Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-103963	Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service	7.5 High	Oct 30, 2026
CVE-2026-118475	Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk	3.6 Low	Oct 30, 2026
CVE-2026-112922	Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading	3.3 Low	Oct 30, 2026
CVE-2026-91920	Undertow: undertow: chunkreader message length permits chunk-size overflow	6.5 Medium	Oct 30, 2026
CVE-2026-110133	Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback	5.8 Medium	Oct 30, 2026
CVE-2026-93009	Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder	4.3 Medium	Oct 29, 2026
CVE-2026-93010	Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check	4.3 Medium	Oct 29, 2026
CVE-2026-93006	Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content	6.8 Medium	Oct 29, 2026
CVE-2026-93007	Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation	5.3 Medium	Oct 29, 2026
CVE-2026-93011	Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms	5.3 Medium	Oct 29, 2026
CVE-2026-93008	Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations	6.8 Medium	Oct 29, 2026
CVE-2026-85498	Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow	3.5 Low	Oct 29, 2026
CVE-2026-117548	389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service	6.5 Medium	Oct 29, 2026
CVE-2026-109411	Samba: access control bypass via vfs_ceph_rgw case-insensitive open	8.1 High	Oct 28, 2026
CVE-2026-116497	Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon	5.5 Medium	Oct 26, 2026
CVE-2026-115486	Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning	7.1 High	Oct 23, 2026
CVE-2026-115485	Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio	6.3 Medium	Oct 23, 2026
CVE-2026-115484	Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg	7.6 High	Oct 23, 2026
CVE-2026-115449	Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest	3.5 Low	Oct 22, 2026
CVE-2026-115221	Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership	5.4 Medium	Oct 22, 2026
CVE-2026-111079	Goose: goose: shell history and environment leak via terminal integration	7.4 High	Oct 22, 2026
CVE-2026-115207	Patch: filename validation bypass in reversal fallback allows file creation outside the working directory	5.5 Medium	Oct 22, 2026
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Medium	Oct 21, 2026
CVE-2026-85518	Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition	6.1 Medium	Oct 21, 2026
CVE-2026-114370	Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal	3.7 Low	Oct 21, 2026

Other Red Hat products