# Red Hat Enterprise Linux 9.4 Extended Update Support. Every CVE that names Red Hat Enterprise Linux 9.4 Extended Update Support among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Icu: stack buffer overflow in the srbroot::addtag function](https://agentprime.io/advisories/CVE-2025-5222.md) `CVE-2025-5222` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Gimp: multiple use after free in xcf parser](https://agentprime.io/advisories/CVE-2025-48798.md) `CVE-2025-48798` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.3 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Gimp: multiple heap buffer overflows in tga parser](https://agentprime.io/advisories/CVE-2025-48797.md) `CVE-2025-48797` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.3 High · Not analysed yet · Published 27 May 2025 · Tags: Memory corruption - [Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus](https://agentprime.io/advisories/CVE-2025-5024.md) `CVE-2025-5024` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 22 May 2025 · Tags: Denial of service - [Libsoup: integer overflow in cookie expiration date handling in libsoup](https://agentprime.io/advisories/CVE-2025-4945.md) `CVE-2025-4945` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 19 May 2025 · Tags: Memory corruption - [Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup](https://agentprime.io/advisories/CVE-2025-4948.md) `CVE-2025-4948` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 19 May 2025 · Tags: Memory corruption - [Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar](https://agentprime.io/advisories/CVE-2025-4373.md) `CVE-2025-4373` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 6 May 2025 · Tags: Memory corruption - [Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled](https://agentprime.io/advisories/CVE-2025-3891.md) `CVE-2025-3891` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 29 Apr 2025 · Tags: CWE-248 - [Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server](https://agentprime.io/advisories/CVE-2025-46421.md) `CVE-2025-46421` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 24 Apr 2025 · Tags: Information disclosure - [Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c](https://agentprime.io/advisories/CVE-2025-46420.md) `CVE-2025-46420` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Apr 2025 · Tags: Denial of service - [Xfig: xfig: stack-overflow allows possible code execution via local input manipulation](https://agentprime.io/advisories/CVE-2025-46397.md) `CVE-2025-46397` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Apr 2025 · Tags: Memory corruption - [Mod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requests](https://agentprime.io/advisories/CVE-2024-10306.md) `CVE-2024-10306` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 23 Apr 2025 · Tags: Broken access control - [Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value](https://agentprime.io/advisories/CVE-2025-32911.md) `CVE-2025-32911` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Apr 2025 · Tags: CWE-590 - [Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions](https://agentprime.io/advisories/CVE-2025-3576.md) `CVE-2025-3576` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 15 Apr 2025 · Tags: Weak cryptography or TLS - [Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process](https://agentprime.io/advisories/CVE-2025-32914.md) `CVE-2025-32914` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 14 Apr 2025 · Tags: Memory corruption - [Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header](https://agentprime.io/advisories/CVE-2025-32907.md) `CVE-2025-32907` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 14 Apr 2025 · Tags: CWE-1050 - [Libsoup: out of bounds reads in soup_headers_parse_request()](https://agentprime.io/advisories/CVE-2025-32906.md) `CVE-2025-32906` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2025 · Tags: Memory corruption - [Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header](https://agentprime.io/advisories/CVE-2025-32913.md) `CVE-2025-32913` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2025 · Tags: Memory corruption - [Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()](https://agentprime.io/advisories/CVE-2025-32053.md) `CVE-2025-32053` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Apr 2025 · Tags: CWE-126 - [Libsoup: heap buffer overflow in sniff_unknown()](https://agentprime.io/advisories/CVE-2025-32052.md) `CVE-2025-32052` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Apr 2025 · Tags: CWE-126 - [Libsoup: integer overflow in append_param_quoted](https://agentprime.io/advisories/CVE-2025-32050.md) `CVE-2025-32050` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Apr 2025 · Tags: CWE-127 - [Libsoup: denial of service attack to websocket server](https://agentprime.io/advisories/CVE-2025-32049.md) `CVE-2025-32049` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Apr 2025 · Tags: Denial of service - [Yelp: arbitrary file read](https://agentprime.io/advisories/CVE-2025-3155.md) `CVE-2025-3155` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.4 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 3 Apr 2025 · Tags: Open redirect - [Libsoup: heap buffer over-read in \`skip_insignificant_space\` when sniffing content](https://agentprime.io/advisories/CVE-2025-2784.md) `CVE-2025-2784` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 3 Apr 2025 · Tags: Memory corruption - [389-ds-base: null pointer dereference leads to denial of service](https://agentprime.io/advisories/CVE-2025-2487.md) `CVE-2025-2487` · CVE record: Red Hat Red Hat Directory Server 12.4 EUS for RHEL 9 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Mar 2025 · Tags: Memory corruption - [Libexpat: expat: improper restriction of xml entity expansion depth in libexpat](https://agentprime.io/advisories/CVE-2024-8176.md) `CVE-2024-8176` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Mar 2025 · Tags: Denial of service - [Xorg: xwayland: use-after-free in syncinittrigger()](https://agentprime.io/advisories/CVE-2025-26601.md) `CVE-2025-26601` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: use-after-free in playreleasedevents()](https://agentprime.io/advisories/CVE-2025-26600.md) `CVE-2025-26600` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: use of uninitialized pointer in compredirectwindow()](https://agentprime.io/advisories/CVE-2025-26599.md) `CVE-2025-26599` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()](https://agentprime.io/advisories/CVE-2025-26598.md) `CVE-2025-26598` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: buffer overflow in xkbchangetypesofkey()](https://agentprime.io/advisories/CVE-2025-26597.md) `CVE-2025-26597` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: heap overflow in xkbwritekeysyms()](https://agentprime.io/advisories/CVE-2025-26596.md) `CVE-2025-26596` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Xorg: xwayland: buffer overflow in xkbvmodmasktext()](https://agentprime.io/advisories/CVE-2025-26595.md) `CVE-2025-26595` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [X.org: xwayland: use-after-free of the root cursor](https://agentprime.io/advisories/CVE-2025-26594.md) `CVE-2025-26594` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2025 · Tags: Memory corruption - [Grub2: net: out-of-bounds write in grub_net_search_config_file()](https://agentprime.io/advisories/CVE-2025-0624.md) `CVE-2025-0624` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 7.6 High · Not analysed yet · Published 19 Feb 2025 · Tags: Memory corruption - [Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled](https://agentprime.io/advisories/CVE-2025-26465.md) `CVE-2025-26465` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: CWE-390 - [Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme](https://agentprime.io/advisories/CVE-2025-1244.md) `CVE-2025-1244` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Feb 2025 · Tags: Command injection - [Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos](https://agentprime.io/advisories/CVE-2024-12243.md) `CVE-2024-12243` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: Denial of service - [Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos](https://agentprime.io/advisories/CVE-2024-12133.md) `CVE-2024-12133` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: Denial of service - [Rsync: path traversal vulnerability in rsync](https://agentprime.io/advisories/CVE-2024-12087.md) `CVE-2024-12087` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal - [Rsync: info leak via uninitialized stack contents](https://agentprime.io/advisories/CVE-2024-12085.md) `CVE-2024-12085` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library](https://agentprime.io/advisories/CVE-2024-11614.md) `CVE-2024-11614` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 8 and 4 more · CVSS 7.4 High · Not analysed yet · Published 18 Dec 2024 · Tags: Memory corruption - [Tuned: improper sanitization of \`instance_name\` parameter of the \`instance_create()\` method](https://agentprime.io/advisories/CVE-2024-52337.md) `CVE-2024-52337` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 7 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 26 Nov 2024 · Tags: CWE-20 - [Pam: improper hostname interpretation in pam_access leads to access control bypass](https://agentprime.io/advisories/CVE-2024-10963.md) `CVE-2024-10963` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.4 High · Not analysed yet · Published 7 Nov 2024 · Tags: Authentication bypass - [Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2024-9632.md) `CVE-2024-9632` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 30 Oct 2024 · Tags: Memory corruption - [Pam: libpam: libpam vulnerable to read hashed password](https://agentprime.io/advisories/CVE-2024-10041.md) `CVE-2024-10041` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: Information disclosure - [Networkmanager-libreswan: local privilege escalation via leftupdown](https://agentprime.io/advisories/CVE-2024-9050.md) `CVE-2024-9050` · CVE record: Red Hat Red Hat Enterprise Linux 7.7 Advanced Update Support and 4 more · CVSS 7.8 High · Not analysed yet · Published 22 Oct 2024 · Tags: Code injection - [Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)](https://agentprime.io/advisories/CVE-2024-9676.md) `CVE-2024-9676` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Oct 2024 · Tags: Path traversal - [Qemu: denial of service via improper synchronization in qemu nbd server during socket closure](https://agentprime.io/advisories/CVE-2024-7409.md) `CVE-2024-7409` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2024 · Tags: CWE-662 - [Libgcrypt: vulnerable to marvin attack](https://agentprime.io/advisories/CVE-2024-2236.md) `CVE-2024-2236` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 6 Mar 2024 · Tags: CWE-385 - [Kernel: information disclosure in vhost/vhost.c:vhost_new_msg()](https://agentprime.io/advisories/CVE-2024-0340.md) `CVE-2024-0340` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: Information disclosure Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .