Known vulnerabilities in Red Hat Enterprise Linux 7
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-43441 | The issue was addressed with improved memory handling | 4.3 Medium | Nov 4, 2025 |
| CVE-2025-43438 | A use-after-free issue was addressed with improved memory management | 4.3 Medium | Nov 4, 2025 |
| CVE-2025-43433 | The issue was addressed with improved memory handling | 8.8 High | Nov 4, 2025 |
| CVE-2025-12464 | Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode | 6.2 Medium | Oct 31, 2025 |
| CVE-2025-12105 | Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion | 7.5 High | Oct 23, 2025 |
| CVE-2025-11568 | Luksmeta: data corruption when handling luks1 partitions with luksmeta | 4.4 Medium | Oct 15, 2025 |
| CVE-2025-9640 | Samba: vfs_streams_xattr uninitialized memory write possible | 4.3 Medium | Oct 15, 2025 |
| CVE-2025-11731 | Libxslt: type confusion in exsltfuncresultcompfunction of libxslt | 3.1 Low | Oct 14, 2025 |
| CVE-2025-11234 | Qemu-kvm: vnc websocket handshake use-after-free | 7.5 High | Oct 3, 2025 |
| CVE-2025-60019 | Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based() | 3.7 Low | Sep 25, 2025 |
| CVE-2025-60018 | Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()" | 4.8 Medium | Sep 25, 2025 |
| CVE-2025-10911 | Libxslt: use-after-free with key data stored cross-rvt | 5.5 Medium | Sep 25, 2025 |
| CVE-2025-8277 | Libssh: memory exhaustion via repeated key exchange in libssh | 3.1 Low | Sep 9, 2025 |
| CVE-2025-9901 | Libsoup: improper handling of http vary header in libsoup caching | 5.9 Medium | Sep 3, 2025 |
| CVE-2025-7039 | A flaw was found in glib | 3.7 Low | Sep 3, 2025 |
| CVE-2025-4877 | Libssh: write beyond bounds in binary to base64 conversion functions | 4.5 Medium | Aug 20, 2025 |
| CVE-2023-5342 | The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid… | 4.1 Medium | Aug 15, 2025 |
| CVE-2023-32253 | A flaw was found in the Linux kernel's ksmbd component | 5.9 Medium | Aug 2, 2025 |
| CVE-2023-32255 | A flaw was found in the Linux kernel's ksmbd component | 5.3 Medium | Aug 2, 2025 |
| CVE-2023-32256 | Kernel: ksmbd race issue from smb2 close and logoff with multichannel | 7.5 High | Aug 1, 2025 |
| CVE-2023-32251 | A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server) | 3.7 Low | Jul 31, 2025 |
| CVE-2023-2593 | A flaw exists within the Linux kernel's handling of new TCP connections | 5.9 Medium | Jul 30, 2025 |
| CVE-2025-43214 | The issue was addressed with improved memory handling | 6.5 Medium | Jul 29, 2025 |
| CVE-2025-31277 | Exploited Apple Multiple Products Buffer Overflow Vulnerability | 8.8 High | Jul 29, 2025 |
| CVE-2025-43213 | The issue was addressed with improved memory handling | 6.5 Medium | Jul 29, 2025 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430