Red Hat Red Hat Enterprise Linux 8

• CVE-2025-4404 Critical 9.1 Freeipa: idm: privilege escalation from host to domain admin in freeipa 2.0%
• CVE-2025-6020 High 7.8 Linux-pam: linux-pam directory traversal 0.5%
• CVE-2025-49794 Critical 9.1 Libxml: heap use after free (uaf) leads to denial of service (dos) 0.8%
• CVE-2025-6170 Low 2.5 Libxml2: stack buffer overflow in xmllint interactive shell command handling 0.3%
• CVE-2025-49795 High 7.5 Libxml: null pointer dereference leads to denial of service (dos) 0.6%
• CVE-2025-49796 Critical 9.1 Libxml: type confusion leads to denial of service (dos) 1.6%
• CVE-2025-6052 Low 3.7 Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring 0.5%
• CVE-2025-6035 Medium 6.1 Gimp: gimp integer overflow 0.6%
• CVE-2025-6021 High 7.5 Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 1.4%
• CVE-2025-5914 High 7.8 Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c 0.5%
• CVE-2025-5918 Low 3.9 Libarchive: reading past eof may be triggered for piped file streams 0.4%
• CVE-2025-5917 Low 2.8 Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c 0.2%
• CVE-2025-5916 Low 3.9 Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c 0.2%
• CVE-2025-5915 Medium 6.6 Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c 0.2%
• CVE-2025-47711 Medium 6.5 Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service 0.5%
• CVE-2025-47712 Medium 6.5 Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service 0.5%
• CVE-2025-0620 Medium 4.9 Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session 0.8%
• CVE-2025-4598 Medium 4.7 Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump 1.3%
• CVE-2025-5278 Medium 4.4 Coreutils: heap buffer under-read in gnu coreutils sort via key specification 0.3%
• CVE-2025-5222 High 7.0 Icu: stack buffer overflow in the srbroot::addtag function 0.4%
• CVE-2025-48798 High 7.3 Gimp: multiple use after free in xcf parser 0.2%
• CVE-2025-48797 High 7.3 Gimp: multiple heap buffer overflows in tga parser 0.3%
• CVE-2025-48796 High 7.3 Gimp: stack-based buffer overflows in file-ico 0.2%
• CVE-2025-5024 High 7.4 Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus 0.8%
• CVE-2025-4969 Medium 6.5 Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c 0.9%
• CVE-2025-4945 Low 3.7 Libsoup: integer overflow in cookie expiration date handling in libsoup 0.7%
• CVE-2025-4948 High 7.5 Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup 1.1%
• CVE-2025-4476 Medium 4.3 Libsoup: null pointer dereference in libsoup may lead to denial of service 0.4%
• CVE-2025-4478 Medium 6.5 Gnome-remote-desktop: freerdp: unauthenticated rdp packet causes segfault in freerdp leading to denial of service 0.5%
• CVE-2025-3931 High 7.8 Yggdrasil: local privilege escalation in yggdrasil 0.2%
• CVE-2025-4574 Medium 6.5 Crossbeam-channel: crossbeam-channel vulnerable to double free on drop 0.6%
• CVE-2025-4432 Medium 5.3 Ring: some aes functions may panic when overflow checking is enabled in ring 1.0%
• CVE-2025-4382 Medium 5.9 Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm 0.4%
• CVE-2025-31177 Medium 5.5 Gnuplot: gnuplot heap-buffer overflow on utf8_copy_one 0.2%
• CVE-2025-4373 Medium 4.8 Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar 0.6%
• CVE-2025-4035 Medium 4.3 Libsoup: cookie domain validation bypass via uppercase characters in libsoup 0.4%
• CVE-2025-3891 High 7.5 Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled 1.6%
• CVE-2025-46421 Medium 6.8 Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server 0.6%
• CVE-2025-46420 Medium 6.5 Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c 0.6%
• CVE-2025-46400 Medium 5.5 Xfig: fig2dev segmentation fault in read_arcobject 0.2%
• CVE-2025-46399 Medium 5.5 Xfig: transfig: fig2dev segmentation fault vulnerability 0.2%
• CVE-2025-46398 Medium 5.5 Xfig: fig2dev stack-overflow via read_objects 0.3%
• CVE-2025-46397 High 7.8 Xfig: xfig: stack-overflow allows possible code execution via local input manipulation 0.3%
• CVE-2025-32911 Critical 9.0 Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value 1.0%
• CVE-2025-3576 Medium 5.9 Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions 0.4%
• CVE-2025-32914 High 7.4 Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process 0.8%
• CVE-2025-32912 Medium 6.5 Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication 0.5%
• CVE-2025-32910 Medium 6.5 Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with digest authentication 0.5%
• CVE-2025-32909 Medium 5.3 Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c 0.5%
• CVE-2025-32908 High 7.5 Libsoup: denial of service on libsoup through http/2 server 0.6%