Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-4056	Glib: glib crash after long command line	7.5 High	Jul 28, 2025
CVE-2025-5449	Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service	6.5 Medium	Jul 25, 2025
CVE-2025-8114	Libssh: null pointer dereference in libssh kex session id calculation	4.7 Medium	Jul 24, 2025
CVE-2025-6018	Pam-config: lpe from unprivileged to allow_active in pam	7.8 High	Jul 23, 2025
CVE-2025-4878	Libssh: use of uninitialized variable in privatekey_from_file()	3.6 Low	Jul 22, 2025
CVE-2025-7519	Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write	6.7 Medium	Jul 14, 2025
CVE-2025-6395	Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()	6.5 Medium	Jul 10, 2025
CVE-2025-7424	Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes	7.5 High	Jul 10, 2025
CVE-2025-32990	Gnutls: vulnerability in gnutls certtool template parsing	6.5 Medium	Jul 10, 2025
CVE-2025-32989	Gnutls: vulnerability in gnutls sct extension parsing	5.3 Medium	Jul 10, 2025
CVE-2025-32988	Gnutls: vulnerability in gnutls othername san export	6.5 Medium	Jul 10, 2025
CVE-2025-5987	Libssh: invalid return code for chacha20 poly1305 with openssl backend	8.1 High	Jul 7, 2025
CVE-2025-5351	Libssh: double free vulnerability in libssh key export functions	6.5 Medium	Jul 4, 2025
CVE-2025-5372	Libssh: incorrect return code handling in ssh_kdf() in libssh	5.0 Medium	Jul 4, 2025
CVE-2025-49177	Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode	6.1 Medium	Jun 17, 2025
CVE-2025-6199	Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder	3.3 Low	Jun 17, 2025
CVE-2025-6196	Libgepub: integer overflow in libgepub's epub archive handling	5.5 Medium	Jun 17, 2025
CVE-2025-6170	Libxml2: stack buffer overflow in xmllint interactive shell command handling	2.5 Low	Jun 16, 2025
CVE-2025-49795	Libxml: null pointer dereference leads to denial of service (dos)	7.5 High	Jun 16, 2025
CVE-2025-6052	A flaw was found in how GLib’s GString manages memory when adding data to strings	3.7 Low	Jun 13, 2025
CVE-2025-6035	Gimp: gimp integer overflow	6.1 Medium	Jun 13, 2025
CVE-2025-5918	Libarchive: reading past eof may be triggered for piped file streams	3.9 Low	Jun 9, 2025
CVE-2025-5917	Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c	2.8 Low	Jun 9, 2025
CVE-2025-5916	Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c	3.9 Low	Jun 9, 2025
CVE-2025-5915	Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c	6.6 Medium	Jun 9, 2025

Other Red Hat products