Known vulnerabilities in Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-13097	Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore	8.7 High	Aug 20, 2026
CVE-2026-73197	Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read	7.5 High	Aug 20, 2026
CVE-2026-18917	Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow	7.8 High	Aug 20, 2026
CVE-2026-19654	Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd	7.5 High	Aug 12, 2026
CVE-2026-73433	A flaw was found in GStreamer gst-plugins-good (avidemux)	6.6 Medium	Aug 12, 2026
CVE-2026-73434	A flaw was found in GStreamer gst-plugins-good (avidemux)	6.1 Medium	Aug 12, 2026
CVE-2026-19550	Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes	8.2 High	Aug 11, 2026
CVE-2026-72694	Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation	7.1 High	Aug 11, 2026
CVE-2026-63622	Libvirt: swtpm privilege escalation via symlink following	7.8 High	Aug 10, 2026
CVE-2026-19387	A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding…	7.6 High	Aug 10, 2026
CVE-2026-15816	A flaw was found in dracut	7.5 High	Aug 7, 2026
CVE-2026-18649	A flaw was found in the GStreamer gst-plugins-good package	7.5 High	Aug 6, 2026
CVE-2026-71226	Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path	7.3 High	Aug 5, 2026
CVE-2026-11770	389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check	7.5 High	Jul 31, 2026
CVE-2026-15722	389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing	7.5 High	Jul 31, 2026
CVE-2026-16529	Pcp: pcp: denial of service due to signed integer overflow	7.5 High	Jul 30, 2026
CVE-2026-16527	Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules	7.3 High	Jul 30, 2026
CVE-2026-16526	Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability	8.8 High	Jul 30, 2026
CVE-2026-16524	Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection	7.8 High	Jul 30, 2026
CVE-2026-16313	Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export	7.6 High	Jul 28, 2026
CVE-2026-17523	In the Linux kernel, the following vulnerability has been resolved: can: bcm: switch timer to HRTIMER_MODE_SOFT and…	7.8 High	Jul 27, 2026
CVE-2026-16445	Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module	7.5 High	Jul 21, 2026
CVE-2026-15588	Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering	5.3 Medium	Jul 20, 2026
CVE-2026-15711	Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation	7.5 High	Jul 14, 2026
CVE-2026-15709	Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service	7.5 High	Jul 14, 2026

Other Red Hat products