Advisories · Technology
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
Every CVE that names Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Gnutls: gnutls: authentication bypass via nul character in username
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-170
- CWE-626
- CVSS 7.5 High
Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-130
- CVSS 7.5 High
Gnutls: gnutls: denial of service via dtls zero-length fragment
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 6.5 Medium
Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-178
- CVSS 5.9 Medium
Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Weak cryptography or TLS
- CVSS 6.1 Medium
Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- CWE-193
- CVSS 5.5 Medium
Libxslt: use-after-free with key data stored cross-rvt
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 2.5 Low
Libxml2: stack buffer overflow in xmllint interactive shell command handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption