Red Hat Red Hat Enterprise Linux 10

• CVE-2024-4467 High 7.8 Qemu-kvm: 'qemu-img info' leads to host file read/write 0.3%
• CVE-2024-6387 High 8.1 Openssh: regresshion - race condition in ssh allows rce/dos 99.5%
• CVE-2024-6239 High 7.5 Poppler: pdfinfo: crash in broken documents when using -dests parameter 0.8%
• CVE-2024-5953 Medium 5.7 389-ds-base: malformed userpassword hash may cause denial of service 0.6%
• CVE-2024-5742 Medium 6.7 Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file 0.3%
• CVE-2024-3183 High 8.1 Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force 2.1%
• CVE-2024-3049 Medium 5.9 Booth: specially crafted hash can lead to invalid hmac being accepted by booth server 0.5%
• CVE-2024-5564 High 8.1 Libndp: buffer overflow in route information length field 1.2%
• CVE-2024-3657 High 7.5 389-ds-base: potential denial of service via specially crafted kerberos as-req request 1.3%
• CVE-2024-2905 Medium 6.2 Rpm-ostree: world-readable /etc/shadow file 0.3%
• CVE-2024-31083 High 7.8 Xorg-x11-server: use-after-free in procrenderaddglyphs 1.9%
• CVE-2024-31082 High 7.3 Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap 0.3%
• CVE-2024-31081 High 7.3 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice 0.5%
• CVE-2024-31080 High 7.3 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents 0.5%
• CVE-2024-3094 Critical 10.0 Xz: malicious code in distributed source 90.9%
• CVE-2024-3019 High 8.8 Pcp: exposure of the redis server backend allows remote command execution via pmproxy 1.1%
• CVE-2024-2947 High 7.3 Cockpit: command injection when deleting a sosreport with a crafted name 1.2%
• CVE-2024-28834 Medium 5.3 Gnutls: vulnerable to minerva side-channel information leak 0.7%
• CVE-2024-28835 Medium 5.0 Gnutls: potential crash during chain building/verification 0.4%
• CVE-2024-2236 Medium 5.9 Libgcrypt: vulnerable to marvin attack 1.1%
• CVE-2024-1488 High 8.0 Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation 0.3%
• CVE-2023-52356 High 7.5 Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service 2.5%
• CVE-2023-52355 High 7.5 Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom 1.8%