Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-7383	Libnbd: nbd server improper certificate validation	7.4 High	Aug 5, 2024
CVE-2024-3056	Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack	7.7 High	Aug 2, 2024
CVE-2024-6655	Gtk3: gtk2: library injection from cwd	7.0 High	Jul 16, 2024
CVE-2023-39329	Openjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c	6.5 Medium	Jul 13, 2024
CVE-2023-39327	Openjpeg: malicious files can cause the program to enter a large loop	4.3 Medium	Jul 13, 2024
CVE-2024-6501	A flaw was found in NetworkManager	3.1 Low	Jul 9, 2024
CVE-2024-6237	389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request	6.5 Medium	Jul 9, 2024
CVE-2023-39328	Openjpeg: denail of service via crafted image file	5.5 Medium	Jul 9, 2024
CVE-2024-6409	Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9	7.0 High	Jul 8, 2024
CVE-2024-6505	Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss	6.8 Medium	Jul 5, 2024
CVE-2024-6126	Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option	3.2 Low	Jul 3, 2024
CVE-2024-4467	Qemu-kvm: 'qemu-img info' leads to host file read/write	7.8 High	Jul 2, 2024
CVE-2024-6387	Openssh: regresshion - race condition in ssh allows rce/dos	8.1 High	Jul 1, 2024
CVE-2024-6239	Poppler: pdfinfo: crash in broken documents when using -dests parameter	7.5 High	Jun 21, 2024
CVE-2024-5953	389-ds-base: malformed userpassword hash may cause denial of service	5.7 Medium	Jun 18, 2024
CVE-2024-5742	Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file	6.7 Medium	Jun 12, 2024
CVE-2024-5154	Cri-o: malicious container can create symlink on host	8.1 High	Jun 12, 2024
CVE-2024-3183	Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force	8.1 High	Jun 12, 2024
CVE-2024-2698	Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service	8.8 High	Jun 12, 2024
CVE-2023-4727	Ca: token authentication bypass vulnerability	7.5 High	Jun 11, 2024
CVE-2024-3049	Booth: specially crafted hash can lead to invalid hmac being accepted by booth server	5.9 Medium	Jun 6, 2024
CVE-2024-5564	Libndp: buffer overflow in route information length field	8.1 High	May 31, 2024
CVE-2024-3657	389-ds-base: potential denial of service via specially crafted kerberos as-req request	7.5 High	May 28, 2024
CVE-2024-2199	389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c	5.7 Medium	May 28, 2024
CVE-2024-4693	Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash	5.5 Medium	May 10, 2024

Other Red Hat products