Advisories · Technology
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
Every CVE that names Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Gnutls: gnutls: authentication bypass via nul character in username
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-170
- CWE-626
- CVSS 6.1 Medium
Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 6.1 Medium
Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.5 High
Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-130
- CVSS 7.5 High
Gnutls: gnutls: denial of service via dtls zero-length fragment
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 6.5 Medium
Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-178
- CVSS 7.8 High
Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.8 High
Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 6.7 Medium
Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Race condition
- CVSS 7.5 High
Corosync: corosync: denial of service via integer overflow in join message validation
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 8.2 High
Corosync: corosync: denial of service and information disclosure via crafted udp packet
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-253
- CVSS 7.5 High
Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.5 High
Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 5.9 Medium
Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Weak cryptography or TLS
- CVSS 6.1 Medium
Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- CWE-193
- CVSS 7.8 High
Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.5 High
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.5 High
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Denial of service
- CVSS 7.2 High
389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow
- Red Hat Directory Server 11.5 E4S for RHEL 8
- Red Hat Directory Server 11.7 E4S for RHEL 8
- Memory corruption
- CVSS 5.3 Medium
Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Denial of service
- CVSS 8.6 High
Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 6.5 Medium
Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 8.6 High
Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 8.2 High
Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- HTTP request smuggling
- CVSS 6.5 Medium
Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
- GNOME glib
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.6 Medium
Glib: glib: buffer underflow in gvariant parser leads to heap corruption
- GNOME glib
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 8.8 High
Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash
- WebKitGTK
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.4 High
Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop
- webkitgtk
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- CWE-346
- CVSS 7.7 High
Glib: integer overflow in in g_escape_uri_string()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.5 High
Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos
- webkitgtk
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.8 High
Grub2: missing unregister call for gettext command may lead to use-after-free
- GNU grub2
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.9 Medium
Python-kdcproxy: remote dos via unbounded tcp upstream buffering
- latchset kdcproxy
- Red Hat Enterprise Linux 10
- Denial of service
- CVSS 8.6 High
Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv
- latchset kdcproxy
- Red Hat Enterprise Linux 10
- Server-side request forgery (SSRF)
- CVSS 7.3 High
Xorg: xmayland: use-after-free in xpresentnotify structure creation
- X.Org Xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 7.3 High
Xorg: xwayland: use-after-free in xkb client resource removal
- X.Org Xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 7.3 High
Xorg: xmayland: value overflow in xkbsetcompatmap()
- X.Org Xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 8.8 High
Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Privilege escalation
- CVSS 7.5 High
Qemu-kvm: vnc websocket handshake use-after-free
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Freeipa: idm: privilege escalation from host to domain admin in freeipa
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- CWE-1220
- CVSS 7.5 High
Libsoup: out-of-bounds read in cookie date handling of libsoup http library
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 5.5 Medium
Libxslt: use-after-free with key data stored cross-rvt
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 8.8 High
Libtiff: libtiff write-what-where
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- CWE-123
- CVSS 8.5 High
Udisks: out-of-bounds read in udisks daemon
- storaged-project udisks
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 7.8 High
Linux-pam: incomplete fix for cve-2025-6020
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- Path traversal
- CVSS 6.5 Medium
Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 7.8 High
Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr
- GNOME libxml2
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 6.5 Medium
Gnutls: vulnerability in gnutls certtool template parsing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 5.3 Medium
Gnutls: vulnerability in gnutls sct extension parsing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Weak cryptography or TLS
- CVSS 6.5 Medium
Gnutls: vulnerability in gnutls othername san export
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 7.5 High
Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 8.1 High
Libssh: invalid return code for chacha20 poly1305 with openssl backend
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-393
- CVSS 5.4 Medium
Libssh: out-of-bounds read in sftp_handle()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 7.0 High
Libblockdev: lpe from allow_active to root in libblockdev via udisks
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Privilege escalation
- CVSS 7.8 High
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension
- X.Org xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 7.3 High
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension
- X.Org xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.5 Medium
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore
- X.Org xwayland
- Red Hat Enterprise Linux 10
- CWE-667
- CVSS 7.3 High
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension
- X.Org xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 6.1 Medium
Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors
- X.Org xwayland
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Freeipa: idm: privilege escalation from host to domain admin in freeipa
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- CWE-1220