Vulnerabilities of Red Hat Red Hat Enterprise Linux 10

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-11218	Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile	8.6 High	Jan 22, 2025
CVE-2024-12084	Rsync: heap buffer overflow in rsync due to improper checksum length handling	9.8 Critical	Jan 15, 2025
CVE-2024-11029	Freeipa: administrative user data leaked through systemd journal	5.5 Medium	Jan 15, 2025
CVE-2024-12087	A path traversal vulnerability exists in rsync	6.5 Medium	Jan 14, 2025
CVE-2024-12747	Rsync: race condition in rsync handling symbolic links	5.6 Medium	Jan 14, 2025
CVE-2024-12088	Rsync: --safe-links option bypass leads to path traversal	6.5 Medium	Jan 14, 2025
CVE-2024-12086	Rsync: rsync server leaks arbitrary client files	6.1 Medium	Jan 14, 2025
CVE-2024-12085	A flaw was found in rsync which could be triggered when rsync compares file checksums	7.5 High	Jan 14, 2025
CVE-2025-0306	Ruby: openssl: ruby marvin attack	7.4 High	Jan 9, 2025
CVE-2024-56827	Openjpeg: heap buffer overflow in lib/openjp2/j2k.c	5.6 Medium	Jan 9, 2025
CVE-2024-56826	Openjpeg: heap buffer overflow in bin/common/color.c	5.6 Medium	Jan 9, 2025
CVE-2024-52337	Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method	5.5 Medium	Nov 26, 2024
CVE-2024-52336	Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root	7.8 High	Nov 26, 2024
CVE-2024-52615	Avahi: avahi wide-area dns uses constant source port	5.3 Medium	Nov 21, 2024
CVE-2020-25720	Samba: check attribute access rights for ldap adds of computers	7.5 High	Nov 17, 2024
CVE-2024-49395	In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field…	5.3 Medium	Nov 12, 2024
CVE-2024-49393	Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing	6.5 Medium	Nov 12, 2024
CVE-2024-11079	Ansible-core: unsafe tagging bypass via hostvars object in ansible-core	5.5 Medium	Nov 11, 2024
CVE-2024-10963	Pam: improper hostname interpretation in pam_access leads to access control bypass	7.4 High	Nov 7, 2024
CVE-2024-9902	Ansible-core: ansible-core user may read/write unauthorized content	6.3 Medium	Nov 6, 2024
CVE-2024-9632	Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability	7.8 High	Oct 30, 2024
CVE-2024-10041	Pam: libpam: libpam vulnerable to read hashed password	4.7 Medium	Oct 23, 2024
CVE-2024-9050	Networkmanager-libreswan: local privilege escalation via leftupdown	7.8 High	Oct 22, 2024
CVE-2024-9676	Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)	6.5 Medium	Oct 15, 2024
CVE-2024-9979	Pyo3: risk of use-after-free in `borrowed` reads from python weak references	5.3 Medium	Oct 15, 2024

Other Red Hat products