Known vulnerabilities in Red Hat Enterprise Linux 6
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-1244 | Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme | 8.8 High | Feb 12, 2025 |
| CVE-2024-12243 | Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos | 5.3 Medium | Feb 10, 2025 |
| CVE-2024-12133 | Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos | 5.3 Medium | Feb 10, 2025 |
| CVE-2024-12084 | Rsync: heap buffer overflow in rsync due to improper checksum length handling | 9.8 Critical | Jan 15, 2025 |
| CVE-2024-12747 | Rsync: race condition in rsync handling symbolic links | 5.6 Medium | Jan 14, 2025 |
| CVE-2024-12088 | Rsync: --safe-links option bypass leads to path traversal | 6.5 Medium | Jan 14, 2025 |
| CVE-2024-12086 | Rsync: rsync server leaks arbitrary client files | 6.1 Medium | Jan 14, 2025 |
| CVE-2025-0306 | Ruby: openssl: ruby marvin attack | 7.4 High | Jan 9, 2025 |
| CVE-2024-56827 | Openjpeg: heap buffer overflow in lib/openjp2/j2k.c | 5.6 Medium | Jan 9, 2025 |
| CVE-2024-56826 | Openjpeg: heap buffer overflow in bin/common/color.c | 5.6 Medium | Jan 9, 2025 |
| CVE-2024-52337 | Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method | 5.5 Medium | Nov 26, 2024 |
| CVE-2024-52336 | Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root | 7.8 High | Nov 26, 2024 |
| CVE-2023-39180 | A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module | 4.0 Medium | Nov 18, 2024 |
| CVE-2023-39179 | A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module | 7.5 High | Nov 18, 2024 |
| CVE-2023-39176 | A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module | 5.8 Medium | Nov 18, 2024 |
| CVE-2020-25720 | Samba: check attribute access rights for ldap adds of computers | 7.5 High | Nov 17, 2024 |
| CVE-2024-7730 | A heap buffer overflow was found in the virtio-snd device in QEMU | 7.4 High | Nov 14, 2024 |
| CVE-2024-3447 | A heap-based buffer overflow was found in the SDHCI device emulation of QEMU | 6.0 Medium | Nov 14, 2024 |
| CVE-2023-4458 | A flaw was found within the parsing of extended attributes in the kernel ksmbd module | 4.0 Medium | Nov 14, 2024 |
| CVE-2023-4134 | A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel | 5.5 Medium | Nov 14, 2024 |
| CVE-2024-10963 | Pam: improper hostname interpretation in pam_access leads to access control bypass | 7.4 High | Nov 7, 2024 |
| CVE-2024-9632 | Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability | 7.8 High | Oct 30, 2024 |
| CVE-2024-6519 | A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation | 8.2 High | Oct 21, 2024 |
| CVE-2024-8612 | Qemu-kvm: information leak in virtio devices | 3.8 Low | Sep 20, 2024 |
| CVE-2024-8354 | Qemu-kvm: usb: assertion failure in usb_ep_get() | 5.5 Medium | Sep 19, 2024 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430