Known vulnerabilities in Red Hat Enterprise Linux 6

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-33984	FreeRDP is a free implementation of the Remote Desktop Protocol	7.5 High	Mar 30, 2026
CVE-2026-33983	FreeRDP is a free implementation of the Remote Desktop Protocol	6.5 Medium	Mar 30, 2026
CVE-2026-34714	Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default…	9.2 Critical	Mar 30, 2026
CVE-2026-5121	Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing	7.5 High	Mar 30, 2026
CVE-2026-5119	Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment	5.9 Medium	Mar 30, 2026
CVE-2026-27858	Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large…	7.5 High	Mar 27, 2026
CVE-2026-27857	Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage	4.3 Medium	Mar 27, 2026
CVE-2026-27856	Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack	7.4 High	Mar 27, 2026
CVE-2026-24031	Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin	7.7 High	Mar 27, 2026
CVE-2025-59032	ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response	7.5 High	Mar 27, 2026
CVE-2026-0965	Libssh: libssh: denial of service via improper configuration file handling	3.3 Low	Mar 26, 2026
CVE-2026-0967	Libssh: libssh: denial of service via inefficient regular expression processing	2.2 Low	Mar 26, 2026
CVE-2026-0968	Libssh: libssh: denial of service due to malformed sftp message	3.1 Low	Mar 26, 2026
CVE-2026-0964	Libssh: improper sanitation of paths received from scp servers	5.0 Medium	Mar 26, 2026
CVE-2026-0966	Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()	6.5 Medium	Mar 26, 2026
CVE-2026-2100	P11-kit: null dereference via c_derivekey with specific null parameters	5.3 Medium	Mar 26, 2026
CVE-2026-2272	Gimp: gimp: memory corruption due to integer overflow in ico file handling	4.3 Medium	Mar 26, 2026
CVE-2026-2271	Gimp: gimp: denial of service via crafted psp image file	3.3 Low	Mar 26, 2026
CVE-2026-2436	Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake	6.5 Medium	Mar 26, 2026
CVE-2026-4897	Polkit: polkit: denial of service via unbounded input processing through standard input	5.5 Medium	Mar 26, 2026
CVE-2026-4887	Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image	6.1 Medium	Mar 26, 2026
CVE-2026-33526	Squid is a caching proxy for the Web	9.2 Critical	Mar 26, 2026
CVE-2026-32748	Squid is a caching proxy for the Web	8.7 High	Mar 26, 2026
CVE-2026-3104	A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain	7.5 High	Mar 25, 2026
CVE-2026-20664	The issue was addressed with improved memory handling	4.3 Medium	Mar 25, 2026

Other Red Hat products