Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

154 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-114406fixed in 0:2026.2.92_v9.0.319-70.3.el7_9Ca-certificates: distrust emudhra intermediate ca certificates due to security concernsMEDIUM 6.80.3 %
CVE-2026-96889fixed in 0:2.40.20-1.el7_9.1Librsvg: use-after-free when xml includes have duplicated entitiesHIGH 7.80.5 %
CVE-2026-96512fixed in 0:1.8.23-10.el7_9.6Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorizationHIGH 7.80.3 %
CVE-2026-18147fixed in 0:4.6.8-5.el7_9.25Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted urlHIGH 8.10.5 %
CVE-2026-18922389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl aux…CRITICAL 9.80.6 %
CVE-2026-18453389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_searchHIGH 7.50.8 %
CVE-2026-18355389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()HIGH 7.50.8 %
CVE-2026-76560389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dnHIGH 7.50.6 %
CVE-2026-76578fixed in 0:4.6.8-5.el7_9.25Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aciCRITICAL 9.81.2 %
CVE-2026-81665fixed in 0:2.4.5-7.el7_9.4Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassemblyHIGH 7.50.4 %
CVE-2026-84268fixed in 0:1.36.2-7.el7_9.1Gvfs: sftp: heap-based buffer overflow in read_reply()HIGH 8.80.6 %
CVE-2026-83596fixed in 0:2.54.0-1.el7_9Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeatureHIGH 8.80.3 %
CVE-2026-78376fixed in 0:2.54.0-1.el7_9Webkitgtk: use-after-free of jscvalue function parametersHIGH 8.80.4 %
CVE-2026-11861fixed in 0:4.6.8-5.el7_9.25Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationshipsCRITICAL 9.60.4 %
CVE-2026-13097fixed in 0:4.6.8-5.el7_9.25Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastoreHIGH 8.70.7 %
CVE-2026-73197fixed in 0:4.6.8-5.el7_9.25Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body readHIGH 7.50.5 %
CVE-2026-18917fixed in 0:4.5.0-36.el7_9.7Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflowHIGH 7.80.2 %
CVE-2026-73433fixed in 0:1.10.4-4.el7_9.3Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/writeMEDIUM 6.60.1 %
CVE-2026-73434fixed in 0:1.10.4-4.el7_9.3Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsingMEDIUM 6.10.1 %
CVE-2026-19550fixed in 0:4.6.8-5.el7_9.25Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writesHIGH 8.20.5 %
CVE-2026-63622fixed in 0:4.5.0-36.el7_9.7Libvirt: swtpm privilege escalation via symlink followingHIGH 7.80.1 %
CVE-2026-19387fixed in 0:1.10.4-8.el7_9Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoderHIGH 7.60.4 %
CVE-2026-15816fixed in 0:033-577.el7_9Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()HIGH 7.50.5 %
CVE-2026-18649fixed in 0:1.10.4-4.el7_9.3Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloadersHIGH 7.51.0 %
CVE-2026-11770389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status checkHIGH 7.50.5 %
CVE-2026-15722389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsingHIGH 7.50.8 %
CVE-2026-16313fixed in 1:1.37-20.el7_9Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --exportHIGH 7.60.3 %
CVE-2026-15588fixed in 0:2.56.1-13.el7_9.1Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line bufferingMEDIUM 5.30.5 %
CVE-2026-59692fixed in 0:1.10.4-7.el7_9Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callbackHIGH 7.50.6 %
CVE-2026-59691fixed in 0:1.10.4-7.el7_9Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebufferHIGH 7.10.3 %
CVE-2026-11610389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbindHIGH 8.80.5 %
CVE-2026-14476fixed in 0:1.16.5-10.el7_9.18Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypassHIGH 8.00.7 %
CVE-2026-14474fixed in 0:1.16.5-10.el7_9.18Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalationHIGH 8.80.6 %
CVE-2026-58016fixed in 0:2.56.1-13.el7_9Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"CRITICAL 9.10.5 %
CVE-2026-58015fixed in 0:2.56.1-13.el7_9.1Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receiveHIGH 7.50.8 %
CVE-2026-58014fixed in 0:2.56.1-13.el7_9.1Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"HIGH 8.60.6 %
CVE-2026-58013fixed in 0:2.56.1-13.el7_9.1Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"HIGH 8.20.5 %
CVE-2026-58012fixed in 0:2.56.1-13.el7_9.1Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()HIGH 8.20.5 %
CVE-2026-58011fixed in 0:2.56.1-13.el7_9.1Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimeHIGH 7.50.5 %
CVE-2026-58010fixed in 0:2.56.1-13.el7_9.1Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()HIGH 8.20.5 %
CVE-2026-12912fixed in 0:3.9.4-12.el7_9.3Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff imageHIGH 7.30.4 %
CVE-2026-13601fixed in 2:3.28.1-2.el7_9Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applicationsHIGH 7.10.2 %
CVE-2026-56208fixed in 0:140.13.0-1.el7_9Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modeHIGH 7.60.6 %
CVE-2026-10649fixed in 0:1.1.23-1.el7_9.2Pacemaker: pacemaker: denial of service via integer overflow in remote message decompressionHIGH 8.60.6 %
CVE-2026-42014fixed in 0:3.3.29-9.el7_9.2Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pinMEDIUM 6.60.1 %
CVE-2026-52722fixed in 0:1.10.4-6.el7_9Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handlingHIGH 7.10.4 %
CVE-2026-52720fixed in 0:1.10.4-6.el7_9Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfbHIGH 8.80.6 %
CVE-2026-53705fixed in 0:1.10.4-4.el7_9.1Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflowHIGH 7.60.4 %
CVE-2026-54230fixed in 0:2.1.11-62.el7_9Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwritesHIGH 7.80.2 %
CVE-2026-54229fixed in 0:2.1.11-61.el7_9Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate lockingHIGH 7.00.1 %
CVE-2026-54228fixed in 0:2.1.11-61.el7_9Abrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directoriesHIGH 7.80.1 %
CVE-2026-11774389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflowHIGH 7.60.7 %
CVE-2026-6893fixed in 0:033-577.el7_9Dracut: dracut: root code execution via dhcp options command injectionHIGH 7.51.3 %
CVE-2026-11788389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parserHIGH 7.50.6 %
CVE-2026-50263fixed in 0:1.20.4-35.el7_9Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()MEDIUM 5.50.1 %
CVE-2026-50262fixed in 0:1.20.4-35.el7_9Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributesMEDIUM 5.50.1 %
CVE-2026-50264fixed in 0:1.20.4-35.el7_9Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformatHIGH 7.80.1 %
CVE-2026-50261fixed in 0:1.20.4-35.el7_9Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()HIGH 7.80.2 %
CVE-2026-50260fixed in 0:1.20.4-35.el7_9Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()HIGH 7.80.2 %
CVE-2026-50259fixed in 0:1.20.4-35.el7_9Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexingHIGH 7.80.2 %
CVE-2026-50258fixed in 0:1.20.4-35.el7_9Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levelsHIGH 7.80.2 %
CVE-2026-50257fixed in 0:1.20.4-35.el7_9Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()HIGH 7.80.1 %
CVE-2026-50256fixed in 0:1.20.4-35.el7_9Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length m…HIGH 7.80.2 %
CVE-2026-10118fixed in 0:0.22.5-7.el7_9Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplicationHIGH 7.80.3 %
CVE-2026-4408fixed in 0:4.10.16-26.el7_9.1Samba: remote code execution in samrCRITICAL 9.82.5 %
CVE-2026-42015fixed in 0:3.3.29-9.el7_9.2Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handlingMEDIUM 5.30.7 %
CVE-2026-42013fixed in 0:3.3.29-9.el7_9.2Gnutls: gnutls: certificate validation bypass due to oversized subject alternative nameHIGH 8.20.4 %
CVE-2026-42012fixed in 0:3.3.29-9.el7_9.2Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sansHIGH 7.10.4 %
CVE-2026-48864fixed in 0:0.6.34-4.el7_9.1Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page dataHIGH 7.80.2 %
CVE-2026-4480fixed in 0:4.10.16-26.el7_9.1Samba: samba: remote code execution in printing subsystem via unescaped job descriptionCRITICAL 9.814 %
CVE-2026-9064389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)HIGH 7.50.8 %
CVE-2026-42009fixed in 0:3.3.29-9.el7_9.1Gnutls: gnutls: denial of service via dtls packet reordering vulnerabilityHIGH 7.51.3 %
CVE-2026-42011fixed in 0:3.3.29-9.el7_9.2Gnutls: gnutls: security bypass due to incorrect name constraint handlingHIGH 7.40.5 %
CVE-2026-34002fixed in 0:1.20.4-34.el7_9Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handlingCRITICAL 9.10.5 %
CVE-2026-34000fixed in 0:1.20.4-34.el7_9Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.CRITICAL 9.10.5 %
CVE-2026-33846fixed in 0:3.3.29-9.el7_9.1Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyHIGH 7.51.3 %
CVE-2026-33845fixed in 0:3.3.29-9.el7_9.1Gnutls: gnutls: denial of service via dtls zero-length fragmentCRITICAL 9.12.1 %
CVE-2026-3833fixed in 0:3.3.29-9.el7_9.2Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparisonHIGH 7.40.6 %
CVE-2026-34003fixed in 0:1.20.4-34.el7_9Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory accessHIGH 7.80.3 %
CVE-2026-34001fixed in 0:1.20.4-34.el7_9Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruptionHIGH 7.80.3 %
CVE-2026-33999fixed in 0:1.20.4-34.el7_9Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handlingHIGH 7.80.4 %
CVE-2026-35092fixed in 0:2.4.5-7.el7_9.3Corosync: corosync: denial of service via integer overflow in join message validationHIGH 7.51.0 %
CVE-2026-35091fixed in 0:2.4.5-7.el7_9.3Corosync: corosync: denial of service and information disclosure via crafted udp packetHIGH 8.20.9 %
CVE-2026-5201fixed in 0:2.36.12-5.el7_9Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg imageHIGH 7.51.1 %
CVE-2026-5121fixed in 0:3.1.2-14.el7_9.2Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processingCRITICAL 9.81.1 %
CVE-2026-5119fixed in 0:2.62.2-12.el7_9Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishmentHIGH 8.20.3 %
CVE-2026-4887fixed in 2:2.8.22-1.el7_9.6Gimp: gimp:memory disclosure and denial of service via specially crafted pcx imageHIGH 7.10.6 %
CVE-2026-4775fixed in 0:3.9.4-12.el7_9.2Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processingHIGH 7.80.6 %
CVE-2026-4424fixed in 0:3.1.2-14.el7_9.2Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processingHIGH 7.51.3 %
CVE-2025-14905389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflowHIGH 7.21.3 %
CVE-2026-1761fixed in 0:2.62.2-11.el7_9Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http responseHIGH 8.61.1 %
CVE-2026-0719fixed in 0:2.62.2-11.el7_9Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authenticationHIGH 8.60.6 %
CVE-2025-14523fixed in 0:2.62.2-10.el7_9Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)HIGH 8.20.5 %
CVE-2025-14087fixed in 0:2.56.1-12.el7_9Glib: glib: buffer underflow in gvariant parser leads to heap corruptionCRITICAL 9.80.8 %
CVE-2025-66287fixed in 0:2.50.3-2.el7_9Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crashHIGH 8.80.5 %
CVE-2025-13947fixed in 0:2.50.3-2.el7_9Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-dropHIGH 7.40.3 %
CVE-2025-13601fixed in 0:2.56.1-11.el7_9Glib: integer overflow in in g_escape_uri_string()HIGH 7.70.3 %
CVE-2025-13502fixed in 0:2.50.3-2.el7_9Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dosHIGH 7.50.6 %
CVE-2025-61662fixed in 1:2.02-0.87.el7_9.16Grub2: missing unregister call for gettext command may lead to use-after-freeHIGH 7.80.2 %
CVE-2025-59089fixed in 0:0.3.2-3.el7_9.3Python-kdcproxy: remote dos via unbounded tcp upstream bufferingMEDIUM 5.90.6 %
CVE-2025-59088fixed in 0:0.3.2-3.el7_9.3Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srvHIGH 8.60.5 %
CVE-2025-62229fixed in 0:1.20.4-33.el7_9Xorg: xmayland: use-after-free in xpresentnotify structure creationHIGH 7.30.5 %
CVE-2025-62230fixed in 0:1.20.4-33.el7_9Xorg: xwayland: use-after-free in xkb client resource removalHIGH 7.30.3 %
CVE-2025-62231fixed in 0:1.20.4-33.el7_9Xorg: xmayland: value overflow in xkbsetcompatmap()HIGH 7.30.3 %
CVE-2025-11561fixed in 0:1.16.5-10.el7_9.17Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systemsHIGH 8.80.8 %
CVE-2025-7493fixed in 0:4.6.8-5.el7_9.23Freeipa: idm: privilege escalation from host to domain admin in freeipaCRITICAL 9.10.6 %
CVE-2025-11021fixed in 0:2.62.2-9.el7_9Libsoup: out-of-bounds read in cookie date handling of libsoup http libraryHIGH 7.50.6 %
CVE-2025-9900fixed in 0:3.9.4-12.el7_9.1Libtiff: libtiff write-what-whereHIGH 8.81.0 %
CVE-2025-8067fixed in 0:2.8.4-1.el7_9.2Udisks: out-of-bounds read in udisks daemonHIGH 8.50.7 %
CVE-2025-8941fixed in 0:1.1.8-23.el7_9.2Linux-pam: incomplete fix for cve-2025-6020HIGH 7.80.3 %
CVE-2025-7425fixed in 0:2.9.1-6.el7_9.12Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptrHIGH 7.80.4 %
CVE-2025-7345fixed in 0:2.36.12-4.el7_9Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbufHIGH 7.51.3 %
CVE-2025-6019fixed in 0:2.18-5.el7_9.1Libblockdev: lpe from allow_active to root in libblockdev via udisksHIGH 7.00.5 %
CVE-2025-49180fixed in 0:1.20.4-32.el7_9Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionHIGH 7.80.3 %
CVE-2025-49179fixed in 0:1.20.4-32.el7_9Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionHIGH 7.30.3 %
CVE-2025-49178fixed in 0:1.20.4-32.el7_9Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignoreMEDIUM 5.50.2 %
CVE-2025-49176fixed in 0:1.20.4-32.el7_9Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionHIGH 7.30.4 %
CVE-2025-49175fixed in 0:1.20.4-32.el7_9Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorsMEDIUM 6.10.3 %
CVE-2025-4404fixed in 0:4.6.8-5.el7_9.18Freeipa: idm: privilege escalation from host to domain admin in freeipaCRITICAL 9.12.0 %
CVE-2025-6020fixed in 0:1.1.8-23.el7_9.1Linux-pam: linux-pam directory traversalHIGH 7.80.5 %
CVE-2025-49794fixed in 0:2.9.1-6.el7_9.10Libxml: heap use after free (uaf) leads to denial of service (dos)CRITICAL 9.10.8 %
CVE-2025-49796fixed in 0:2.9.1-6.el7_9.10Libxml: type confusion leads to denial of service (dos)CRITICAL 9.11.6 %
CVE-2025-6021fixed in 0:2.9.1-6.el7_9.10Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2HIGH 7.51.4 %
CVE-2025-5914fixed in 0:3.1.2-14.el7_9.1Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.cHIGH 7.80.5 %
CVE-2025-48798fixed in 2:2.8.22-1.el7_9.2Gimp: multiple use after free in xcf parserHIGH 7.30.2 %
CVE-2025-48797fixed in 2:2.8.22-1.el7_9.2Gimp: multiple heap buffer overflows in tga parserHIGH 7.30.3 %
CVE-2025-4945fixed in 0:2.62.2-9.el7_9Libsoup: integer overflow in cookie expiration date handling in libsoupLOW 3.70.7 %
CVE-2025-4948fixed in 0:2.62.2-9.el7_9Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoupHIGH 7.50.8 %
CVE-2025-32911fixed in 0:2.62.2-9.el7_9Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valueCRITICAL 9.01.0 %
CVE-2025-32914fixed in 0:2.62.2-9.el7_9Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of processHIGH 7.40.8 %
CVE-2025-32906fixed in 0:2.62.2-9.el7_9Libsoup: out of bounds reads in soup_headers_parse_request()HIGH 7.51.0 %
CVE-2025-32913fixed in 0:2.62.2-9.el7_9Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no valu…HIGH 7.50.8 %
CVE-2025-32049fixed in 0:2.62.2-9.el7_9Libsoup: denial of service attack to websocket serverHIGH 7.50.9 %
CVE-2025-2784fixed in 0:2.62.2-9.el7_9Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing contentHIGH 7.00.9 %
CVE-2025-26601fixed in 0:1.8.0-36.el7_9Xorg: xwayland: use-after-free in syncinittrigger()HIGH 7.80.4 %
CVE-2025-26600fixed in 0:1.8.0-36.el7_9Xorg: xwayland: use-after-free in playreleasedevents()HIGH 7.80.4 %
CVE-2025-26599fixed in 0:1.8.0-36.el7_9Xorg: xwayland: use of uninitialized pointer in compredirectwindow()HIGH 7.80.4 %
CVE-2025-26598fixed in 0:1.8.0-36.el7_9Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()HIGH 7.80.4 %
CVE-2025-26597fixed in 0:1.8.0-36.el7_9Xorg: xwayland: buffer overflow in xkbchangetypesofkey()HIGH 7.80.4 %
CVE-2025-26596fixed in 0:1.8.0-36.el7_9Xorg: xwayland: heap overflow in xkbwritekeysyms()HIGH 7.80.4 %
CVE-2025-26595fixed in 0:1.8.0-36.el7_9Xorg: xwayland: buffer overflow in xkbvmodmasktext()HIGH 7.80.4 %
CVE-2025-26594fixed in 0:1.8.0-36.el7_9X.org: xwayland: use-after-free of the root cursorHIGH 7.80.4 %
CVE-2025-0624fixed in 1:2.02-0.87.el7_9.15Grub2: net: out-of-bounds write in grub_net_search_config_file()HIGH 7.61.4 %
CVE-2025-1244fixed in 1:24.3-23.el7_9.2Emacs: shell injection vulnerability in gnu emacs via custom "man" uri schemeHIGH 8.82.6 %
CVE-2024-12087fixed in 0:3.1.2-12.el7_9.2Rsync: path traversal vulnerability in rsyncHIGH 7.52.3 %
CVE-2024-12085fixed in 0:3.1.2-12.el7_9.1Rsync: info leak via uninitialized stack contentsHIGH 7.58.6 %
CVE-2024-52337fixed in 0:2.11.0-13.el7_9Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` methodMEDIUM 5.50.3 %
CVE-2024-9632fixed in 0:1.8.0-34.el7_9Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerabilityHIGH 7.80.9 %
CVE-2024-9050fixed in 0:1.2.4-4.el7_9Networkmanager-libreswan: local privilege escalation via leftupdownHIGH 7.80.5 %
CVE-2024-9355fixed in 0:0.10-2.el7_9Golang-fips: golang fips zeroed bufferMEDIUM 6.50.3 %
CVE-2024-8445fixed in 0:1.3.11.1-7.el7_9389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)MEDIUM 5.70.4 %
CVE-2024-5953389-ds-base: malformed userpassword hash may cause denial of serviceMEDIUM 5.70.6 %
CVE-2024-5564fixed in 0:1.2-10.el7_9Libndp: buffer overflow in route information length fieldHIGH 8.11.2 %
CVE-2023-46846fixed in 7:3.5.20-17.el7_9.13Squid: request/response smuggling in http/1.1 and icapCRITICAL 9.37.2 %