redhat enterprise linux server vulnerabilities

Latest redhat enterprise linux server CVEs

Newest publication first · page 1 of 40 · showing the latest 1,000

1. CVE-2025-6021 Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

   Published 2025-06-12

   High·CVSS 7.5 EPSS 1.5%

   A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

2. CVE-2025-2784 Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

   Published 2025-04-03

   Medium·CVSS 6.5 EPSS 0.88%

   A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.

3. CVE-2024-12085 Rsync: info leak via uninitialized stack contents

   Published 2025-01-14

   High·CVSS 7.5 EPSS 8.6%

   A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a ti...

4. CVE-2024-1086 Use-after-free in Linux kernel's netfilter: nf_tables component

   Published 2024-01-31

   High·CVSS 7.8 EPSS 28.1% CISA KEV added 2024-05-30 Ransomware Exploited in the wild

   A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can caus...

5. CVE-2024-0409 Xorg-x11-server: selinux context corruption

   Published 2024-01-18

   High·CVSS 7.8 EPSS 0.36%

   A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.

6. CVE-2024-0408 Xorg-x11-server: selinux unlabeled glx pbuffer

   Published 2024-01-18

   Medium·CVSS 5.5 EPSS 0.32%

   A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access t...

7. CVE-2023-6816 Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer

   Published 2024-01-18

   Critical·CVSS 9.8 EPSS 2.1%

   A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number o...

8. CVE-2023-5455 Ipa: invalid csrf protection

   Published 2024-01-10

   Medium·CVSS 6.5 EPSS 0.57%

   A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system int...

9. CVE-2023-5869 Postgresql: buffer overrun from integer overflow in array modification

   Published 2023-12-10

   High·CVSS 8.8 EPSS 4.3%

   A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overfl...

10. CVE-2023-46847 Squid: denial of service in http digest authentication

    Published 2023-11-03

    High·CVSS 7.5 EPSS 78.5%

    Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

11. CVE-2023-3972 Insights-client: unsafe handling of temporary files and directories

    Published 2023-11-01

    High·CVSS 7.8 EPSS 0.27%

    A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and directories that lead to local privilege escalation. Before the insights-client has been registered on the system by root, an unp...

12. CVE-2023-5367 Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty

    Published 2023-10-25

    High·CVSS 7.8 EPSS 0.61%

    A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrprope...

13. CVE-2023-3899 Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration

    Published 2023-08-23

    High·CVSS 7.8 EPSS 0.24%

    A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.re...

14. CVE-2023-0494 A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write i...

    Published 2023-03-27

    High·CVSS 7.8 EPSS 0.90%

    A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where th...

15. CVE-2023-0179 A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Esc...

    Published 2023-03-27

    High·CVSS 7.8 EPSS 1.9%

    A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.

16. CVE-2019-8720 A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple me...

    Published 2023-03-06

    High·CVSS 8.8 EPSS 1.6% CISA KEV added 2022-05-23 Exploited in the wild

    A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

17. CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

    Published 2023-02-01

    High·CVSS 8.8 EPSS 0.98%

    sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

18. CVE-2022-2739 The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fix...

    Published 2022-09-01

    Medium·CVSS 5.3 EPSS 0.52%

    The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker to gain acces...

19. CVE-2022-2738 The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixe...

    Published 2022-09-01

    High·CVSS 7.5 EPSS 0.93%

    The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117. This issue could possibly be used to crash or cause potent...

20. CVE-2022-1227 Podman publishes a malicious image to public registries

    Published 2022-04-29

    High·CVSS 8.8 EPSS 4.2%

    A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the a...

21. CVE-2022-0330 A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system....

    Published 2022-03-25

    High·CVSS 7.8 EPSS 0.38%

    A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system.

22. CVE-2021-3656 A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nes...

    Published 2022-03-04

    High·CVSS 8.8 EPSS 0.66%

    A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue c...

23. CVE-2021-44142 The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions...

    Published 2022-02-21

    High·CVSS 8.8 EPSS 73.6%

    The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bou...

24. CVE-2021-4091 A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly,...

    Published 2022-02-18

    High·CVSS 7.5 EPSS 2.0%

    A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.

25. CVE-2020-25717 A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.

    Published 2022-02-18

    High·CVSS 8.1 EPSS 1.7%

    A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.