Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-5916	Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c	3.9 Low	Jun 9, 2025
CVE-2025-5915	Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c	6.6 Medium	Jun 9, 2025
CVE-2025-47711	Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service	6.5 Medium	Jun 9, 2025
CVE-2025-47712	Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service	6.5 Medium	Jun 9, 2025
CVE-2025-5791	Users: `root` appended to group listings	7.1 High	Jun 6, 2025
CVE-2025-0620	Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session	4.9 Medium	Jun 6, 2025
CVE-2025-4598	Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump	4.7 Medium	May 30, 2025
CVE-2025-5278	Coreutils: heap buffer under-read in gnu coreutils sort via key specification	4.4 Medium	May 27, 2025
CVE-2025-5222	Icu: stack buffer overflow in the srbroot::addtag function	7.0 High	May 27, 2025
CVE-2025-48798	Gimp: multiple use after free in xcf parser	7.3 High	May 27, 2025
CVE-2025-48797	Gimp: multiple heap buffer overflows in tga parser	7.3 High	May 27, 2025
CVE-2025-48796	Gimp: stack-based buffer overflows in file-ico	7.3 High	May 27, 2025
CVE-2025-5024	A flaw was found in gnome-remote-desktop	7.4 High	May 22, 2025
CVE-2025-4969	Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c	6.5 Medium	May 21, 2025
CVE-2025-4945	Libsoup: integer overflow in cookie expiration date handling in libsoup	3.7 Low	May 19, 2025
CVE-2025-4948	Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup	7.5 High	May 19, 2025
CVE-2025-4476	Libsoup: null pointer dereference in libsoup may lead to denial of service	4.3 Medium	May 16, 2025
CVE-2025-4478	Gnome-remote-desktop: freerdp: unauthenticated rdp packet causes segfault in freerdp leading to denial of service	6.5 Medium	May 16, 2025
CVE-2025-3931	Yggdrasil: local privilege escalation in yggdrasil	7.8 High	May 14, 2025
CVE-2025-4574	Crossbeam-channel: crossbeam-channel vulnerable to double free on drop	6.5 Medium	May 13, 2025
CVE-2025-31223	The issue was addressed with improved checks	8.0 High	May 12, 2025
CVE-2025-4432	Ring: some aes functions may panic when overflow checking is enabled in ring	5.3 Medium	May 9, 2025
CVE-2025-4382	Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm	5.9 Medium	May 9, 2025
CVE-2025-4373	Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar	4.8 Medium	May 6, 2025
CVE-2025-4035	Libsoup: cookie domain validation bypass via uppercase characters in libsoup	4.3 Medium	Apr 29, 2025

Other Red Hat products