Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-45779	Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser	6.0 Medium	Mar 3, 2025
CVE-2024-45780	Grub2: fs/tar: integer overflow causes heap oob write	6.7 Medium	Mar 3, 2025
CVE-2025-0689	Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution	7.8 High	Mar 3, 2025
CVE-2025-1125	Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write	7.8 High	Mar 3, 2025
CVE-2025-26466	Openssh: denial-of-service in openssh	5.9 Medium	Feb 28, 2025
CVE-2025-0690	Grub2: read: integer overflow may lead to out-of-bounds write	6.1 Medium	Feb 24, 2025
CVE-2025-0677	Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks	6.4 Medium	Feb 19, 2025
CVE-2025-1118	Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled	4.4 Medium	Feb 19, 2025
CVE-2024-45777	Grub2: grub-core/gettext: integer overflow leads to heap oob write.	6.7 Medium	Feb 19, 2025
CVE-2025-0622	Grub2: command/gpg: use-after-free due to hooks not being removed on module unload	6.4 Medium	Feb 18, 2025
CVE-2024-45783	Grub2: fs/hfs+: refcount can be decremented twice	4.4 Medium	Feb 18, 2025
CVE-2024-45781	Grub2: fs/ufs: oob write in the heap	6.7 Medium	Feb 18, 2025
CVE-2024-45776	Grub2: grub-core/gettext: integer overflow leads to heap oob write and read.	6.7 Medium	Feb 18, 2025
CVE-2024-45775	Grub2: commands/extcmd: missing check for failed allocation	5.2 Medium	Feb 18, 2025
CVE-2025-26465	Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled	6.8 Medium	Feb 18, 2025
CVE-2024-45774	Grub2: reader/jpeg: heap oob write during jpeg parsing	6.7 Medium	Feb 18, 2025
CVE-2024-12243	Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos	5.3 Medium	Feb 10, 2025
CVE-2024-12133	Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos	5.3 Medium	Feb 10, 2025
CVE-2024-12084	Rsync: heap buffer overflow in rsync due to improper checksum length handling	9.8 Critical	Jan 15, 2025
CVE-2024-11029	Freeipa: administrative user data leaked through systemd journal	5.5 Medium	Jan 15, 2025
CVE-2024-12747	Rsync: race condition in rsync handling symbolic links	5.6 Medium	Jan 14, 2025
CVE-2024-12088	Rsync: --safe-links option bypass leads to path traversal	6.5 Medium	Jan 14, 2025
CVE-2024-12086	Rsync: rsync server leaks arbitrary client files	6.1 Medium	Jan 14, 2025
CVE-2025-0306	Ruby: openssl: ruby marvin attack	7.4 High	Jan 9, 2025
CVE-2024-56827	Openjpeg: heap buffer overflow in lib/openjp2/j2k.c	5.6 Medium	Jan 9, 2025

Other Red Hat products