Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-56826	Openjpeg: heap buffer overflow in bin/common/color.c	5.6 Medium	Jan 9, 2025
CVE-2024-11614	An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature	7.4 High	Dec 18, 2024
CVE-2024-8676	Cri-o: checkpoint restore can be triggered from different namespaces	7.4 High	Nov 26, 2024
CVE-2024-52337	Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method	5.5 Medium	Nov 26, 2024
CVE-2024-52336	Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root	7.8 High	Nov 26, 2024
CVE-2024-52616	Avahi: avahi wide-area dns predictable transaction ids	5.3 Medium	Nov 21, 2024
CVE-2024-52615	Avahi: avahi wide-area dns uses constant source port	5.3 Medium	Nov 21, 2024
CVE-2023-39180	A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module	4.0 Medium	Nov 18, 2024
CVE-2023-39179	A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module	7.5 High	Nov 18, 2024
CVE-2023-39176	A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module	5.8 Medium	Nov 18, 2024
CVE-2020-25720	Samba: check attribute access rights for ldap adds of computers	7.5 High	Nov 17, 2024
CVE-2024-7730	A heap buffer overflow was found in the virtio-snd device in QEMU	7.4 High	Nov 14, 2024
CVE-2024-3447	A heap-based buffer overflow was found in the SDHCI device emulation of QEMU	6.0 Medium	Nov 14, 2024
CVE-2023-4458	A flaw was found within the parsing of extended attributes in the kernel ksmbd module	4.0 Medium	Nov 14, 2024
CVE-2023-4134	A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel	5.5 Medium	Nov 14, 2024
CVE-2024-49395	Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block	5.3 Medium	Nov 12, 2024
CVE-2024-49394	Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing	5.3 Medium	Nov 12, 2024
CVE-2024-49393	Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing	6.5 Medium	Nov 12, 2024
CVE-2024-10963	Pam: improper hostname interpretation in pam_access leads to access control bypass	7.4 High	Nov 7, 2024
CVE-2024-10573	Mpg123: buffer overflow when writing decoded pcm samples	6.7 Medium	Oct 31, 2024
CVE-2024-9632	Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability	7.8 High	Oct 30, 2024
CVE-2024-10041	Pam: libpam: libpam vulnerable to read hashed password	4.7 Medium	Oct 23, 2024
CVE-2024-9050	Networkmanager-libreswan: local privilege escalation via leftupdown	7.8 High	Oct 22, 2024
CVE-2024-6519	A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation	8.2 High	Oct 21, 2024
CVE-2024-9676	Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)	6.5 Medium	Oct 15, 2024

Other Red Hat products