Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-27858	Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large…	7.5 High	Mar 27, 2026
CVE-2026-27857	Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage	4.3 Medium	Mar 27, 2026
CVE-2026-27856	Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack	7.4 High	Mar 27, 2026
CVE-2026-24031	Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin	7.7 High	Mar 27, 2026
CVE-2025-59032	ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response	7.5 High	Mar 27, 2026
CVE-2026-4948	Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization	5.5 Medium	Mar 27, 2026
CVE-2026-0965	Libssh: libssh: denial of service via improper configuration file handling	3.3 Low	Mar 26, 2026
CVE-2026-0967	Libssh: libssh: denial of service via inefficient regular expression processing	2.2 Low	Mar 26, 2026
CVE-2026-0968	Libssh: libssh: denial of service due to malformed sftp message	3.1 Low	Mar 26, 2026
CVE-2026-0964	Libssh: improper sanitation of paths received from scp servers	5.0 Medium	Mar 26, 2026
CVE-2026-0966	Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()	6.5 Medium	Mar 26, 2026
CVE-2026-2100	P11-kit: null dereference via c_derivekey with specific null parameters	5.3 Medium	Mar 26, 2026
CVE-2026-2239	Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow	2.8 Low	Mar 26, 2026
CVE-2026-2272	Gimp: gimp: memory corruption due to integer overflow in ico file handling	4.3 Medium	Mar 26, 2026
CVE-2026-2271	Gimp: gimp: denial of service via crafted psp image file	3.3 Low	Mar 26, 2026
CVE-2026-32286	The DataRow.Decode function fails to properly validate field lengths	7.5 High	Mar 26, 2026
CVE-2026-2436	Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake	6.5 Medium	Mar 26, 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 High	Mar 26, 2026
CVE-2026-33487	goxmlsig provides XML Digital Signatures implemented in Go	7.5 High	Mar 26, 2026
CVE-2026-4897	Polkit: polkit: denial of service via unbounded input processing through standard input	5.5 Medium	Mar 26, 2026
CVE-2026-4887	Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image	6.1 Medium	Mar 26, 2026
CVE-2026-33526	Squid is a caching proxy for the Web	9.2 Critical	Mar 26, 2026
CVE-2026-32748	Squid is a caching proxy for the Web	8.7 High	Mar 26, 2026
CVE-2026-3104	A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain	7.5 High	Mar 25, 2026
CVE-2026-1519	If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume…	7.5 High	Mar 25, 2026

Other Red Hat products