Red Hat Red Hat Enterprise Linux 9

• CVE-2025-4432 Medium 5.3 Ring: some aes functions may panic when overflow checking is enabled in ring 1.0%
• CVE-2025-4382 Medium 5.9 Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm 0.4%
• CVE-2025-4373 Medium 4.8 Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar 0.6%
• CVE-2025-4035 Medium 4.3 Libsoup: cookie domain validation bypass via uppercase characters in libsoup 0.4%
• CVE-2025-3891 High 7.5 Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled 1.6%
• CVE-2025-46421 Medium 6.8 Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server 0.6%
• CVE-2025-46420 Medium 6.5 Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c 0.6%
• CVE-2025-46400 Medium 5.5 Xfig: fig2dev segmentation fault in read_arcobject 0.2%
• CVE-2025-46399 Medium 5.5 Xfig: transfig: fig2dev segmentation fault vulnerability 0.2%
• CVE-2025-46398 Medium 5.5 Xfig: fig2dev stack-overflow via read_objects 0.3%
• CVE-2025-46397 High 7.8 Xfig: xfig: stack-overflow allows possible code execution via local input manipulation 0.3%
• CVE-2024-10306 Medium 5.4 Mod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requests 0.4%
• CVE-2025-32911 Critical 9.0 Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value 1.0%
• CVE-2025-3576 Medium 5.9 Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions 0.4%
• CVE-2025-32914 High 7.4 Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process 0.8%
• CVE-2025-32912 Medium 6.5 Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication 0.5%
• CVE-2025-32910 Medium 6.5 Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with digest authentication 0.5%
• CVE-2025-32909 Medium 5.3 Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c 0.5%
• CVE-2025-32908 High 7.5 Libsoup: denial of service on libsoup through http/2 server 0.6%
• CVE-2025-32907 Medium 5.3 Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header 0.7%
• CVE-2025-32906 High 7.5 Libsoup: out of bounds reads in soup_headers_parse_request() 1.3%
• CVE-2025-32913 High 7.5 Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header 0.8%
• CVE-2025-3416 Low 3.7 Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch` 0.5%
• CVE-2025-3360 Low 3.7 Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601(). 0.7%
• CVE-2025-32053 Medium 6.5 Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() 0.7%
• CVE-2025-32052 Medium 6.5 Libsoup: heap buffer overflow in sniff_unknown() 0.7%
• CVE-2025-32051 Medium 5.9 Libsoup: segmentation fault when parsing malformed data uri 0.6%
• CVE-2025-32050 Medium 5.9 Libsoup: integer overflow in append_param_quoted 0.8%
• CVE-2025-32049 High 7.5 Libsoup: denial of service attack to websocket server 1.1%
• CVE-2025-3155 High 7.4 Yelp: arbitrary file read 13.1%
• CVE-2025-2784 High 7.0 Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content 0.9%
• CVE-2025-2487 Medium 4.9 389-ds-base: null pointer dereference leads to denial of service 0.6%
• CVE-2025-1057 Medium 4.3 Keylime: keylime registrar dos due to incompatible database entry handling 0.4%
• CVE-2024-8176 High 7.5 Libexpat: expat: improper restriction of xml entity expansion depth in libexpat 1.4%
• CVE-2025-0686 Medium 6.4 Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat 0.3%
• CVE-2025-0685 Medium 6.4 Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data 0.3%
• CVE-2025-0684 Medium 6.4 Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data 0.3%
• CVE-2025-0678 High 7.8 Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data 0.3%
• CVE-2024-45782 High 7.8 Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382) 0.2%
• CVE-2024-45778 Medium 4.1 Grub2: fs/bfs: integer overflow in the bfs parser. 0.3%
• CVE-2024-45779 Medium 6.0 Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser 0.3%
• CVE-2024-45780 Medium 6.7 Grub2: fs/tar: integer overflow causes heap oob write 0.3%
• CVE-2025-0689 High 7.8 Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution 0.5%
• CVE-2025-1125 High 7.8 Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write 0.5%
• CVE-2025-26466 Medium 5.9 Openssh: denial-of-service in openssh 38.7%
• CVE-2025-26601 High 7.8 Xorg: xwayland: use-after-free in syncinittrigger() 0.4%
• CVE-2025-26600 High 7.8 Xorg: xwayland: use-after-free in playreleasedevents() 0.4%
• CVE-2025-26599 High 7.8 Xorg: xwayland: use of uninitialized pointer in compredirectwindow() 0.4%
• CVE-2025-26598 High 7.8 Xorg: xwayland: out-of-bounds write in createpointerbarrierclient() 0.4%
• CVE-2025-26597 High 7.8 Xorg: xwayland: buffer overflow in xkbchangetypesofkey() 0.4%