Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-32910	Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with digest authentication	6.5 Medium	Apr 14, 2025
CVE-2025-32909	Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c	5.3 Medium	Apr 14, 2025
CVE-2025-32908	Libsoup: denial of service on libsoup through http/2 server	7.5 High	Apr 14, 2025
CVE-2025-32907	Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header	5.3 Medium	Apr 14, 2025
CVE-2025-3416	Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`	3.7 Low	Apr 8, 2025
CVE-2025-3360	Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().	3.7 Low	Apr 7, 2025
CVE-2025-3359	Gnuplot: segmentation fault via io_str_init_static_internal function	6.2 Medium	Apr 7, 2025
CVE-2025-32053	Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()	6.5 Medium	Apr 3, 2025
CVE-2025-32052	Libsoup: heap buffer overflow in sniff_unknown()	6.5 Medium	Apr 3, 2025
CVE-2025-32051	Libsoup: segmentation fault when parsing malformed data uri	5.9 Medium	Apr 3, 2025
CVE-2025-32050	Libsoup: integer overflow in append_param_quoted	5.9 Medium	Apr 3, 2025
CVE-2025-3155	Yelp: arbitrary file read	7.4 High	Apr 3, 2025
CVE-2025-31181	Gnuplot: gnuplot segmentation fault on x11_graphics	6.2 Medium	Mar 27, 2025
CVE-2025-31180	Gnuplot: gnuplot segmentation fault on canvas_text	6.2 Medium	Mar 27, 2025
CVE-2025-31179	Gnuplot: gnuplot segmentation fault on xstrftime	6.2 Medium	Mar 27, 2025
CVE-2025-31178	Gnuplot: gnuplot segmentation fault on getannotatestring	6.2 Medium	Mar 27, 2025
CVE-2025-31176	Gnuplot: gnuplot segmentation fault on plot3d_points	6.2 Medium	Mar 27, 2025
CVE-2025-2487	389-ds-base: null pointer dereference leads to denial of service	4.9 Medium	Mar 18, 2025
CVE-2024-8176	Libexpat: expat: improper restriction of xml entity expansion depth in libexpat	7.5 High	Mar 14, 2025
CVE-2025-0686	Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat	6.4 Medium	Mar 3, 2025
CVE-2025-0685	Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data	6.4 Medium	Mar 3, 2025
CVE-2025-0684	Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data	6.4 Medium	Mar 3, 2025
CVE-2025-0678	Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data	7.8 High	Mar 3, 2025
CVE-2024-45782	Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)	7.8 High	Mar 3, 2025
CVE-2024-45778	Grub2: fs/bfs: integer overflow in the bfs parser.	4.1 Medium	Mar 3, 2025

Other Red Hat products