Red Hat Red Hat Enterprise Linux 7

• CVE-2025-60019 Low 3.7 Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based() 0.4%
• CVE-2025-60018 Medium 4.8 Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()" 0.3%
• CVE-2025-10911 Medium 5.5 Libxslt: use-after-free with key data stored cross-rvt 0.2%
• CVE-2025-8277 Low 3.1 Libssh: memory exhaustion via repeated key exchange in libssh 0.4%
• CVE-2025-9901 Medium 5.9 Libsoup: improper handling of http vary header in libsoup caching 0.5%
• CVE-2025-7039 Low 3.7 Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file() 0.4%
• CVE-2025-4877 Medium 4.5 Libssh: write beyond bounds in binary to base64 conversion functions 0.2%
• CVE-2023-5342 Medium 4.1 Shim: expired secure boot certificate <0.1%
• CVE-2023-32253 Medium 5.9 Kernel: deadlock in ksmbd_find_crypto_ctx() 0.3%
• CVE-2023-32255 Medium 5.3 Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message type 0.6%
• CVE-2023-32256 High 7.5 Kernel: ksmbd race issue from smb2 close and logoff with multichannel 0.6%
• CVE-2023-32251 Low 3.7 Kernel: ksmbd brute force delay bypass via asynchronous requests 0.5%
• CVE-2023-2593 Medium 5.9 Kernel: ksmbd memory exhaustion denial-of-service vulnerability 0.8%
• CVE-2025-4056 High 7.5 Glib: glib crash after long command line 0.5%
• CVE-2025-5449 Medium 6.5 Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service 1.0%
• CVE-2025-8114 Medium 4.7 Libssh: null pointer dereference in libssh kex session id calculation 0.3%
• CVE-2025-6018 High 7.8 Pam-config: lpe from unprivileged to allow_active in pam 1.1%
• CVE-2025-4878 Low 3.6 Libssh: use of uninitialized variable in privatekey_from_file() 0.2%
• CVE-2025-7519 Medium 6.7 Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write 0.2%
• CVE-2025-6395 Medium 6.5 Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite() 0.8%
• CVE-2025-7424 High 7.5 Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes 1.3%
• CVE-2025-32990 Medium 6.5 Gnutls: vulnerability in gnutls certtool template parsing 0.9%
• CVE-2025-32989 Medium 5.3 Gnutls: vulnerability in gnutls sct extension parsing 1.5%
• CVE-2025-32988 Medium 6.5 Gnutls: vulnerability in gnutls othername san export 1.5%
• CVE-2025-5987 High 8.1 Libssh: invalid return code for chacha20 poly1305 with openssl backend 1.7%
• CVE-2025-5351 Medium 6.5 Libssh: double free vulnerability in libssh key export functions 0.6%
• CVE-2025-5372 Medium 5.0 Libssh: incorrect return code handling in ssh_kdf() in libssh 0.5%
• CVE-2025-49177 Medium 6.1 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode 0.4%
• CVE-2025-6199 Low 3.3 Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder 0.2%
• CVE-2025-6196 Medium 5.5 Libgepub: integer overflow in libgepub's epub archive handling 0.2%
• CVE-2025-49795 High 7.5 Libxml: null pointer dereference leads to denial of service (dos) 0.6%
• CVE-2025-6052 Low 3.7 Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring 0.5%
• CVE-2025-6035 Medium 6.1 Gimp: gimp integer overflow 0.6%
• CVE-2025-5918 Low 3.9 Libarchive: reading past eof may be triggered for piped file streams 0.4%
• CVE-2025-5917 Low 2.8 Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c 0.2%
• CVE-2025-5916 Low 3.9 Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c 0.2%
• CVE-2025-5915 Medium 6.6 Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c 0.2%
• CVE-2025-47711 Medium 6.5 Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service 0.5%
• CVE-2025-47712 Medium 6.5 Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service 0.5%
• CVE-2025-0620 Medium 4.9 Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session 0.8%
• CVE-2025-4598 Medium 4.7 Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump 1.3%
• CVE-2025-5278 Medium 4.4 Coreutils: heap buffer under-read in gnu coreutils sort via key specification 0.3%
• CVE-2025-5222 High 7.0 Icu: stack buffer overflow in the srbroot::addtag function 0.4%
• CVE-2025-48796 High 7.3 Gimp: stack-based buffer overflows in file-ico 0.2%
• CVE-2025-4969 Medium 6.5 Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c 0.9%
• CVE-2025-4476 Medium 4.3 Libsoup: null pointer dereference in libsoup may lead to denial of service 0.4%
• CVE-2025-4574 Medium 6.5 Crossbeam-channel: crossbeam-channel vulnerable to double free on drop 0.6%
• CVE-2025-4432 Medium 5.3 Ring: some aes functions may panic when overflow checking is enabled in ring 1.0%
• CVE-2025-4382 Medium 5.9 Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm 0.4%
• CVE-2025-31177 Medium 5.5 Gnuplot: gnuplot heap-buffer overflow on utf8_copy_one 0.2%