Vulnerabilities of Red Hat Red Hat Enterprise Linux 6

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-104034	Sssd: sssd: denial of service via use-after-free in kcm ticket renewal	4.7 Medium	Oct 6, 2026
CVE-2026-104033	Sssd: sssd: access control bypass via improper ldap shadow expiration check	5.4 Medium	Oct 6, 2026
CVE-2026-104032	Sssd: sssd: denial of service via unprivileged autofs cache invalidation	5.5 Medium	Oct 6, 2026
CVE-2026-104031	Sssd: sssd: denial of service via memory exhaustion in autofs responder	5.5 Medium	Oct 6, 2026
CVE-2026-104029	A flaw was found in SSSD	3.3 Low	Oct 5, 2026
CVE-2026-104030	Sssd: sssd: denial of service via out-of-bounds read during passkey parsing	5.5 Medium	Oct 5, 2026
CVE-2026-104988	Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject	8.1 High	Oct 2, 2026
CVE-2026-95512	Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader	5.5 Medium	Oct 2, 2026
CVE-2026-86345	389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result	9.0 Critical	Oct 1, 2026
CVE-2026-86344	389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue	7.5 High	Oct 1, 2026
CVE-2026-103641	Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr uncompressed scanline decoder	5.5 Medium	Oct 1, 2026
CVE-2026-103399	Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body	5.3 Medium	Sep 30, 2026
CVE-2026-103242	Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag	7.1 High	Sep 30, 2026
CVE-2026-102560	Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth	8.6 High	Sep 29, 2026
CVE-2026-102559	Libsoup: libsoup: heap buffer overflow during websocket client-frame masking	8.6 High	Sep 29, 2026
CVE-2026-102558	Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth	8.6 High	Sep 29, 2026
CVE-2026-102555	Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding	8.2 High	Sep 29, 2026
CVE-2026-102557	Libsoup: libsoup: heap buffer overflow during websocket message reassembly	8.6 High	Sep 29, 2026
CVE-2026-102556	Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion	8.6 High	Sep 29, 2026
CVE-2026-95520	Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages	7.1 High	Sep 29, 2026
CVE-2026-102474	Dash: dash: heap out-of-bounds write in conv_escape via undersized unicode escape reservation	4.0 Medium	Sep 29, 2026
CVE-2026-102473	Dash: dash: super-polynomial backtracking in pmatch when libc fnmatch is disabled	5.5 Medium	Sep 29, 2026
CVE-2026-102010	Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if	7.0 High	Sep 28, 2026
CVE-2026-93834	Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape	8.8 High	Sep 25, 2026
CVE-2026-95521	Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm	7.8 High	Sep 24, 2026

Other Red Hat products