Vulnerabilities of Red Hat Red Hat Enterprise Linux 8
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-107167 | M17n-lib: heap use-after-free write in re_init_ic() | 6.2 Medium | Oct 7, 2026 |
| CVE-2026-106064 | Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions | 6.3 Medium | Oct 7, 2026 |
| CVE-2026-107170 | A flaw was found in m17n-lib | 2.9 Low | Oct 7, 2026 |
| CVE-2026-107168 | M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars() | 6.2 Medium | Oct 7, 2026 |
| CVE-2026-106061 | Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file | 5.5 Medium | Oct 7, 2026 |
| CVE-2026-80048 | Sssd: sssd-kcm: local denial of service via excessive memory preallocation | Not rated | Oct 6, 2026 |
| CVE-2026-104045 | Sssd: sssd: denial of service via race condition in autofs responder | 4.7 Medium | Oct 6, 2026 |
| CVE-2026-104046 | Sssd: sssd: denial of service via incomplete identity provider authentication requests | 6.2 Medium | Oct 6, 2026 |
| CVE-2026-106062 | Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file | 7.8 High | Oct 6, 2026 |
| CVE-2026-101258 | Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free | 7.8 High | Oct 6, 2026 |
| CVE-2026-106063 | Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions | 6.3 Medium | Oct 6, 2026 |
| CVE-2026-104048 | Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation | 6.8 Medium | Oct 6, 2026 |
| CVE-2026-104047 | Sssd: sssd: information disclosure via query injection in entra id lookups | 5.3 Medium | Oct 6, 2026 |
| CVE-2026-88252 | Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion | 4.7 Medium | Oct 6, 2026 |
| CVE-2026-104044 | Sssd: sssd: denial of service via crafted passkey kerberos authentication request | 6.2 Medium | Oct 6, 2026 |
| CVE-2026-104043 | Sssd: sssd: denial of service via undersized packet parsing in nss responder | 5.5 Medium | Oct 6, 2026 |
| CVE-2026-104042 | Sssd: sssd: denial of service via out-of-bounds read in pam responder | 5.5 Medium | Oct 6, 2026 |
| CVE-2026-104041 | Sssd: sssd: denial of service via unbounded negative cache growth | 5.5 Medium | Oct 6, 2026 |
| CVE-2026-104040 | Sssd: sssd: information disclosure via odata injection in entra id lookups | 4.4 Medium | Oct 6, 2026 |
| CVE-2026-104039 | Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder | 4.7 Medium | Oct 6, 2026 |
| CVE-2026-104038 | Sssd: sssd: denial of service via missing sid extension in certificate mapping | 5.9 Medium | Oct 6, 2026 |
| CVE-2026-104037 | Sssd: sssd: denial of service via packet length underflow in autofs responder | 5.5 Medium | Oct 6, 2026 |
| CVE-2026-92821 | Sssd: sssd: access control bypass via premature ldap access rule evaluation | 6.8 Medium | Oct 6, 2026 |
| CVE-2026-104036 | Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin | 5.8 Medium | Oct 6, 2026 |
| CVE-2026-104035 | Sssd: sssd: denial of service via memory exhaustion in kcm responder | 5.5 Medium | Oct 6, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430