Known vulnerabilities in Red Hat Enterprise Linux 9.4 Extended Update Support
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-26595 | Xorg: xwayland: buffer overflow in xkbvmodmasktext() | 7.8 High | Feb 25, 2025 |
| CVE-2025-26594 | X.org: xwayland: use-after-free of the root cursor | 7.8 High | Feb 25, 2025 |
| CVE-2025-0624 | Grub2: net: out-of-bounds write in grub_net_search_config_file() | 7.6 High | Feb 19, 2025 |
| CVE-2025-26465 | Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled | 6.8 Medium | Feb 18, 2025 |
| CVE-2025-1244 | Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme | 8.8 High | Feb 12, 2025 |
| CVE-2024-12243 | Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos | 5.3 Medium | Feb 10, 2025 |
| CVE-2024-12133 | Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos | 5.3 Medium | Feb 10, 2025 |
| CVE-2024-11218 | Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile | 8.6 High | Jan 22, 2025 |
| CVE-2024-12087 | A path traversal vulnerability exists in rsync | 6.5 Medium | Jan 14, 2025 |
| CVE-2024-12085 | A flaw was found in rsync which could be triggered when rsync compares file checksums | 7.5 High | Jan 14, 2025 |
| CVE-2024-11614 | An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature | 7.4 High | Dec 18, 2024 |
| CVE-2024-52337 | Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method | 5.5 Medium | Nov 26, 2024 |
| CVE-2024-10963 | Pam: improper hostname interpretation in pam_access leads to access control bypass | 7.4 High | Nov 7, 2024 |
| CVE-2024-9632 | Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability | 7.8 High | Oct 30, 2024 |
| CVE-2024-10041 | Pam: libpam: libpam vulnerable to read hashed password | 4.7 Medium | Oct 23, 2024 |
| CVE-2024-9050 | Networkmanager-libreswan: local privilege escalation via leftupdown | 7.8 High | Oct 22, 2024 |
| CVE-2024-9676 | Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) | 6.5 Medium | Oct 15, 2024 |
| CVE-2024-9407 | Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction | 4.7 Medium | Oct 1, 2024 |
| CVE-2024-9355 | Golang-fips: golang fips zeroed buffer | 6.5 Medium | Oct 1, 2024 |
| CVE-2024-7409 | Qemu: denial of service via improper synchronization in qemu nbd server during socket closure | 7.5 High | Aug 5, 2024 |
| CVE-2024-2236 | Libgcrypt: vulnerable to marvin attack | 5.9 Medium | Mar 6, 2024 |
| CVE-2024-0340 | Kernel: information disclosure in vhost/vhost.c:vhost_new_msg() | 4.4 Medium | Jan 9, 2024 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433