Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
46 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-114406 | fixed in 0:2026.2.92_v9.0.319-60.3.el6_10 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-18922 | | 389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl aux… | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-15816 | fixed in 0:004-413.el6_10 | Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() | HIGH 7.5 | 0.5 % | ||
| CVE-2026-6893 | fixed in 0:004-413.el6_10 | Dracut: dracut: root code execution via dhcp options command injection | HIGH 7.5 | 1.3 % | ||
| CVE-2026-50263 | fixed in 0:1.1.0-25.el6_10.18 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-50262 | fixed in 0:1.1.0-25.el6_10.18 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-50261 | fixed in 0:1.1.0-25.el6_10.18 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50260 | fixed in 0:1.1.0-25.el6_10.18 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50259 | fixed in 0:1.1.0-25.el6_10.18 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50258 | fixed in 0:1.1.0-25.el6_10.18 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50257 | fixed in 0:1.1.0-25.el6_10.18 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() | HIGH 7.8 | 0.1 % | ||
| CVE-2026-50256 | fixed in 0:1.1.0-25.el6_10.18 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length m… | HIGH 7.8 | 0.2 % | ||
| CVE-2026-34002 | fixed in 0:1.1.0-25.el6_10.16 | Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-34000 | fixed in 0:1.1.0-25.el6_10.16 | Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-34003 | fixed in 0:1.1.0-25.el6_10.16 | Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access | HIGH 7.8 | 0.3 % | ||
| CVE-2026-34001 | fixed in 0:1.1.0-25.el6_10.16 | Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption | HIGH 7.8 | 0.3 % | ||
| CVE-2026-33999 | fixed in 0:1.1.0-25.el6_10.16 | Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling | HIGH 7.8 | 0.4 % | ||
| CVE-2025-62229 | fixed in 0:1.1.0-25.el6_10.15 | Xorg: xmayland: use-after-free in xpresentnotify structure creation | HIGH 7.3 | 0.5 % | ||
| CVE-2025-62230 | fixed in 0:1.1.0-25.el6_10.15 | Xorg: xwayland: use-after-free in xkb client resource removal | HIGH 7.3 | 0.3 % | ||
| CVE-2025-62231 | fixed in 0:1.1.0-25.el6_10.15 | Xorg: xmayland: value overflow in xkbsetcompatmap() | HIGH 7.3 | 0.3 % | ||
| CVE-2025-49180 | fixed in 0:1.1.0-25.el6_10.1 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension | HIGH 7.8 | 0.3 % | ||
| CVE-2025-49179 | fixed in 0:1.1.0-25.el6_10.1 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension | HIGH 7.3 | 0.3 % | ||
| CVE-2025-49178 | fixed in 0:1.1.0-25.el6_10.1 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-49176 | fixed in 0:1.1.0-25.el6_10.1 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension | HIGH 7.3 | 0.4 % | ||
| CVE-2025-49175 | fixed in 0:1.1.0-25.el6_10.1 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors | MEDIUM 6.1 | 0.3 % | ||
| CVE-2025-26601 | fixed in 0:1.1.0-25.el6_10 | Xorg: xwayland: use-after-free in syncinittrigger() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26600 | fixed in 0:1.1.0-25.el6_10 | Xorg: xwayland: use-after-free in playreleasedevents() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26599 | fixed in 0:1.1.0-25.el6_10 | Xorg: xwayland: use of uninitialized pointer in compredirectwindow() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26598 | fixed in 0:1.1.0-25.el6_10 | Xorg: xwayland: out-of-bounds write in createpointerbarrierclient() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26597 | fixed in 0:1.1.0-25.el6_10 | Xorg: xwayland: buffer overflow in xkbchangetypesofkey() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26596 | fixed in 0:1.1.0-25.el6_10 | Xorg: xwayland: heap overflow in xkbwritekeysyms() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26595 | fixed in 0:1.1.0-25.el6_10 | Xorg: xwayland: buffer overflow in xkbvmodmasktext() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26594 | fixed in 0:1.1.0-25.el6_10 | X.org: xwayland: use-after-free of the root cursor | HIGH 7.8 | 0.4 % | ||
| CVE-2024-12087 | fixed in 0:3.0.6-12.el6_10.2 | Rsync: path traversal vulnerability in rsync | HIGH 7.5 | 2.3 % | ||
| CVE-2024-12085 | fixed in 0:3.0.6-12.el6_10.1 | Rsync: info leak via uninitialized stack contents | HIGH 7.5 | 8.6 % | ||
| CVE-2024-9632 | fixed in 0:1.1.0-25.el6_10.13 | Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability | HIGH 7.8 | 0.9 % | ||
| CVE-2024-31083 | fixed in 0:1.1.0-25.el6_10.13 | Xorg-x11-server: use-after-free in procrenderaddglyphs | HIGH 7.8 | 1.9 % | ||
| CVE-2024-31081 | fixed in 0:1.1.0-25.el6_10.13 | Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice | HIGH 7.3 | 0.5 % | ||
| CVE-2024-31080 | fixed in 0:1.1.0-25.el6_10.13 | Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents | HIGH 7.3 | 0.5 % | ||
| CVE-2024-21886 | fixed in 0:1.1.0-25.el6_10.13 | Xorg-x11-server: heap buffer overflow in disabledevice | HIGH 7.8 | 1.4 % | ||
| CVE-2024-21885 | fixed in 0:1.1.0-25.el6_10.13 | Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent | HIGH 7.8 | 1.4 % | ||
| CVE-2024-0229 | fixed in 0:1.1.0-25.el6_10.13 | Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access | HIGH 7.8 | 1.2 % | ||
| CVE-2023-6816 | fixed in 0:1.1.0-25.el6_10.13 | Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer | CRITICAL 9.8 | 2.1 % | ||
| CVE-2023-6478 | fixed in 0:1.1.0-25.el6_10.13 | Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty | HIGH 7.6 | 1.6 % | ||
| CVE-2023-6377 | fixed in 0:1.1.0-25.el6_10.14 | Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions | HIGH 7.8 | 1.6 % | ||
| CVE-2023-5367 | fixed in 0:1.1.0-25.el6_10.13 | Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty | HIGH 7.8 | 0.6 % |