Rhel E4s (Redhat) - vulnerabilities (CVEs)

556 CVEs, 1 in the last 30 days, 48 known versions, newest CVE from 2026-10-21. Vendor: Redhat.

CVEs of Rhel E4s

CVE-2026-114406 - CVSS 6.8 (medium), 2026-10-21: The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of…
CVE-2026-96280 - CVSS 7.5 (high), 2026-09-27: The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems), causing…
CVE-2026-96275 - CVSS 8.8 (high), 2026-09-23: A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extract_extra_data(). On…
CVE-2026-96512 - CVSS 7.8 (high), 2026-09-23: A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone…
CVE-2026-92925 - CVSS 7.1 (high), 2026-09-17: A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate…
CVE-2026-86320 - CVSS 7.8 (high), 2026-09-17: A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a…
CVE-2026-88924 - CVSS 7 (high), 2026-09-10: A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus sockets by calling the…
CVE-2026-18147 - CVSS 8.1 (high), 2026-09-09: A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI…
CVE-2026-87766 - CVSS 8.8 (high), 2026-09-09: A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot,…
CVE-2026-74860 - CVSS 8.5 (high), 2026-09-08: A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document…
CVE-2026-76561 - CVSS 7.2 (high), 2026-09-08: A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate…
CVE-2026-18922 - CVSS 9.8 (critical), 2026-09-07: A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL auxiliary property from a prior failed…
CVE-2026-18453 - CVSS 7.5 (high), 2026-09-07: A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote…
CVE-2026-18355 - CVSS 7.5 (high), 2026-09-07: A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), the wrapped-record length read…
CVE-2026-76560 - CVSS 7.5 (high), 2026-09-07: A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty…
CVE-2026-79678 - CVSS 8.1 (high), 2026-09-07: A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the…
CVE-2026-76578 - CVSS 9.8 (critical), 2026-09-07: A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the…
CVE-2026-81665 - CVSS 7.5 (high), 2026-09-04: A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly. When processing fragmented multicast messages, the…
CVE-2026-84268 - CVSS 8.8 (high), 2026-09-01: A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply() to process a length…
CVE-2026-83596 - CVSS 8.8 (high), 2026-08-31: A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.
CVE-2026-17615 - CVSS 7.5 (high), 2026-08-31: A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By…
CVE-2026-78002 - CVSS 7.5 (high), 2026-08-27: A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending…
CVE-2026-78376 - CVSS 8.8 (high), 2026-08-24: A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory…
CVE-2026-11861 - CVSS 9.6 (critical), 2026-08-20: A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication…
CVE-2026-73198 - CVSS 7.5 (high), 2026-08-20: A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpoint by sending an arbitrarily…
CVE-2026-13097 - CVSS 8.7 (high), 2026-08-20: A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does…
CVE-2026-73197 - CVSS 7.5 (high), 2026-08-20: A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the…
CVE-2026-18917 - CVSS 7.8 (high), 2026-08-20: A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows…
CVE-2026-19654 - CVSS 7.5 (high), 2026-08-12: A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery…
CVE-2026-73433 - CVSS 6.6 (medium), 2026-08-12: A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a…
CVE-2026-73434 - CVSS 6.1 (medium), 2026-08-12: A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries…
CVE-2026-19550 - CVSS 8.2 (high), 2026-08-11: A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration…
CVE-2026-72694 - CVSS 7.1 (high), 2026-08-11: A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a…
CVE-2026-63622 - CVSS 7.8 (high), 2026-08-10: A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in…
CVE-2026-59090 - CVSS 9.9 (critical), 2026-08-10: A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a…
CVE-2026-19389 - CVSS 7.1 (high), 2026-08-10: Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from…
CVE-2026-19387 - CVSS 7.6 (high), 2026-08-10: A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient…
CVE-2026-15816 - CVSS 7.5 (high), 2026-08-07: A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without…
CVE-2026-18649 - CVSS 7.5 (high), 2026-08-06: A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on…
CVE-2026-42169 - CVSS 7.8 (high), 2026-08-04: A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width,…
CVE-2026-11770 - CVSS 7.5 (high), 2026-07-31: A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check…
CVE-2026-15722 - CVSS 7.5 (high), 2026-07-31: A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters…
CVE-2026-16529 - CVSS 7.5 (high), 2026-07-30: A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This…
CVE-2026-16527 - CVSS 7.3 (high), 2026-07-30: An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to…
CVE-2026-16526 - CVSS 8.8 (high), 2026-07-30: A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate…
CVE-2026-16524 - CVSS 7.8 (high), 2026-07-30: A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation…
CVE-2026-16313 - CVSS 7.6 (high), 2026-07-28: A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control…
CVE-2026-66758 - CVSS 7.8 (high), 2026-07-27: A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit…
CVE-2026-16445 - CVSS 7.5 (high), 2026-07-21: A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a…
CVE-2026-15588 - CVSS 5.3 (medium), 2026-07-20: A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to…
CVE-2026-16118 - CVSS 7.1 (high), 2026-07-17: A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian…
CVE-2026-5674 - CVSS 8.8 (high), 2026-07-16: A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting…
CVE-2026-15711 - CVSS 7.5 (high), 2026-07-14: A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 §5.5, which…
CVE-2026-15709 - CVSS 7.5 (high), 2026-07-14: A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) processes…
CVE-2026-59692 - CVSS 7.5 (high), 2026-07-09: A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is…
CVE-2026-59691 - CVSS 7.1 (high), 2026-07-09: A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp…
CVE-2026-11610 - CVSS 8.8 (high), 2026-07-07: A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). After a successful SASL bind with integrity protection (SSF…
CVE-2026-14476 - CVSS 8 (high), 2026-07-07: A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPath…
CVE-2026-14474 - CVSS 8.8 (high), 2026-07-07: A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire LDAP directory…
CVE-2026-58384 - CVSS 7.8 (high), 2026-07-07: A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after…
CVE-2026-58380 - CVSS 7.8 (high), 2026-07-06: A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one…
CVE-2026-58379 - CVSS 7.3 (high), 2026-07-03: A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code…
CVE-2026-58016 - CVSS 9.1 (critical), 2026-06-30: A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed…
CVE-2026-58015 - CVSS 7.5 (high), 2026-06-30: A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context…
CVE-2026-58014 - CVSS 8.6 (high), 2026-06-30: A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with…
CVE-2026-58013 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a…
CVE-2026-58012 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change…
CVE-2026-58011 - CVSS 7.5 (high), 2026-06-30: A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid…
CVE-2026-58010 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment…
CVE-2026-14164 - CVSS 7.5 (high), 2026-06-30: A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain…
CVE-2026-12912 - CVSS 7.3 (high), 2026-06-29: A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue…
CVE-2026-13601 - CVSS 7.1 (high), 2026-06-29: A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can…
CVE-2026-53196 - CVSS 6.8 (medium), 2026-06-25: In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_info() reads…
CVE-2026-2050 - CVSS 7.8 (high), 2026-06-24: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
CVE-2026-53059 - CVSS 7.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable…
CVE-2026-53016 - CVSS 7.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an…
CVE-2026-53006 - CVSS 9.8 (critical), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull() is…
CVE-2026-52923 - CVSS 7.8 (high), 2026-06-24: In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can…
CVE-2026-54513 - CVSS 8.1 (high), 2026-06-23: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and…
CVE-2026-55655 - CVSS 6.1 (medium), 2026-06-23: A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by…
CVE-2026-55653 - CVSS 6.5 (medium), 2026-06-23: A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This…
CVE-2026-56208 - CVSS 7.6 (high), 2026-06-19: A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode…
CVE-2026-10649 - CVSS 8.6 (high), 2026-06-16: A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process.…
CVE-2026-12329 - CVSS 7.5 (high), 2026-06-16: Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.12 and Thunderbird 140.12.
CVE-2026-12328 - CVSS 8.1 (high), 2026-06-16: Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed…
CVE-2026-12299 - CVSS 7.5 (high), 2026-06-16: JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152,…
CVE-2026-12298 - CVSS 7.5 (high), 2026-06-16: Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
CVE-2026-12290 - CVSS 8.1 (high), 2026-06-16: Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and…
CVE-2026-12294 - CVSS 9.6 (critical), 2026-06-16: Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and…
CVE-2026-12297 - CVSS 9.6 (critical), 2026-06-16: Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR…
CVE-2026-12289 - CVSS 8.8 (high), 2026-06-16: Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird…
CVE-2026-12292 - CVSS 8.1 (high), 2026-06-16: Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird…
CVE-2026-12296 - CVSS 9.6 (critical), 2026-06-16: Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and…
CVE-2026-12291 - CVSS 8.8 (high), 2026-06-16: Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and…
CVE-2026-12295 - CVSS 9.6 (critical), 2026-06-16: Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and…
CVE-2026-46331 - CVSS 7.8 (high), 2026-06-16: In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes…
CVE-2026-42014 - CVSS 6.6 (medium), 2026-06-16: A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free…
CVE-2026-53705 - CVSS 7.6 (high), 2026-06-15: A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer…
CVE-2026-52720 - CVSS 8.8 (high), 2026-06-15: A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client). The rectangle bounds check incorrectly validates area rather than…
CVE-2026-52719 - CVSS 7.1 (high), 2026-06-15: An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the…