Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-45769	Pcp: pmcd heap corruption through metric pmstore operations	5.5 Medium	Sep 19, 2024
CVE-2024-8443	Libopensc: heap buffer overflow in openpgp driver when generating key	2.9 Low	Sep 10, 2024
CVE-2024-45620	Libopensc: incorrect handling of the length of buffers or files in pkcs15init	3.9 Low	Sep 3, 2024
CVE-2024-45619	Libopensc: incorrect handling length of buffers or files in libopensc	4.3 Medium	Sep 3, 2024
CVE-2024-45618	Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init	3.9 Low	Sep 3, 2024
CVE-2024-45617	Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc	3.9 Low	Sep 3, 2024
CVE-2024-45616	Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc	3.9 Low	Sep 3, 2024
CVE-2024-45615	Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init	3.9 Low	Sep 3, 2024
CVE-2024-8235	Libvirt: crash of virtinterfaced via virconnectlistinterfaces()	6.2 Medium	Aug 30, 2024
CVE-2024-7006	Libtiff: null pointer dereference in tif_dirinfo.c	7.5 High	Aug 8, 2024
CVE-2024-43168	DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software…	4.8 Medium	Aug 8, 2024
CVE-2024-43167	DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software…	2.8 Low	Aug 8, 2024
CVE-2024-7409	Qemu: denial of service via improper synchronization in qemu nbd server during socket closure	7.5 High	Aug 5, 2024
CVE-2024-3056	Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack	7.7 High	Aug 2, 2024
CVE-2024-6655	Gtk3: gtk2: library injection from cwd	7.0 High	Jul 16, 2024
CVE-2023-39329	A flaw was found in OpenJPEG	6.5 Medium	Jul 13, 2024
CVE-2023-39327	A flaw was found in OpenJPEG	4.3 Medium	Jul 13, 2024
CVE-2024-6501	A flaw was found in NetworkManager	3.1 Low	Jul 9, 2024
CVE-2024-6237	389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request	6.5 Medium	Jul 9, 2024
CVE-2023-39328	A vulnerability was found in OpenJPEG similar to CVE-2019-6988	5.5 Medium	Jul 9, 2024
CVE-2024-6409	Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9	7.0 High	Jul 8, 2024
CVE-2024-6505	Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss	6.8 Medium	Jul 5, 2024
CVE-2024-6126	A flaw was found in the cockpit package	3.2 Low	Jul 3, 2024
CVE-2024-4467	Qemu-kvm: 'qemu-img info' leads to host file read/write	7.8 High	Jul 2, 2024
CVE-2024-6387	Openssh: regresshion - race condition in ssh allows rce/dos	8.1 High	Jul 1, 2024

Other Red Hat products