# Red Hat Enterprise Linux 9. Every CVE that names Red Hat Enterprise Linux 9 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Grub2: grub-core/gettext: integer overflow leads to heap oob write.](https://agentprime.io/advisories/CVE-2024-45777.md) `CVE-2024-45777` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 19 Feb 2025 · Tags: Memory corruption - [Grub2: command/gpg: use-after-free due to hooks not being removed on module unload](https://agentprime.io/advisories/CVE-2025-0622.md) `CVE-2025-0622` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: Memory corruption - [Grub2: fs/hfs+: refcount can be decremented twice](https://agentprime.io/advisories/CVE-2024-45783.md) `CVE-2024-45783` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: CWE-911 - [Grub2: fs/ufs: oob write in the heap](https://agentprime.io/advisories/CVE-2024-45781.md) `CVE-2024-45781` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: Memory corruption - [Grub2: grub-core/gettext: integer overflow leads to heap oob write and read.](https://agentprime.io/advisories/CVE-2024-45776.md) `CVE-2024-45776` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: Memory corruption - [Grub2: commands/extcmd: missing check for failed allocation](https://agentprime.io/advisories/CVE-2024-45775.md) `CVE-2024-45775` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.2 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: CWE-252 - [Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled](https://agentprime.io/advisories/CVE-2025-26465.md) `CVE-2025-26465` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: CWE-390 - [Grub2: reader/jpeg: heap oob write during jpeg parsing](https://agentprime.io/advisories/CVE-2024-45774.md) `CVE-2024-45774` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: Memory corruption - [Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme](https://agentprime.io/advisories/CVE-2025-1244.md) `CVE-2025-1244` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Feb 2025 · Tags: Command injection - [Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos](https://agentprime.io/advisories/CVE-2024-12243.md) `CVE-2024-12243` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: Denial of service - [Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos](https://agentprime.io/advisories/CVE-2024-12133.md) `CVE-2024-12133` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: Denial of service - [Rsync: heap buffer overflow in rsync due to improper checksum length handling](https://agentprime.io/advisories/CVE-2024-12084.md) `CVE-2024-12084` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.73 · Not analysed yet · Published 15 Jan 2025 · Tags: Memory corruption - [Freeipa: administrative user data leaked through systemd journal](https://agentprime.io/advisories/CVE-2024-11029.md) `CVE-2024-11029` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: Information disclosure - [Rsync: path traversal vulnerability in rsync](https://agentprime.io/advisories/CVE-2024-12087.md) `CVE-2024-12087` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal - [Rsync: race condition in rsync handling symbolic links](https://agentprime.io/advisories/CVE-2024-12747.md) `CVE-2024-12747` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Race condition - [Rsync: --safe-links option bypass leads to path traversal](https://agentprime.io/advisories/CVE-2024-12088.md) `CVE-2024-12088` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal - [Rsync: rsync server leaks arbitrary client files](https://agentprime.io/advisories/CVE-2024-12086.md) `CVE-2024-12086` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-390 - [Rsync: info leak via uninitialized stack contents](https://agentprime.io/advisories/CVE-2024-12085.md) `CVE-2024-12085` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Ruby: openssl: ruby marvin attack](https://agentprime.io/advisories/CVE-2025-0306.md) `CVE-2025-0306` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 9 Jan 2025 · Tags: CWE-385 - [Openjpeg: heap buffer overflow in lib/openjp2/j2k.c](https://agentprime.io/advisories/CVE-2024-56827.md) `CVE-2024-56827` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 9 Jan 2025 · Tags: Memory corruption - [Openjpeg: heap buffer overflow in bin/common/color.c](https://agentprime.io/advisories/CVE-2024-56826.md) `CVE-2024-56826` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 9 Jan 2025 · Tags: Memory corruption - [Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library](https://agentprime.io/advisories/CVE-2024-11614.md) `CVE-2024-11614` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 8 and 4 more · CVSS 7.4 High · Not analysed yet · Published 18 Dec 2024 · Tags: Memory corruption - [Tuned: improper sanitization of \`instance_name\` parameter of the \`instance_create()\` method](https://agentprime.io/advisories/CVE-2024-52337.md) `CVE-2024-52337` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 7 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 26 Nov 2024 · Tags: CWE-20 - [Tuned: \`script_pre\` and \`script_post\` options allow to pass arbitrary scripts executed by root](https://agentprime.io/advisories/CVE-2024-52336.md) `CVE-2024-52336` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 26 Nov 2024 · Tags: Privilege escalation - [Avahi: avahi wide-area dns predictable transaction ids](https://agentprime.io/advisories/CVE-2024-52616.md) `CVE-2024-52616` · CVE record: avahi and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Nov 2024 · Tags: CWE-334 - [Avahi: avahi wide-area dns uses constant source port](https://agentprime.io/advisories/CVE-2024-52615.md) `CVE-2024-52615` · CVE record: avahi avahi and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Nov 2024 · Tags: Weak cryptography or TLS - [Kernel: ksmbd: read request memory leak denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-39180.md) `CVE-2023-39180` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 4.0 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Memory corruption, Denial of service - [Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-39179.md) `CVE-2023-39179` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.5 High · Not analysed yet · Published 18 Nov 2024 · Tags: Memory corruption - [Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-39176.md) `CVE-2023-39176` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.8 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Memory corruption - [Samba: check attribute access rights for ldap adds of computers](https://agentprime.io/advisories/CVE-2020-25720.md) `CVE-2020-25720` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 17 Nov 2024 · Tags: Privilege escalation - [Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()](https://agentprime.io/advisories/CVE-2024-7730.md) `CVE-2024-7730` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 7.4 High · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()](https://agentprime.io/advisories/CVE-2024-3447.md) `CVE-2024-3447` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-4458.md) `CVE-2023-4458` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 4.0 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()](https://agentprime.io/advisories/CVE-2023-4134.md) `CVE-2023-4134` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Nov 2024 · Tags: Memory corruption - [Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block](https://agentprime.io/advisories/CVE-2024-49395.md) `CVE-2024-49395` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-1230 - [Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing](https://agentprime.io/advisories/CVE-2024-49394.md) `CVE-2024-49394` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Weak cryptography or TLS - [Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing](https://agentprime.io/advisories/CVE-2024-49393.md) `CVE-2024-49393` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Weak cryptography or TLS - [Pam: improper hostname interpretation in pam_access leads to access control bypass](https://agentprime.io/advisories/CVE-2024-10963.md) `CVE-2024-10963` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.4 High · Not analysed yet · Published 7 Nov 2024 · Tags: Authentication bypass - [Mpg123: buffer overflow when writing decoded pcm samples](https://agentprime.io/advisories/CVE-2024-10573.md) `CVE-2024-10573` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 2 more · CVSS 6.7 Medium · Not analysed yet · Published 31 Oct 2024 · Tags: Memory corruption - [Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2024-9632.md) `CVE-2024-9632` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 30 Oct 2024 · Tags: Memory corruption - [Pam: libpam: libpam vulnerable to read hashed password](https://agentprime.io/advisories/CVE-2024-10041.md) `CVE-2024-10041` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 23 Oct 2024 · Tags: Information disclosure - [Networkmanager-libreswan: local privilege escalation via leftupdown](https://agentprime.io/advisories/CVE-2024-9050.md) `CVE-2024-9050` · CVE record: Red Hat Red Hat Enterprise Linux 7.7 Advanced Update Support and 4 more · CVSS 7.8 High · Not analysed yet · Published 22 Oct 2024 · Tags: Code injection - [Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2024-6519.md) `CVE-2024-6519` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 8.2 High · Not analysed yet · Published 21 Oct 2024 · Tags: Memory corruption - [Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)](https://agentprime.io/advisories/CVE-2024-9676.md) `CVE-2024-9676` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Oct 2024 · Tags: Path traversal - [Qemu-kvm: information leak in virtio devices](https://agentprime.io/advisories/CVE-2024-8612.md) `CVE-2024-8612` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.8 Low · Not analysed yet · Published 20 Sept 2024 · Tags: Information disclosure - [Qemu-kvm: usb: assertion failure in usb_ep_get()](https://agentprime.io/advisories/CVE-2024-8354.md) `CVE-2024-8354` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Denial of service - [Pcp: pmpost symlink attack allows escalating pcp to root user](https://agentprime.io/advisories/CVE-2024-45770.md) `CVE-2024-45770` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Path traversal - [Pcp: pmcd heap corruption through metric pmstore operations](https://agentprime.io/advisories/CVE-2024-45769.md) `CVE-2024-45769` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 19 Sept 2024 · Tags: Memory corruption - [Libopensc: heap buffer overflow in openpgp driver when generating key](https://agentprime.io/advisories/CVE-2024-8443.md) `CVE-2024-8443` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 2.9 Low · Not analysed yet · Published 10 Sept 2024 · Tags: Memory corruption - [389-ds-base: server crash while modifying \`userpassword\` using malformed input (incomplete fix for cve-2024-2199)](https://agentprime.io/advisories/CVE-2024-8445.md) `CVE-2024-8445` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 5 Sept 2024 · Tags: CWE-20 - [Libopensc: incorrect handling of the length of buffers or files in pkcs15init](https://agentprime.io/advisories/CVE-2024-45620.md) `CVE-2024-45620` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Libopensc: incorrect handling length of buffers or files in libopensc](https://agentprime.io/advisories/CVE-2024-45619.md) `CVE-2024-45619` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init](https://agentprime.io/advisories/CVE-2024-45618.md) `CVE-2024-45618` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc](https://agentprime.io/advisories/CVE-2024-45617.md) `CVE-2024-45617` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc](https://agentprime.io/advisories/CVE-2024-45616.md) `CVE-2024-45616` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init](https://agentprime.io/advisories/CVE-2024-45615.md) `CVE-2024-45615` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption - [Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate](https://agentprime.io/advisories/CVE-2024-5148.md) `CVE-2024-5148` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 2 more · CVSS 7.5 High · Not analysed yet · Published 2 Sept 2024 · Tags: CWE-488 - [Libvirt: crash of virtinterfaced via virconnectlistinterfaces()](https://agentprime.io/advisories/CVE-2024-8235.md) `CVE-2024-8235` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 30 Aug 2024 · Tags: Memory corruption - [Libtiff: null pointer dereference in tif_dirinfo.c](https://agentprime.io/advisories/CVE-2024-7006.md) `CVE-2024-7006` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Aug 2024 · Tags: Memory corruption - [Unbound: heap-buffer-overflow in unbound](https://agentprime.io/advisories/CVE-2024-43168.md) `CVE-2024-43168` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 8 Aug 2024 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .