Advisories · Technology
Red Hat Enterprise Linux 8.
Every CVE that names Red Hat Enterprise Linux 8 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Memory corruption
- CVSS 6.5 Medium
File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 6.1 Medium
Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader
- GNOME GIMP
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 7.0 High
Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit
- GNOME GIMP
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 7.1 High
Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Broken access control
- CVSS 7.0 High
Rpm: rpmbuild gettarspec() crafted tar member name → macro injection
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- Code injection
- CVSS 8.8 High
Webkitgtk: use-after-free of jscvalue function parameters
- WebKit
- WebKitGTK
- Memory corruption
- CVSS 6.5 Medium
Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates
- Red Hat Certificate System 10
- Red Hat Certificate System 11
- Weak cryptography or TLS
- CVSS 6.5 Medium
Ipa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 9.6 CriticalCritical · CVSS 9+
Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Privilege escalation
- CVSS 7.5 High
Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Denial of service
- CVSS 8.7 High
Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-706
- CVSS 4.3 Medium
Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Denial of service
- CVSS 7.5 High
Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Denial of service
- CVSS 7.8 High
Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 5.3 Medium
Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-197
- CVSS 7.8 High
Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution
- vim
- Red Hat Hardened Images
- Code injection
- CVSS 7.5 High
Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Denial of service
- CVSS 6.1 Medium
Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 6.3 Medium
Bluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folder
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 5.3 Medium
Io.undertow/undertow: undertow: http response header integrity issue due to character truncation
- Red Hat build of Apache Camel for Spring Boot 4
- Red Hat Enterprise Linux 10
- CWE-681
- CVSS 6.5 Medium
Samba: ctdb fails to do integrity checking of received packets
- Red Hat Ceph Storage 9.2
- Red Hat Enterprise Linux 10
- CWE-353
- CVSS 5.5 Medium
Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- Denial of service
- CVSS 6.3 Medium
Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-377
- CVSS 6.6 Medium
Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 6.3 Medium
Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-377
- CVSS 7.5 High
Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 6.6 Medium
Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write
- GStreamer gst-plugins-good
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 6.1 Medium
Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing
- GStreamer gst-plugins-good
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.5 Medium
Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.9 Medium
389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking control
- Red Hat Directory Server 11
- Red Hat Directory Server 12
- Memory corruption
- CVSS 8.2 High
Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Broken access control
- CVSS 5.3 Medium
Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap
- Red Hat JBoss Enterprise Application Platform 8.1.8.GA
- Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10
- HTTP request smuggling
- CVSS 8.8 High
Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Code injection
- CVSS 5.3 Medium
Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Denial of service
- CVSS 7.5 High
Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- CWE-20
- CVSS 7.8 High
Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Broken access control
- CVSS 7.1 High
Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Path traversal
- CVSS 4.4 Medium
Qemu-kvm: vhost inflight migration vmstate integer type mismatch causes out-of-bounds access
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-681
- CVSS 3.9 Low
Shim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns null
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 7.8 High
Libvirt: swtpm privilege escalation via symlink following
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Path traversal
- CVSS 7.3 High
Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 5.5 Medium
Libvirt: information disclosure via world-readable storage volume images during clone/convert
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Broken access control
- CVSS 8.4 High
Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
- Memory corruption
- CVSS 5.5 Medium
Gimp: gimp: denial of service via signed integer overflow in fli file processing
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 7.8 High
Gimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocation
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 6.5 Medium
389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenance
- Red Hat Directory Server 11
- Red Hat Directory Server 12
- Broken access control
- CVSS 7.1 High
Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.6 High
Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.8 High
Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c)
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 2.3 Low
Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Other injection
- CVSS 7.5 High
Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 6.2 Medium
P11-kit: integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 4.4 Medium
Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- Race condition
- CVSS 7.8 High
Udisks2: udisks2: local privilege escalation via as-user option spoofing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Broken access control
- CVSS 7.5 High
Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Denial of service
- CVSS 2.2 Low
Popt-devel: popt-static: size_t underflow in singleoptionhelp
- rpm-software-management popt
- Red Hat Hardened Images
- Memory corruption
- CVSS 5.5 Medium
Rpm: heap buffer overflow in ndb slot table parsing
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.1 Medium
Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return
- Stephan Muelle libkcapi
- Red Hat Enterprise Linux 10
- Denial of service
- CVSS 7.3 High
Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path
- Stephan Muelle libkcapi
- Red Hat Enterprise Linux 10
- Memory corruption