Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-46420	Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c	6.5 Medium	Apr 24, 2025
CVE-2025-46400	Xfig: fig2dev segmentation fault in read_arcobject	5.5 Medium	Apr 23, 2025
CVE-2025-46399	Xfig: transfig: fig2dev segmentation fault vulnerability	5.5 Medium	Apr 23, 2025
CVE-2025-46398	Xfig: fig2dev stack-overflow via read_objects	5.5 Medium	Apr 23, 2025
CVE-2025-46397	Xfig: xfig: stack-overflow allows possible code execution via local input manipulation	7.8 High	Apr 23, 2025
CVE-2025-32911	Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value	9.0 Critical	Apr 15, 2025
CVE-2025-3576	Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions	5.9 Medium	Apr 15, 2025
CVE-2025-32914	Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process	7.4 High	Apr 14, 2025
CVE-2025-32912	Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication	6.5 Medium	Apr 14, 2025
CVE-2025-32910	Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with digest authentication	6.5 Medium	Apr 14, 2025
CVE-2025-32909	Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c	5.3 Medium	Apr 14, 2025
CVE-2025-32908	Libsoup: denial of service on libsoup through http/2 server	7.5 High	Apr 14, 2025
CVE-2025-32907	Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header	5.3 Medium	Apr 14, 2025
CVE-2025-32906	Libsoup: out of bounds reads in soup_headers_parse_request()	7.5 High	Apr 14, 2025
CVE-2025-32913	Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header	7.5 High	Apr 14, 2025
CVE-2025-3416	Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`	3.7 Low	Apr 8, 2025
CVE-2025-3360	Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().	3.7 Low	Apr 7, 2025
CVE-2025-3359	Gnuplot: segmentation fault via io_str_init_static_internal function	6.2 Medium	Apr 7, 2025
CVE-2025-32053	Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()	6.5 Medium	Apr 3, 2025
CVE-2025-32052	Libsoup: heap buffer overflow in sniff_unknown()	6.5 Medium	Apr 3, 2025
CVE-2025-32051	Libsoup: segmentation fault when parsing malformed data uri	5.9 Medium	Apr 3, 2025
CVE-2025-32050	Libsoup: integer overflow in append_param_quoted	5.9 Medium	Apr 3, 2025
CVE-2025-32049	Libsoup: denial of service attack to websocket server	7.5 High	Apr 3, 2025
CVE-2025-3155	Yelp: arbitrary file read	7.4 High	Apr 3, 2025
CVE-2025-2784	Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content	7.0 High	Apr 3, 2025

Other Red Hat products