 9
• Memory corruption

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Denial of service

Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: fs/bfs: integer overflow in the bfs parser.

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: fs/tar: integer overflow causes heap oob write

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Openssh: denial-of-service in openssh

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Denial of service

Xorg: xwayland: use-after-free in syncinittrigger()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: use-after-free in playreleasedevents()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: heap overflow in xkbwritekeysyms()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

X.org: xwayland: use-after-free of the root cursor

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Grub2: read: integer overflow may lead to out-of-bounds write

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Grub2: net: out-of-bounds write in grub_net_search_config_file()

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Memory corruption

Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-501

Grub2: grub-core/gettext: integer overflow leads to heap oob write.

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Grub2: command/gpg: use-after-free due to hooks not being removed on module unload

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Grub2: fs/hfs+: refcount can be decremented twice

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• CWE-911

Grub2: fs/ufs: oob write in the heap

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Grub2: grub-core/gettext: integer overflow leads to heap oob write and read.

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Grub2: commands/extcmd: missing check for failed allocation

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• CWE-252

Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-390

Grub2: reader/jpeg: heap oob write during jpeg parsing

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Command injection

Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Denial of service

Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Denial of service

Rsync: heap buffer overflow in rsync due to improper checksum length handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption