Vulnerabilities of Red Hat Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-104046	Sssd: sssd: denial of service via incomplete identity provider authentication requests	6.2 Medium	Oct 6, 2026
CVE-2026-106062	Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file	7.8 High	Oct 6, 2026
CVE-2026-101258	Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free	7.8 High	Oct 6, 2026
CVE-2026-106063	Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions	6.3 Medium	Oct 6, 2026
CVE-2026-104048	Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation	6.8 Medium	Oct 6, 2026
CVE-2026-104047	Sssd: sssd: information disclosure via query injection in entra id lookups	5.3 Medium	Oct 6, 2026
CVE-2026-88252	Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion	4.7 Medium	Oct 6, 2026
CVE-2026-104044	Sssd: sssd: denial of service via crafted passkey kerberos authentication request	6.2 Medium	Oct 6, 2026
CVE-2026-104043	Sssd: sssd: denial of service via undersized packet parsing in nss responder	5.5 Medium	Oct 6, 2026
CVE-2026-104042	Sssd: sssd: denial of service via out-of-bounds read in pam responder	5.5 Medium	Oct 6, 2026
CVE-2026-104041	Sssd: sssd: denial of service via unbounded negative cache growth	5.5 Medium	Oct 6, 2026
CVE-2026-104040	Sssd: sssd: information disclosure via odata injection in entra id lookups	4.4 Medium	Oct 6, 2026
CVE-2026-104039	Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder	4.7 Medium	Oct 6, 2026
CVE-2026-104038	Sssd: sssd: denial of service via missing sid extension in certificate mapping	5.9 Medium	Oct 6, 2026
CVE-2026-104037	Sssd: sssd: denial of service via packet length underflow in autofs responder	5.5 Medium	Oct 6, 2026
CVE-2026-92821	Sssd: sssd: access control bypass via premature ldap access rule evaluation	6.8 Medium	Oct 6, 2026
CVE-2026-104036	Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin	5.8 Medium	Oct 6, 2026
CVE-2026-104035	Sssd: sssd: denial of service via memory exhaustion in kcm responder	5.5 Medium	Oct 6, 2026
CVE-2026-104034	Sssd: sssd: denial of service via use-after-free in kcm ticket renewal	4.7 Medium	Oct 6, 2026
CVE-2026-104033	Sssd: sssd: access control bypass via improper ldap shadow expiration check	5.4 Medium	Oct 6, 2026
CVE-2026-104032	Sssd: sssd: denial of service via unprivileged autofs cache invalidation	5.5 Medium	Oct 6, 2026
CVE-2026-104031	Sssd: sssd: denial of service via memory exhaustion in autofs responder	5.5 Medium	Oct 6, 2026
CVE-2026-104029	A flaw was found in SSSD	3.3 Low	Oct 5, 2026
CVE-2026-104030	Sssd: sssd: denial of service via out-of-bounds read during passkey parsing	5.5 Medium	Oct 5, 2026
CVE-2026-104988	Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject	8.1 High	Oct 2, 2026

Other Red Hat products