Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-18917	Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow	7.8 High	Aug 20, 2026
CVE-2026-77014	Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses	5.3 Medium	Aug 20, 2026
CVE-2026-19582	In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary…	0.0 Not rated	Aug 20, 2026
CVE-2026-43961	Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution	7.8 High	Aug 19, 2026
CVE-2026-76235	Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html	7.5 High	Aug 19, 2026
CVE-2026-75900	Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch	6.1 Medium	Aug 19, 2026
CVE-2026-75032	Bluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folder	6.3 Medium	Aug 18, 2026
CVE-2026-13002	A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service	4.4 Medium	Aug 14, 2026
CVE-2026-19879	Io.undertow/undertow: undertow: http response header integrity issue due to character truncation	5.3 Medium	Aug 14, 2026
CVE-2026-58224	Samba: ctdb fails to do integrity checking of received packets	6.5 Medium	Aug 14, 2026
CVE-2026-19617	Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser	5.5 Medium	Aug 14, 2026
CVE-2026-19730	Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives	4.2 Medium	Aug 13, 2026
CVE-2026-73584	Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling	6.3 Medium	Aug 13, 2026
CVE-2026-73583	Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr	6.6 Medium	Aug 13, 2026
CVE-2026-73585	Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack	6.3 Medium	Aug 13, 2026
CVE-2026-19654	Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd	7.5 High	Aug 12, 2026
CVE-2026-73433	A flaw was found in GStreamer gst-plugins-good (avidemux)	6.6 Medium	Aug 12, 2026
CVE-2026-73434	A flaw was found in GStreamer gst-plugins-good (avidemux)	6.1 Medium	Aug 12, 2026
CVE-2026-19548	Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing	5.5 Medium	Aug 12, 2026
CVE-2026-18663	389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking control	5.9 Medium	Aug 12, 2026
CVE-2026-19550	Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes	8.2 High	Aug 11, 2026
CVE-2026-14180	Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap	5.3 Medium	Aug 11, 2026
CVE-2026-19546	Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute	8.8 High	Aug 11, 2026
CVE-2026-71218	Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion	5.3 Medium	Aug 11, 2026
CVE-2026-71217	Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion	7.5 High	Aug 11, 2026

Other Red Hat products