Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-0677	Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks	6.4 Medium	Feb 19, 2025
CVE-2025-0624	Grub2: net: out-of-bounds write in grub_net_search_config_file()	7.6 High	Feb 19, 2025
CVE-2025-1118	Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled	4.4 Medium	Feb 19, 2025
CVE-2024-45777	Grub2: grub-core/gettext: integer overflow leads to heap oob write.	6.7 Medium	Feb 19, 2025
CVE-2025-0622	Grub2: command/gpg: use-after-free due to hooks not being removed on module unload	6.4 Medium	Feb 18, 2025
CVE-2024-45783	Grub2: fs/hfs+: refcount can be decremented twice	4.4 Medium	Feb 18, 2025
CVE-2024-45781	Grub2: fs/ufs: oob write in the heap	6.7 Medium	Feb 18, 2025
CVE-2024-45776	Grub2: grub-core/gettext: integer overflow leads to heap oob write and read.	6.7 Medium	Feb 18, 2025
CVE-2024-45775	Grub2: commands/extcmd: missing check for failed allocation	5.2 Medium	Feb 18, 2025
CVE-2025-26465	Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled	6.8 Medium	Feb 18, 2025
CVE-2024-45774	Grub2: reader/jpeg: heap oob write during jpeg parsing	6.7 Medium	Feb 18, 2025
CVE-2025-1244	Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme	8.8 High	Feb 12, 2025
CVE-2024-12243	Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos	5.3 Medium	Feb 10, 2025
CVE-2024-12133	Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos	5.3 Medium	Feb 10, 2025
CVE-2024-11831	Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript	5.4 Medium	Feb 10, 2025
CVE-2024-11218	Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile	8.6 High	Jan 22, 2025
CVE-2024-12084	Rsync: heap buffer overflow in rsync due to improper checksum length handling	9.8 Critical	Jan 15, 2025
CVE-2024-11029	Freeipa: administrative user data leaked through systemd journal	5.5 Medium	Jan 15, 2025
CVE-2024-12087	A path traversal vulnerability exists in rsync	6.5 Medium	Jan 14, 2025
CVE-2024-12747	Rsync: race condition in rsync handling symbolic links	5.6 Medium	Jan 14, 2025
CVE-2024-12088	Rsync: --safe-links option bypass leads to path traversal	6.5 Medium	Jan 14, 2025
CVE-2024-12086	Rsync: rsync server leaks arbitrary client files	6.1 Medium	Jan 14, 2025
CVE-2024-12085	A flaw was found in rsync which could be triggered when rsync compares file checksums	7.5 High	Jan 14, 2025
CVE-2025-0306	Ruby: openssl: ruby marvin attack	7.4 High	Jan 9, 2025
CVE-2024-56827	Openjpeg: heap buffer overflow in lib/openjp2/j2k.c	5.6 Medium	Jan 9, 2025

Other Red Hat products