Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-5987	Libssh: invalid return code for chacha20 poly1305 with openssl backend	8.1 High	Jul 7, 2025
CVE-2025-5351	Libssh: double free vulnerability in libssh key export functions	6.5 Medium	Jul 4, 2025
CVE-2025-5372	Libssh: incorrect return code handling in ssh_kdf() in libssh	5.0 Medium	Jul 4, 2025
CVE-2025-5318	Libssh: out-of-bounds read in sftp_handle()	5.4 Medium	Jun 24, 2025
CVE-2025-6032	A flaw was found in Podman	8.3 High	Jun 24, 2025
CVE-2025-6019	A Local Privilege Escalation (LPE) vulnerability was found in libblockdev	7.0 High	Jun 19, 2025
CVE-2025-49180	Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension	7.8 High	Jun 17, 2025
CVE-2025-49179	Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension	7.3 High	Jun 17, 2025
CVE-2025-49178	Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore	5.5 Medium	Jun 17, 2025
CVE-2025-49177	Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode	6.1 Medium	Jun 17, 2025
CVE-2025-49176	Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension	7.3 High	Jun 17, 2025
CVE-2025-49175	Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors	6.1 Medium	Jun 17, 2025
CVE-2025-6199	Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder	3.3 Low	Jun 17, 2025
CVE-2025-4404	Freeipa: idm: privilege escalation from host to domain admin in freeipa	9.1 Critical	Jun 17, 2025
CVE-2025-6020	Linux-pam: linux-pam directory traversal	7.8 High	Jun 17, 2025
CVE-2025-49794	Libxml: heap use after free (uaf) leads to denial of service (dos)	9.1 Critical	Jun 16, 2025
CVE-2025-6170	Libxml2: stack buffer overflow in xmllint interactive shell command handling	2.5 Low	Jun 16, 2025
CVE-2025-49795	Libxml: null pointer dereference leads to denial of service (dos)	7.5 High	Jun 16, 2025
CVE-2025-49796	Libxml: type confusion leads to denial of service (dos)	9.1 Critical	Jun 16, 2025
CVE-2025-6052	A flaw was found in how GLib’s GString manages memory when adding data to strings	3.7 Low	Jun 13, 2025
CVE-2025-6035	Gimp: gimp integer overflow	6.1 Medium	Jun 13, 2025
CVE-2025-6021	Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2	7.5 High	Jun 12, 2025
CVE-2025-5914	Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c	7.8 High	Jun 9, 2025
CVE-2025-5918	Libarchive: reading past eof may be triggered for piped file streams	3.9 Low	Jun 9, 2025
CVE-2025-5917	Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c	2.8 Low	Jun 9, 2025

Other Red Hat products