Red Hat Enterprise Linux 8.

Processing sftp server read may cause null dereference

• libssh
• Red Hat Enterprise Linux 7
• Memory corruption

Samba: spotlight server-side share path disclosure

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Information disclosure

Samba: type confusion in mdssvc rpc service for spotlight

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Samba: infinite loop in mdssvc rpc service for spotlight

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Denial of service

Samba: smb2 packet signing is not enforced when "server signing = required" is set

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Weak cryptography or TLS
• CWE-924

Samba: out-of-bounds read in winbind auth_crap

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Possibility of deadlock in libbpf function sock_hash_delete_elem

• kernel
• Red Hat Enterprise Linux 6
• Denial of service

Segmentation fault in fax3encode in libtiff/tif_fax3.c

• libtiff
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: netlink socket crash (null pointer deref) in netlink_dump function

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service

• qemu
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: a race condition in crypto module in the function skcipher_recvmsg

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Race condition
• Denial of service

Race condition exists in the key generation and rotation functionality

• tang
• Red Hat Enterprise Linux 7
• Race condition

Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Tree connection race condition remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Session race condition remote code execution vulnerability

• kernel
• Red Hat Enterprise Linux 6
• Race condition

Arbitrary file write

• libreoffice
• Red Hat Enterprise Linux 6
• CWE-20

Crash due to a null pointer dereference in the dn_nsp_send function

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Libtiff: null pointer dereference in tif_dir.c

• Libtiff
• Red Hat Enterprise Linux 6
• Memory corruption

Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: udmabuf: improper validation of array index leading to local privilege escalation

• Linux kernel
• Red Hat Enterprise Linux 9
• CWE-129

Kernel: use after free bug in btsdio_remove due to race condition

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: security regression for cve-2018-13405

• Linux kernel
• Red Hat Enterprise Linux 8
• Broken access control

Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 6
• Memory corruption

Httpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.c

• mod_fcgid
• Red Hat Enterprise Linux 7
• Memory corruption

Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass

• Red Hat Enterprise Linux 3
• Red Hat Enterprise Linux 4
• Weak cryptography or TLS