Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-56826	Openjpeg: heap buffer overflow in bin/common/color.c	5.6 Medium	Jan 9, 2025
CVE-2024-52336	Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root	7.8 High	Nov 26, 2024
CVE-2024-52616	Avahi: avahi wide-area dns predictable transaction ids	5.3 Medium	Nov 21, 2024
CVE-2024-52615	Avahi: avahi wide-area dns uses constant source port	5.3 Medium	Nov 21, 2024
CVE-2023-39180	A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module	4.0 Medium	Nov 18, 2024
CVE-2023-39179	A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module	7.5 High	Nov 18, 2024
CVE-2023-39176	A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module	5.8 Medium	Nov 18, 2024
CVE-2020-25720	Samba: check attribute access rights for ldap adds of computers	7.5 High	Nov 17, 2024
CVE-2024-7730	A heap buffer overflow was found in the virtio-snd device in QEMU	7.4 High	Nov 14, 2024
CVE-2024-3447	A heap-based buffer overflow was found in the SDHCI device emulation of QEMU	6.0 Medium	Nov 14, 2024
CVE-2023-4458	A flaw was found within the parsing of extended attributes in the kernel ksmbd module	4.0 Medium	Nov 14, 2024
CVE-2023-4134	A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel	5.5 Medium	Nov 14, 2024
CVE-2024-49395	Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block	5.3 Medium	Nov 12, 2024
CVE-2024-49394	Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing	5.3 Medium	Nov 12, 2024
CVE-2024-49393	Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing	6.5 Medium	Nov 12, 2024
CVE-2024-10963	Pam: improper hostname interpretation in pam_access leads to access control bypass	7.4 High	Nov 7, 2024
CVE-2024-10573	Mpg123: buffer overflow when writing decoded pcm samples	6.7 Medium	Oct 31, 2024
CVE-2024-9632	Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability	7.8 High	Oct 30, 2024
CVE-2024-10041	Pam: libpam: libpam vulnerable to read hashed password	4.7 Medium	Oct 23, 2024
CVE-2024-6519	A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation	8.2 High	Oct 21, 2024
CVE-2024-9675	Buildah: buildah allows arbitrary directory mount	7.8 High	Oct 9, 2024
CVE-2024-9355	Golang-fips: golang fips zeroed buffer	6.5 Medium	Oct 1, 2024
CVE-2024-8612	Qemu-kvm: information leak in virtio devices	3.8 Low	Sep 20, 2024
CVE-2024-8354	Qemu-kvm: usb: assertion failure in usb_ep_get()	5.5 Medium	Sep 19, 2024
CVE-2024-45770	Pcp: pmpost symlink attack allows escalating pcp to root user	4.4 Medium	Sep 19, 2024

Other Red Hat products