Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-2199	389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c	5.7 Medium	May 28, 2024
CVE-2024-4693	Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash	5.5 Medium	May 10, 2024
CVE-2024-3727	Containers/image: digest type does not guarantee valid type	8.3 High	May 9, 2024
CVE-2024-4418	Libvirt: stack use-after-free in virnetclientioeventloop()	6.2 Medium	May 8, 2024
CVE-2024-2905	A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds…	6.2 Medium	Apr 25, 2024
CVE-2024-2467	Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)	5.9 Medium	Apr 25, 2024
CVE-2023-3758	A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users	7.1 High	Apr 18, 2024
CVE-2024-1481	Freeipa: specially crafted http requests potentially lead to denial of service	5.3 Medium	Apr 10, 2024
CVE-2024-3567	Qemu-kvm: net: assertion failure in update_sctp_checksum()	5.5 Medium	Apr 10, 2024
CVE-2024-3446	A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the…	8.2 High	Apr 9, 2024
CVE-2024-31083	Xorg-x11-server: use-after-free in procrenderaddglyphs	7.8 High	Apr 5, 2024
CVE-2024-31082	Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap	7.3 High	Apr 4, 2024
CVE-2024-31081	Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice	7.3 High	Apr 4, 2024
CVE-2024-31080	Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents	7.3 High	Apr 4, 2024
CVE-2024-3296	Rust-openssl: timing based side-channel can lead to a bleichenbacher style attack	5.9 Medium	Apr 4, 2024
CVE-2024-3094	Xz: malicious code in distributed source	10.0 Critical	Mar 29, 2024
CVE-2024-3019	Pcp: exposure of the redis server backend allows remote command execution via pmproxy	8.8 High	Mar 28, 2024
CVE-2024-2947	Cockpit: command injection when deleting a sosreport with a crafted name	7.3 High	Mar 28, 2024
CVE-2024-2494	Libvirt: negative g_new0 length can lead to unbounded memory allocation	6.2 Medium	Mar 21, 2024
CVE-2024-28834	A flaw was found in GnuTLS	5.3 Medium	Mar 21, 2024
CVE-2024-1394	Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads	7.5 High	Mar 21, 2024
CVE-2024-28835	A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially…	5.0 Medium	Mar 21, 2024
CVE-2024-2307	A flaw was found in osbuild-composer	6.1 Medium	Mar 19, 2024
CVE-2024-1753	Buildah: buildah: container escape via improper bind mount validation	8.6 High	Mar 18, 2024
CVE-2024-2496	Libvirt: null pointer dereference in udevconnectlistallinterfaces()	5.0 Medium	Mar 18, 2024

Other Red Hat products