Red Hat Enterprise Linux 9.

Grub2: grub-core/gettext: integer overflow leads to heap oob write.

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Grub2: command/gpg: use-after-free due to hooks not being removed on module unload

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Grub2: fs/hfs+: refcount can be decremented twice

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• CWE-911

Grub2: fs/ufs: oob write in the heap

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Grub2: grub-core/gettext: integer overflow leads to heap oob write and read.

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Grub2: commands/extcmd: missing check for failed allocation

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• CWE-252

Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-390

Grub2: reader/jpeg: heap oob write during jpeg parsing

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• Command injection

Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Denial of service

Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Denial of service

Rsync: heap buffer overflow in rsync due to improper checksum length handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Freeipa: administrative user data leaked through systemd journal

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Information disclosure

Rsync: path traversal vulnerability in rsync

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Path traversal

Rsync: race condition in rsync handling symbolic links

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Race condition

Rsync: --safe-links option bypass leads to path traversal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Path traversal

Rsync: rsync server leaks arbitrary client files

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• CWE-390

Rsync: info leak via uninitialized stack contents

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Ruby: openssl: ruby marvin attack

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-385

Openjpeg: heap buffer overflow in lib/openjp2/j2k.c

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Openjpeg: heap buffer overflow in bin/common/color.c

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library

• Fast Datapath for Red Hat Enterprise Linux 8
• Fast Datapath for Red Hat Enterprise Linux 9
• Memory corruption

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

• Fast Datapath for Red Hat Enterprise Linux 7
• Fast Datapath for Red Hat Enterprise Linux 8
• CWE-20

Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root

• Fast Datapath for Red Hat Enterprise Linux 8
• Fast Datapath for Red Hat Enterprise Linux 9
• Privilege escalation

Avahi: avahi wide-area dns predictable transaction ids

• avahi
• Red Hat Enterprise Linux 9
• CWE-334

Avahi: avahi wide-area dns uses constant source port

• avahi
• Red Hat Enterprise Linux 10
• Weak cryptography or TLS

Kernel: ksmbd: read request memory leak denial-of-service vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption
• Denial of service

Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Samba: check attribute access rights for ldap adds of computers

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Privilege escalation

Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-1230

Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Weak cryptography or TLS

Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Weak cryptography or TLS

Pam: improper hostname interpretation in pam_access leads to access control bypass

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Authentication bypass

Mpg123: buffer overflow when writing decoded pcm samples

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Pam: libpam: libpam vulnerable to read hashed password

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Information disclosure

Networkmanager-libreswan: local privilege escalation via leftupdown

• Red Hat Enterprise Linux 7.7 Advanced Update Support
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Code injection

Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Path traversal

Qemu-kvm: information leak in virtio devices

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Information disclosure

Qemu-kvm: usb: assertion failure in usb_ep_get()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Pcp: pmpost symlink attack allows escalating pcp to root user

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Path traversal

Pcp: pmcd heap corruption through metric pmstore operations

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.2 Advanced Update Support
• Memory corruption

Libopensc: heap buffer overflow in openpgp driver when generating key

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Directory Server 11
• CWE-20

Libopensc: incorrect handling of the length of buffers or files in pkcs15init

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: incorrect handling length of buffers or files in libopensc

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• CWE-488

Libvirt: crash of virtinterfaced via virconnectlistinterfaces()

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Libtiff: null pointer dereference in tif_dirinfo.c

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Memory corruption

Unbound: heap-buffer-overflow in unbound

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption