Vulnerabilities of Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-32913	Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header	7.5 High	Apr 14, 2025
CVE-2025-32049	Libsoup: denial of service attack to websocket server	7.5 High	Apr 3, 2025
CVE-2025-2784	Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content	7.0 High	Apr 3, 2025
CVE-2025-26601	Xorg: xwayland: use-after-free in syncinittrigger()	7.8 High	Feb 25, 2025
CVE-2025-26600	Xorg: xwayland: use-after-free in playreleasedevents()	7.8 High	Feb 25, 2025
CVE-2025-26599	Xorg: xwayland: use of uninitialized pointer in compredirectwindow()	7.8 High	Feb 25, 2025
CVE-2025-26598	Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()	7.8 High	Feb 25, 2025
CVE-2025-26597	Xorg: xwayland: buffer overflow in xkbchangetypesofkey()	7.8 High	Feb 25, 2025
CVE-2025-26596	Xorg: xwayland: heap overflow in xkbwritekeysyms()	7.8 High	Feb 25, 2025
CVE-2025-26595	Xorg: xwayland: buffer overflow in xkbvmodmasktext()	7.8 High	Feb 25, 2025
CVE-2025-26594	X.org: xwayland: use-after-free of the root cursor	7.8 High	Feb 25, 2025
CVE-2025-0624	Grub2: net: out-of-bounds write in grub_net_search_config_file()	7.6 High	Feb 19, 2025
CVE-2025-1244	Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme	8.8 High	Feb 12, 2025
CVE-2024-12087	A path traversal vulnerability exists in rsync	6.5 Medium	Jan 14, 2025
CVE-2024-12085	A flaw was found in rsync which could be triggered when rsync compares file checksums	7.5 High	Jan 14, 2025
CVE-2024-52337	Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method	5.5 Medium	Nov 26, 2024
CVE-2024-9632	Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability	7.8 High	Oct 30, 2024
CVE-2024-9050	Networkmanager-libreswan: local privilege escalation via leftupdown	7.8 High	Oct 22, 2024
CVE-2024-9355	Golang-fips: golang fips zeroed buffer	6.5 Medium	Oct 1, 2024
CVE-2024-8445	389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)	5.7 Medium	Sep 5, 2024
CVE-2024-5953	A denial of service vulnerability was found in the 389-ds-base LDAP server	5.7 Medium	Jun 18, 2024
CVE-2024-5564	Libndp: buffer overflow in route information length field	8.1 High	May 31, 2024
CVE-2023-46846	SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform…	9.3 Critical	Nov 3, 2023

Other Red Hat products