Red Hat Enterprise Linux 9.

Samba: denial of service against ad dc wins server

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Command injection

Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-208

Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsoup: libsoup: http request smuggling via unsigned to signed conversion error

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• HTTP request smuggling

Glib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chain

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Samba: remote code execution in samr

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Command injection

Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Command injection

Samba: missing access check on reparse point operations

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Broken access control

Samba: vfs_worm does not block directory modification

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-280

Samba: group policy certificate enrollment uses http:// without validation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-345

Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-193

Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Weak cryptography or TLS

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Weak cryptography or TLS

Gnutls: gnutls: information disclosure via heap overread in rsa key exchange

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-126

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Samba: samba: remote code execution in printing subsystem via unescaped job description

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Command injection

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 E4S for RHEL 8
• Denial of service

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-475

Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Command injection

Gnutls: gnutls: security bypass due to incorrect name constraint handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Weak cryptography or TLS

Gnutls: gnutls: authentication bypass via nul character in username

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-170
• CWE-626

Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling

• Red Hat Enterprise Linux 10.0 Extended Update Support
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.

• Red Hat Enterprise Linux 10.0 Extended Update Support
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
• Memory corruption

Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-130

Gnutls: gnutls: denial of service via dtls zero-length fragment

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-179

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-178

Libxml2: libxml2: denial of service via crafted xsd-validated document

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libsoup: libsoup: http request smuggling via duplicate content-length headers

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• HTTP request smuggling

Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Webkitgtk: authorization bypass through webpage::send-request signal handler

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Broken access control

Libopensc: opensc: multiple uses of uninitialized variable

• OpenSC
• Red Hat Enterprise Linux 10
• Memory corruption

Efivar: efivar: denial of service due to stack overflow in device path node parsing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Emacs: emacs: memory corruption vulnerability when processing svg css

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-193

Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Denial of service

Nano: nano: format string vulnerability leads to denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Binutils: binutils: denial of service via crafted elf file

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Broken access control

Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gimp: gimp: denial of service via specially crafted seattle filmworks file

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gimp: gimp: denial of service via crafted pvr image file

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gimp: gimp: application crashes or information disclosure via crafted icns image files

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption

Gimp: gimp: denial of service due to stack buffer overflow in tim image loader

• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Memory corruption