Red Hat Enterprise Linux 9.

Unbound: null pointer dereference in unbound

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-662

Libnbd: nbd server improper certificate validation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Weak cryptography or TLS

Gtk3: gtk2: library injection from cwd

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Code injection

Openjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c

• Red Hat AI Inference Server 3.2
• Red Hat Enterprise Linux 6
• Denial of service

Openjpeg: malicious files can cause the program to enter a large loop

• Red Hat AI Inference Server 3.2
• Red Hat Enterprise Linux 6
• Denial of service

Networkmanager: denial of service

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Denial of service

389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request

• Red Hat Directory Server 12.4 for RHEL 9
• Red Hat Enterprise Linux 9
• CWE-230

Openjpeg: denail of service via crafted image file

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Denial of service

Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• CWE-364

Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Denial of service

Qemu-kvm: 'qemu-img info' leads to host file read/write

• Red Hat Advanced Virtualization for RHEL 8.2.1
• Red Hat Advanced Virtualization for RHEL 8.4.0.EUS
• Memory corruption

Openssh: regresshion - race condition in ssh allows rce/dos

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
• CWE-364

Poppler: pdfinfo: crash in broken documents when using -dests parameter

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-20

389-ds-base: malformed userpassword hash may cause denial of service

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 for RHEL 8
• CWE-1288

Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Path traversal

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Weak cryptography or TLS

Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.8 Extended Update Support
• Broken access control

Ca: token authentication bypass vulnerability

• Red Hat Certificate System 10.4 EUS for RHEL-8
• Red Hat Enterprise Linux 7
• CWE-305

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• CWE-345

Libndp: buffer overflow in route information length field

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Memory corruption

389-ds-base: potential denial of service via specially crafted kerberos as-req request

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 for RHEL 8
• CWE-20

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.8 for RHEL 8
• CWE-20

Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• CWE-672

Libvirt: stack use-after-free in virnetclientioeventloop()

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-562

Rpm-ostree: world-readable /etc/shadow file

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Broken access control

Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• CWE-208

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Race condition

Freeipa: specially crafted http requests potentially lead to denial of service

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-20

Qemu-kvm: net: assertion failure in update_sctp_checksum()

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Denial of service

Qemu: virtio: dma reentrancy issue leads to double free vulnerability

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 6
• Memory corruption

Xorg-x11-server: use-after-free in procrenderaddglyphs

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-126

Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• CWE-126

Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• CWE-126

Rust-openssl: timing based side-channel can lead to a bleichenbacher style attack

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-208

Xz: malicious code in distributed source

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-506

Pcp: exposure of the redis server backend allows remote command execution via pmproxy

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Information disclosure

Cockpit: command injection when deleting a sosreport with a crafted name

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Command injection

Libvirt: negative g_new0 length can lead to unbounded memory allocation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Denial of service

Gnutls: vulnerable to minerva side-channel information leak

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Weak cryptography or TLS

Gnutls: potential crash during chain building/verification

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• CWE-248

Osbuild-composer: race condition may disable gpg verification for package repositories

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Weak cryptography or TLS

Libvirt: null pointer dereference in udevconnectlistallinterfaces()

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Memory corruption

Iperf3: possible denial of service

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-183

Unixodbc: out of bounds stack write due to pointer-to-integer types conversion

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• CWE-823

Libvirt: off-by-one error in udevlistinterfacesbystatus()

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• CWE-193

Libgcrypt: vulnerable to marvin attack

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• CWE-385

Pcp: unsafe use of directories allows pcp to root privilege escalation

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 6
• Race condition

Xorg-x11-server: heap buffer overflow in disabledevice

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Broken access control

Opensc: memory use after free in authentic driver when updating token info

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Memory corruption

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 for RHEL 8
• Memory corruption

Kernel: stack overflow problem in open vswitch kernel module leading to dos

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.2 Extended Update Support
• Memory corruption

Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu

• kernel
• Red Hat Enterprise Linux 6
• Memory corruption

Kernel: null pointer dereference in __nvmet_req_complete

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption

Kernel: null pointer dereference in nvmet_tcp_execute_request

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.6 Extended Update Support
• Memory corruption