Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-8941	A flaw was found in linux-pam	7.8 High	Aug 13, 2025
CVE-2023-32253	A flaw was found in the Linux kernel's ksmbd component	5.9 Medium	Aug 2, 2025
CVE-2023-32255	A flaw was found in the Linux kernel's ksmbd component	5.3 Medium	Aug 2, 2025
CVE-2023-32256	Kernel: ksmbd race issue from smb2 close and logoff with multichannel	7.5 High	Aug 1, 2025
CVE-2023-32251	A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server)	3.7 Low	Jul 31, 2025
CVE-2023-2593	A flaw exists within the Linux kernel's handling of new TCP connections	5.9 Medium	Jul 30, 2025
CVE-2025-43214	The issue was addressed with improved memory handling	6.5 Medium	Jul 29, 2025
CVE-2025-31277	Exploited Apple Multiple Products Buffer Overflow Vulnerability	8.8 High	Jul 29, 2025
CVE-2025-43213	The issue was addressed with improved memory handling	6.5 Medium	Jul 29, 2025
CVE-2025-8283	Netavark: podman: netavark may resolve hostnames to unexpected hosts	3.7 Low	Jul 28, 2025
CVE-2025-4056	Glib: glib crash after long command line	7.5 High	Jul 28, 2025
CVE-2025-5449	Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service	6.5 Medium	Jul 25, 2025
CVE-2025-8114	Libssh: null pointer dereference in libssh kex session id calculation	4.7 Medium	Jul 24, 2025
CVE-2025-6018	Pam-config: lpe from unprivileged to allow_active in pam	7.8 High	Jul 23, 2025
CVE-2025-4878	Libssh: use of uninitialized variable in privatekey_from_file()	3.6 Low	Jul 22, 2025
CVE-2025-7519	Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write	6.7 Medium	Jul 14, 2025
CVE-2025-6395	Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()	6.5 Medium	Jul 10, 2025
CVE-2025-7424	Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes	7.5 High	Jul 10, 2025
CVE-2025-7425	Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr	7.8 High	Jul 10, 2025
CVE-2025-32990	Gnutls: vulnerability in gnutls certtool template parsing	6.5 Medium	Jul 10, 2025
CVE-2025-32989	Gnutls: vulnerability in gnutls sct extension parsing	5.3 Medium	Jul 10, 2025
CVE-2025-32988	Gnutls: vulnerability in gnutls othername san export	6.5 Medium	Jul 10, 2025
CVE-2025-7345	Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf	7.5 High	Jul 8, 2025
CVE-2025-5987	Libssh: invalid return code for chacha20 poly1305 with openssl backend	8.1 High	Jul 7, 2025
CVE-2025-5351	Libssh: double free vulnerability in libssh key export functions	6.5 Medium	Jul 4, 2025

Other Red Hat products