Red Hat Red Hat Enterprise Linux 6

• CVE-2024-12243 Medium 5.3 Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos 1.3%
• CVE-2024-12133 Medium 5.3 Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos 1.1%
• CVE-2024-12084 Critical 9.8 Rsync: heap buffer overflow in rsync due to improper checksum length handling 72.5%
• CVE-2024-12747 Medium 5.6 Rsync: race condition in rsync handling symbolic links 0.4%
• CVE-2024-12088 Medium 6.5 Rsync: --safe-links option bypass leads to path traversal 4.6%
• CVE-2024-12086 Medium 6.1 Rsync: rsync server leaks arbitrary client files 1.8%
• CVE-2025-0306 High 7.4 Ruby: openssl: ruby marvin attack 0.7%
• CVE-2024-56827 Medium 5.6 Openjpeg: heap buffer overflow in lib/openjp2/j2k.c 0.3%
• CVE-2024-56826 Medium 5.6 Openjpeg: heap buffer overflow in bin/common/color.c 0.3%
• CVE-2024-52337 Medium 5.5 Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method 0.3%
• CVE-2024-52336 High 7.8 Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root 0.3%
• CVE-2023-39180 Medium 4.0 Kernel: ksmbd: read request memory leak denial-of-service vulnerability 1.4%
• CVE-2023-39179 High 7.5 Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability 1.1%
• CVE-2023-39176 Medium 5.8 Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability 0.7%
• CVE-2020-25720 High 7.5 Samba: check attribute access rights for ldap adds of computers 0.5%
• CVE-2024-7730 High 7.4 Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb() 0.3%
• CVE-2024-3447 Medium 6.0 Qemu: sdhci: heap buffer overflow in sdhci_write_dataport() 0.6%
• CVE-2023-4458 Medium 4.0 Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability 0.8%
• CVE-2023-4134 Medium 5.5 Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work() 0.2%
• CVE-2024-9632 High 7.8 Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability 0.9%
• CVE-2024-6519 High 8.2 Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability 0.2%
• CVE-2024-8612 Low 3.8 Qemu-kvm: information leak in virtio devices 0.2%
• CVE-2024-8354 Medium 5.5 Qemu-kvm: usb: assertion failure in usb_ep_get() 0.3%
• CVE-2024-45770 Medium 4.4 Pcp: pmpost symlink attack allows escalating pcp to root user 0.3%
• CVE-2024-45769 Medium 5.5 Pcp: pmcd heap corruption through metric pmstore operations 0.3%
• CVE-2024-8445 Medium 5.7 389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199) 0.4%
• CVE-2024-8235 Medium 6.2 Libvirt: crash of virtinterfaced via virconnectlistinterfaces() 0.2%
• CVE-2024-7006 High 7.5 Libtiff: null pointer dereference in tif_dirinfo.c 1.5%
• CVE-2024-43168 Medium 4.8 Unbound: heap-buffer-overflow in unbound 0.3%
• CVE-2024-43167 Low 2.8 Unbound: null pointer dereference in unbound 0.4%
• CVE-2024-7409 High 7.5 Qemu: denial of service via improper synchronization in qemu nbd server during socket closure 1.0%
• CVE-2024-6655 High 7.0 Gtk3: gtk2: library injection from cwd 0.5%
• CVE-2023-39329 Medium 6.5 Openjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c 0.6%
• CVE-2023-39327 Medium 4.3 Openjpeg: malicious files can cause the program to enter a large loop 0.6%
• CVE-2024-6501 Low 3.1 Networkmanager: denial of service 0.4%
• CVE-2024-6237 Medium 6.5 389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request 0.9%
• CVE-2023-39328 Medium 5.5 Openjpeg: denail of service via crafted image file 0.2%
• CVE-2024-6409 High 7.0 Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9 27.9%
• CVE-2024-6505 Medium 6.8 Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss 0.7%
• CVE-2024-4467 High 7.8 Qemu-kvm: 'qemu-img info' leads to host file read/write 0.3%
• CVE-2024-6387 High 8.1 Openssh: regresshion - race condition in ssh allows rce/dos 99.5%
• CVE-2024-6239 High 7.5 Poppler: pdfinfo: crash in broken documents when using -dests parameter 0.8%
• CVE-2024-5953 Medium 5.7 389-ds-base: malformed userpassword hash may cause denial of service 0.6%
• CVE-2024-5742 Medium 6.7 Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file 0.3%
• CVE-2024-2698 High 8.8 Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service 0.7%
• CVE-2023-4727 High 7.5 Ca: token authentication bypass vulnerability 0.7%
• CVE-2024-3657 High 7.5 389-ds-base: potential denial of service via specially crafted kerberos as-req request 1.3%
• CVE-2024-2199 Medium 5.7 389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c 0.6%
• CVE-2024-4693 Medium 5.5 Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash 0.3%
• CVE-2024-4418 Medium 6.2 Libvirt: stack use-after-free in virnetclientioeventloop() 0.5%