Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-6519	A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation	8.2 High	Oct 21, 2024
CVE-2024-9676	Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)	6.5 Medium	Oct 15, 2024
CVE-2024-9979	Pyo3: risk of use-after-free in `borrowed` reads from python weak references	5.3 Medium	Oct 15, 2024
CVE-2024-9675	Buildah: buildah allows arbitrary directory mount	7.8 High	Oct 9, 2024
CVE-2024-9407	Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction	4.7 Medium	Oct 1, 2024
CVE-2024-9341	Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library	5.4 Medium	Oct 1, 2024
CVE-2024-9355	Golang-fips: golang fips zeroed buffer	6.5 Medium	Oct 1, 2024
CVE-2024-8612	Qemu-kvm: information leak in virtio devices	3.8 Low	Sep 20, 2024
CVE-2024-8354	Qemu-kvm: usb: assertion failure in usb_ep_get()	5.5 Medium	Sep 19, 2024
CVE-2024-45770	Pcp: pmpost symlink attack allows escalating pcp to root user	4.4 Medium	Sep 19, 2024
CVE-2024-45769	Pcp: pmcd heap corruption through metric pmstore operations	5.5 Medium	Sep 19, 2024
CVE-2024-8775	Ansible-core: exposure of sensitive information in ansible vault files due to improper logging	5.5 Medium	Sep 14, 2024
CVE-2024-8443	Libopensc: heap buffer overflow in openpgp driver when generating key	2.9 Low	Sep 10, 2024
CVE-2024-8445	389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)	5.7 Medium	Sep 5, 2024
CVE-2024-8418	Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service	7.5 High	Sep 4, 2024
CVE-2024-45620	Libopensc: incorrect handling of the length of buffers or files in pkcs15init	3.9 Low	Sep 3, 2024
CVE-2024-45619	Libopensc: incorrect handling length of buffers or files in libopensc	4.3 Medium	Sep 3, 2024
CVE-2024-45618	Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init	3.9 Low	Sep 3, 2024
CVE-2024-45617	Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc	3.9 Low	Sep 3, 2024
CVE-2024-45616	Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc	3.9 Low	Sep 3, 2024
CVE-2024-45615	Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init	3.9 Low	Sep 3, 2024
CVE-2024-5148	Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate	7.5 High	Sep 2, 2024
CVE-2024-8235	Libvirt: crash of virtinterfaced via virconnectlistinterfaces()	6.2 Medium	Aug 30, 2024
CVE-2024-7006	Libtiff: null pointer dereference in tif_dirinfo.c	7.5 High	Aug 8, 2024
CVE-2024-43168	DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software…	4.8 Medium	Aug 8, 2024

Other Red Hat products