# Red Hat Enterprise Linux 9. Every CVE that names Red Hat Enterprise Linux 9 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c](https://agentprime.io/advisories/CVE-2023-6679.md) `CVE-2023-6679` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Dec 2023 · Tags: Memory corruption - [Postgresql: role pg_signal_backend can signal certain superuser processes.](https://agentprime.io/advisories/CVE-2023-5870.md) `CVE-2023-5870` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 2.2 Low · Not analysed yet · Published 10 Dec 2023 · Tags: Denial of service - [Postgresql: memory disclosure in aggregate function calls](https://agentprime.io/advisories/CVE-2023-5868.md) `CVE-2023-5868` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 10 Dec 2023 · Tags: CWE-686 - [Postgresql: buffer overrun from integer overflow in array modification](https://agentprime.io/advisories/CVE-2023-5869.md) `CVE-2023-5869` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Dec 2023 · Tags: Memory corruption - [Kernel: io_uring out of boundary memory access in \_\_io_uaddr_map()](https://agentprime.io/advisories/CVE-2023-6560.md) `CVE-2023-6560` · CVE record: kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Dec 2023 · Tags: CWE-823 - [Kernel: null pointer dereference vulnerability in nft_dynset_init()](https://agentprime.io/advisories/CVE-2023-6622.md) `CVE-2023-6622` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Dec 2023 · Tags: Memory corruption - [Kernel: oob access in smb2_dump_detail](https://agentprime.io/advisories/CVE-2023-6610.md) `CVE-2023-6610` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.1 High · Not analysed yet · Published 8 Dec 2023 · Tags: Memory corruption - [Kernel: out-of-bounds read vulnerability in smbcalcsize](https://agentprime.io/advisories/CVE-2023-6606.md) `CVE-2023-6606` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.1 High · Not analysed yet · Published 8 Dec 2023 · Tags: Memory corruption - [Gnutls: timing side-channel in the rsa-psk authentication](https://agentprime.io/advisories/CVE-2023-5981.md) `CVE-2023-5981` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 28 Nov 2023 · Tags: CWE-208 - [Libnbd: malicious nbd server may crash libnbd](https://agentprime.io/advisories/CVE-2023-5871.md) `CVE-2023-5871` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 27 Nov 2023 · Tags: Denial of service - [Libtiff: out-of-memory in tiffopen via a craft file](https://agentprime.io/advisories/CVE-2023-6277.md) `CVE-2023-6277` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Nov 2023 · Tags: Denial of service - [Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c](https://agentprime.io/advisories/CVE-2023-5972.md) `CVE-2023-5972` · CVE record: kernel and 4 more · CVSS 7.0 High · Not analysed yet · Published 23 Nov 2023 · Tags: Memory corruption - [Kernel: nvme: memory corruption via unprivileged user passthrough](https://agentprime.io/advisories/CVE-2023-6238.md) `CVE-2023-6238` · CVE record: kernel and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 21 Nov 2023 · Tags: Memory corruption - [Kernel: local dos vulnerability in scatterwalk_copychunks](https://agentprime.io/advisories/CVE-2023-6176.md) `CVE-2023-6176` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 4.7 Medium · Not analysed yet · Published 16 Nov 2023 - [Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get](https://agentprime.io/advisories/CVE-2023-6121.md) `CVE-2023-6121` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 16 Nov 2023 · Tags: Memory corruption - [Kernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()](https://agentprime.io/advisories/CVE-2023-39198.md) `CVE-2023-39198` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 7.5 High · Not analysed yet · Published 9 Nov 2023 · Tags: Memory corruption - [Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect](https://agentprime.io/advisories/CVE-2023-6039.md) `CVE-2023-6039` · CVE record: Kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Nov 2023 · Tags: Memory corruption - [Samba: ad dc password exposure to privileged users and rodcs](https://agentprime.io/advisories/CVE-2023-4154.md) `CVE-2023-4154` · CVE record: samba and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Nov 2023 · Tags: Memory corruption - [Opensc: multiple memory issues with pkcs15-init (enrollment tool)](https://agentprime.io/advisories/CVE-2023-40661.md) `CVE-2023-40661` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 2 more · CVSS 5.4 Medium · Not analysed yet · Published 6 Nov 2023 · Tags: Memory corruption - [Opensc: potential pin bypass when card tracks its own login state](https://agentprime.io/advisories/CVE-2023-40660.md) `CVE-2023-40660` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 2 more · CVSS 6.6 Medium · Not analysed yet · Published 6 Nov 2023 · Tags: Authentication bypass - [Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys](https://agentprime.io/advisories/CVE-2023-4535.md) `CVE-2023-4535` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 2 more · CVSS 4.5 Medium · Not analysed yet · Published 6 Nov 2023 · Tags: Memory corruption - [Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs](https://agentprime.io/advisories/CVE-2023-5090.md) `CVE-2023-5090` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 6 Nov 2023 · Tags: CWE-755 - [Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc](https://agentprime.io/advisories/CVE-2023-42669.md) `CVE-2023-42669` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 6 Nov 2023 · Tags: Denial of service - [Qemu: improper ide controller reset can lead to mbr overwrite](https://agentprime.io/advisories/CVE-2023-5088.md) `CVE-2023-5088` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 3 Nov 2023 · Tags: CWE-821 - [Samba: smbd allows client access to unix domain sockets on the file system as root](https://agentprime.io/advisories/CVE-2023-3961.md) `CVE-2023-3961` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2023 · Tags: Path traversal - [Squid: denial of service in http digest authentication](https://agentprime.io/advisories/CVE-2023-46847.md) `CVE-2023-46847` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support and 4 more · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.79 · Not analysed yet · Published 3 Nov 2023 · Tags: Memory corruption - [Squid: denial of service in ftp](https://agentprime.io/advisories/CVE-2023-46848.md) `CVE-2023-46848` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 3 Nov 2023 · Tags: CWE-681 - [Samba: ad dc busy rpc multiple listener dos](https://agentprime.io/advisories/CVE-2023-42670.md) `CVE-2023-42670` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2023 · Tags: Denial of service - [Squid: dos against http and https](https://agentprime.io/advisories/CVE-2023-5824.md) `CVE-2023-5824` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Nov 2023 · Tags: CWE-755 - [Samba: smb clients can truncate files with read-only permissions](https://agentprime.io/advisories/CVE-2023-4091.md) `CVE-2023-4091` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2023 · Tags: Broken access control - [Use-after-free in parse_lease_state()](https://agentprime.io/advisories/CVE-2023-1194.md) `CVE-2023-1194` · CVE record: kernel and 4 more · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2023 · Tags: Memory corruption - [Squid: request/response smuggling in http/1.1 and icap](https://agentprime.io/advisories/CVE-2023-46846.md) `CVE-2023-46846` · CVE record: Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2023 · Tags: HTTP request smuggling - [Potential buffer overflow in php_cli_server_startup_workers](https://agentprime.io/advisories/CVE-2022-4900.md) `CVE-2022-4900` · CVE record: php and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Memory corruption - [Reachable assertion in avahi_alternative_host_name](https://agentprime.io/advisories/CVE-2023-38473.md) `CVE-2023-38473` · CVE record: avahi avahi and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Denial of service - [Reachable assertion in avahi_rdata_parse](https://agentprime.io/advisories/CVE-2023-38472.md) `CVE-2023-38472` · CVE record: avahi avahi and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Denial of service - [Reachable assertion in dbus_set_host_name](https://agentprime.io/advisories/CVE-2023-38471.md) `CVE-2023-38471` · CVE record: avahi avahi and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Denial of service - [Reachable assertion in avahi_escape_label](https://agentprime.io/advisories/CVE-2023-38470.md) `CVE-2023-38470` · CVE record: avahi avahi and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Denial of service - [Reachable assertion in avahi_dns_packet_append_record](https://agentprime.io/advisories/CVE-2023-38469.md) `CVE-2023-38469` · CVE record: avahi avahi and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Denial of service - [Heap-buffer-overflow in extractimagesection()](https://agentprime.io/advisories/CVE-2023-3164.md) `CVE-2023-3164` · CVE record: libtiff and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Memory corruption - [Use-after-free in setup_async_work()](https://agentprime.io/advisories/CVE-2023-1193.md) `CVE-2023-1193` · CVE record: Kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption - [Kernel: slab-use-after-free write in txend due to race condition](https://agentprime.io/advisories/CVE-2023-3397.md) `CVE-2023-3397` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.0 High · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption - [Use-after-free in smb2_is_status_io_timeout()](https://agentprime.io/advisories/CVE-2023-1192.md) `CVE-2023-1192` · CVE record: kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption - [Kernel: use after free in nvmet_tcp_free_crypto in nvme](https://agentprime.io/advisories/CVE-2023-5178.md) `CVE-2023-5178` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption - [Insights-client: unsafe handling of temporary files and directories](https://agentprime.io/advisories/CVE-2023-3972.md) `CVE-2023-3972` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 7.8 High · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-379 - [Xorg-x11-server: use-after-free bug in damagedestroy](https://agentprime.io/advisories/CVE-2023-5574.md) `CVE-2023-5574` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 7.0 High · Not analysed yet · Published 25 Oct 2023 · Tags: Memory corruption - [Xorg-x11-server: use-after-free bug in destroywindow](https://agentprime.io/advisories/CVE-2023-5380.md) `CVE-2023-5380` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 3 more · CVSS 4.7 Medium · Not analysed yet · Published 25 Oct 2023 · Tags: Memory corruption - [Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty](https://agentprime.io/advisories/CVE-2023-5367.md) `CVE-2023-5367` · CVE record: Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Oct 2023 · Tags: Memory corruption - [Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution](https://agentprime.io/advisories/CVE-2023-4692.md) `CVE-2023-4692` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 2 more · CVSS 7.5 High · Not analysed yet · Published 25 Oct 2023 · Tags: Memory corruption - [Grub2: out-of-bounds read at fs/ntfs.c](https://agentprime.io/advisories/CVE-2023-4693.md) `CVE-2023-4693` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 25 Oct 2023 · Tags: Memory corruption - [Samba: heap buffer overflow with freshness tokens in the heimdal kdc](https://agentprime.io/advisories/CVE-2023-5568.md) `CVE-2023-5568` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 24 Oct 2023 · Tags: Memory corruption - [Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling](https://agentprime.io/advisories/CVE-2023-5633.md) `CVE-2023-5633` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2023 · Tags: CWE-911 - [Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access](https://agentprime.io/advisories/CVE-2023-42752.md) `CVE-2023-42752` · CVE record: Kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2023 · Tags: Memory corruption - [Tracker-miners: sandbox escape](https://agentprime.io/advisories/CVE-2023-5557.md) `CVE-2023-5557` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2023 · Tags: CWE-693 - [Libxpm: out of bounds read on xpm with corrupted colormap](https://agentprime.io/advisories/CVE-2023-43789.md) `CVE-2023-43789` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: Memory corruption - [Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer()](https://agentprime.io/advisories/CVE-2023-43788.md) `CVE-2023-43788` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Oct 2023 · Tags: Memory corruption - [Libx11: integer overflow in xcreateimage() leading to a heap overflow](https://agentprime.io/advisories/CVE-2023-43787.md) `CVE-2023-43787` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 7.8 High · Not analysed yet · Published 10 Oct 2023 · Tags: Memory corruption - [Libx11: stack exhaustion from infinite recursion in putsubimage()](https://agentprime.io/advisories/CVE-2023-43786.md) `CVE-2023-43786` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Oct 2023 · Tags: Denial of service - [Libx11: out-of-bounds memory access in \_xkbreadkeysyms()](https://agentprime.io/advisories/CVE-2023-43785.md) `CVE-2023-43785` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Oct 2023 · Tags: Memory corruption - [Kernel: xfrm: out-of-bounds read in \_\_xfrm_state_filter_match()](https://agentprime.io/advisories/CVE-2023-39194.md) `CVE-2023-39194` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 3.2 Low · Not analysed yet · Published 9 Oct 2023 · Tags: Memory corruption - [Kernel: netfilter: xtables sctp out-of-bounds read in match_flags()](https://agentprime.io/advisories/CVE-2023-39193.md) `CVE-2023-39193` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 6.1 Medium · Not analysed yet · Published 9 Oct 2023 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .