Red Hat Red Hat Enterprise Linux 8

• CVE-2024-45774 Medium 6.7 Grub2: reader/jpeg: heap oob write during jpeg parsing 0.3%
• CVE-2025-1244 High 8.8 Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme 2.6%
• CVE-2024-12243 Medium 5.3 Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos 1.3%
• CVE-2024-12133 Medium 5.3 Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos 1.1%
• CVE-2024-11831 Medium 5.4 Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript 1.1%
• CVE-2024-11218 High 8.6 Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile 0.4%
• CVE-2024-12084 Critical 9.8 Rsync: heap buffer overflow in rsync due to improper checksum length handling 72.5%
• CVE-2024-11029 Medium 5.5 Freeipa: administrative user data leaked through systemd journal 0.2%
• CVE-2024-12087 Medium 6.5 Rsync: path traversal vulnerability in rsync 2.3%
• CVE-2024-12747 Medium 5.6 Rsync: race condition in rsync handling symbolic links 0.4%
• CVE-2024-12088 Medium 6.5 Rsync: --safe-links option bypass leads to path traversal 4.6%
• CVE-2024-12086 Medium 6.1 Rsync: rsync server leaks arbitrary client files 1.8%
• CVE-2024-12085 High 7.5 Rsync: info leak via uninitialized stack contents 8.6%
• CVE-2025-0306 High 7.4 Ruby: openssl: ruby marvin attack 0.7%
• CVE-2024-56827 Medium 5.6 Openjpeg: heap buffer overflow in lib/openjp2/j2k.c 0.3%
• CVE-2024-56826 Medium 5.6 Openjpeg: heap buffer overflow in bin/common/color.c 0.3%
• CVE-2024-11614 High 7.4 Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library 0.6%
• CVE-2024-8676 High 7.4 Cri-o: checkpoint restore can be triggered from different namespaces 0.8%
• CVE-2024-52337 Medium 5.5 Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method 0.3%
• CVE-2024-52336 High 7.8 Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root 0.3%
• CVE-2024-52616 Medium 5.3 Avahi: avahi wide-area dns predictable transaction ids 0.7%
• CVE-2024-52615 Medium 5.3 Avahi: avahi wide-area dns uses constant source port 0.6%
• CVE-2023-39180 Medium 4.0 Kernel: ksmbd: read request memory leak denial-of-service vulnerability 1.4%
• CVE-2023-39179 High 7.5 Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability 1.1%
• CVE-2023-39176 Medium 5.8 Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability 0.7%
• CVE-2020-25720 High 7.5 Samba: check attribute access rights for ldap adds of computers 0.5%
• CVE-2024-7730 High 7.4 Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb() 0.3%
• CVE-2024-3447 Medium 6.0 Qemu: sdhci: heap buffer overflow in sdhci_write_dataport() 0.6%
• CVE-2023-4458 Medium 4.0 Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability 0.8%
• CVE-2023-4134 Medium 5.5 Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work() 0.2%
• CVE-2024-49395 Medium 5.3 Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block 0.3%
• CVE-2024-49394 Medium 5.3 Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing 0.3%
• CVE-2024-49393 Medium 6.5 Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing 0.3%
• CVE-2024-10963 High 7.4 Pam: improper hostname interpretation in pam_access leads to access control bypass 0.8%
• CVE-2024-10573 Medium 6.7 Mpg123: buffer overflow when writing decoded pcm samples 0.3%
• CVE-2024-9632 High 7.8 Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability 0.9%
• CVE-2024-10041 Medium 4.7 Pam: libpam: libpam vulnerable to read hashed password 0.3%
• CVE-2024-9050 High 7.8 Networkmanager-libreswan: local privilege escalation via leftupdown 0.5%
• CVE-2024-6519 High 8.2 Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability 0.2%
• CVE-2024-9676 Medium 6.5 Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) 1.3%
• CVE-2024-9979 Medium 5.3 Pyo3: risk of use-after-free in `borrowed` reads from python weak references 0.2%
• CVE-2024-9675 High 7.8 Buildah: buildah allows arbitrary directory mount 0.4%
• CVE-2024-9407 Medium 4.7 Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction 0.3%
• CVE-2024-9341 Medium 5.4 Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library 1.0%
• CVE-2024-9355 Medium 6.5 Golang-fips: golang fips zeroed buffer 0.3%
• CVE-2024-8612 Low 3.8 Qemu-kvm: information leak in virtio devices 0.2%
• CVE-2024-8354 Medium 5.5 Qemu-kvm: usb: assertion failure in usb_ep_get() 0.3%
• CVE-2024-45770 Medium 4.4 Pcp: pmpost symlink attack allows escalating pcp to root user 0.3%
• CVE-2024-45769 Medium 5.5 Pcp: pmcd heap corruption through metric pmstore operations 0.3%
• CVE-2024-8775 Medium 5.5 Ansible-core: exposure of sensitive information in ansible vault files due to improper logging 0.3%