Red Hat Red Hat Enterprise Linux 10

• CVE-2024-12133 Medium 5.3 Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos 1.1%
• CVE-2024-12084 Critical 9.8 Rsync: heap buffer overflow in rsync due to improper checksum length handling 72.5%
• CVE-2024-11029 Medium 5.5 Freeipa: administrative user data leaked through systemd journal 0.2%
• CVE-2024-12087 Medium 6.5 Rsync: path traversal vulnerability in rsync 2.3%
• CVE-2024-12747 Medium 5.6 Rsync: race condition in rsync handling symbolic links 0.4%
• CVE-2024-12088 Medium 6.5 Rsync: --safe-links option bypass leads to path traversal 4.6%
• CVE-2024-12086 Medium 6.1 Rsync: rsync server leaks arbitrary client files 1.8%
• CVE-2024-12085 High 7.5 Rsync: info leak via uninitialized stack contents 8.6%
• CVE-2025-0306 High 7.4 Ruby: openssl: ruby marvin attack 0.7%
• CVE-2024-56827 Medium 5.6 Openjpeg: heap buffer overflow in lib/openjp2/j2k.c 0.3%
• CVE-2024-56826 Medium 5.6 Openjpeg: heap buffer overflow in bin/common/color.c 0.3%
• CVE-2024-52337 Medium 5.5 Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method 0.3%
• CVE-2024-52336 High 7.8 Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root 0.3%
• CVE-2024-52615 Medium 5.3 Avahi: avahi wide-area dns uses constant source port 0.6%
• CVE-2020-25720 High 7.5 Samba: check attribute access rights for ldap adds of computers 0.5%
• CVE-2024-49395 Medium 5.3 Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block 0.3%
• CVE-2024-49393 Medium 6.5 Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing 0.3%
• CVE-2024-11079 Medium 5.5 Ansible-core: unsafe tagging bypass via hostvars object in ansible-core 0.5%
• CVE-2024-9902 Medium 6.3 Ansible-core: ansible-core user may read/write unauthorized content 0.3%
• CVE-2024-9632 High 7.8 Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability 0.9%
• CVE-2024-10041 Medium 4.7 Pam: libpam: libpam vulnerable to read hashed password 0.3%
• CVE-2024-9050 High 7.8 Networkmanager-libreswan: local privilege escalation via leftupdown 0.5%
• CVE-2024-9979 Medium 5.3 Pyo3: risk of use-after-free in `borrowed` reads from python weak references 0.2%
• CVE-2024-9407 Medium 4.7 Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction 0.3%
• CVE-2024-9355 Medium 6.5 Golang-fips: golang fips zeroed buffer 0.3%
• CVE-2024-8612 Low 3.8 Qemu-kvm: information leak in virtio devices 0.2%
• CVE-2024-8354 Medium 5.5 Qemu-kvm: usb: assertion failure in usb_ep_get() 0.3%
• CVE-2024-45770 Medium 4.4 Pcp: pmpost symlink attack allows escalating pcp to root user 0.3%
• CVE-2024-45769 Medium 5.5 Pcp: pmcd heap corruption through metric pmstore operations 0.3%
• CVE-2024-8775 Medium 5.5 Ansible-core: exposure of sensitive information in ansible vault files due to improper logging 0.3%
• CVE-2024-8443 Low 2.9 Libopensc: heap buffer overflow in openpgp driver when generating key 0.3%
• CVE-2024-8445 Medium 5.7 389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199) 0.4%
• CVE-2024-8418 High 7.5 Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service 0.8%
• CVE-2024-45620 Low 3.9 Libopensc: incorrect handling of the length of buffers or files in pkcs15init 0.3%
• CVE-2024-45619 Medium 4.3 Libopensc: incorrect handling length of buffers or files in libopensc 0.3%
• CVE-2024-45618 Low 3.9 Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init 0.3%
• CVE-2024-45617 Low 3.9 Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc 0.3%
• CVE-2024-45616 Low 3.9 Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc 0.4%
• CVE-2024-45615 Low 3.9 Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init 0.4%
• CVE-2024-5148 High 7.5 Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate 0.6%
• CVE-2024-8235 Medium 6.2 Libvirt: crash of virtinterfaced via virconnectlistinterfaces() 0.2%
• CVE-2024-7006 High 7.5 Libtiff: null pointer dereference in tif_dirinfo.c 1.5%
• CVE-2024-7409 High 7.5 Qemu: denial of service via improper synchronization in qemu nbd server during socket closure 1.0%
• CVE-2024-7383 High 7.4 Libnbd: nbd server improper certificate validation 0.4%
• CVE-2024-3056 High 7.7 Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack 0.5%
• CVE-2024-6655 High 7.0 Gtk3: gtk2: library injection from cwd 0.5%
• CVE-2024-6237 Medium 6.5 389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request 0.9%
• CVE-2024-6409 High 7.0 Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9 27.9%
• CVE-2024-6505 Medium 6.8 Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss 0.7%
• CVE-2024-6126 Low 3.2 Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option 0.3%