Red Hat Enterprise Linux 7 Extended Lifecycle Support

Vulnerabilities related to Red Hat Enterprise Linux 7 Extended Lifecycle Support 149

• High 7.3 Use-After-Free in GIMP Vulnerability in GIMP (CVE-2025-48798). Successful exploitation can lead to full system takeover. CVE-2025-48798 May 27, 2025
• High 7.3 Vulnerability in GIMP CVE-2025-48797 May 27, 2025
• Low 3.7 Vulnerability in libsoup HTTP library CVE-2025-4945 May 20, 2025
• High 7.5 Vulnerability in libsoup HTTP library CVE-2025-4948 May 20, 2025
• Critical 9.0 Vulnerability in libsoup CVE-2025-32911 Apr 16, 2025
• High 7.5 Out-of-Bounds Read in libsoup Vulnerability in libsoup (CVE-2025-32906). Risk of unauthorized operations or information disclosure. CVE-2025-32906 Apr 15, 2025
• High 7.5 Vulnerability in libsoup CVE-2025-32913 Apr 15, 2025
• High 7.4 Out-of-Bounds Read in libsoup Vulnerability in libsoup (CVE-2025-32914). Confidential information can be exposed externally. CVE-2025-32914 Apr 15, 2025
• High 7.5 Vulnerability in libsoup CVE-2025-32049 Apr 4, 2025
• High 7.0 Out-of-Bounds Read in libsoup Vulnerability in libsoup (CVE-2025-2784). Risk of unauthorized operations or information disclosure. CVE-2025-2784 Apr 3, 2025
• High 7.8 Use-After-Free in Tigervnc Vulnerability in Tigervnc (CVE-2025-26601). Successful exploitation can lead to full system takeover. CVE-2025-26601 Feb 26, 2025
• High 7.8 Use-After-Free in Tigervnc Vulnerability in Tigervnc (CVE-2025-26600). Successful exploitation can lead to full system takeover. CVE-2025-26600 Feb 26, 2025
• High 7.8 Vulnerability in Tigervnc CVE-2025-26599 Feb 26, 2025
• High 7.8 Out-of-Bounds Write in Tigervnc CVE-2025-26598 Feb 26, 2025
• High 7.8 Out-of-Bounds Write in Tigervnc CVE-2025-26596 Feb 26, 2025
• High 7.8 Vulnerability in Tigervnc CVE-2025-26595 Feb 26, 2025
• High 7.8 Use-After-Free in Tigervnc Vulnerability in Tigervnc (CVE-2025-26594). Successful exploitation can lead to full system takeover. CVE-2025-26594 Feb 26, 2025
• High 7.8 Buffer Overflow in Tigervnc Vulnerability in Tigervnc (CVE-2025-26597). Successful exploitation can lead to full system takeover. CVE-2025-26597 Feb 26, 2025
• High 7.6 Out-of-Bounds Write in grub2 CVE-2025-0624 Feb 20, 2025
• High 8.8 OS Command Injection in Emacs text editor CVE-2025-1244 Feb 13, 2025
• Medium 6.5 Path Traversal in Linux Samba CVE-2024-12087 Jan 15, 2025
• High 7.5 Vulnerability in Linux Samba CVE-2024-12085 Jan 15, 2025
• Medium 5.5 A log spoofing flaw was found in the Tuned package due to improper sanitization of some API... Vulnerability reported (CVE-2024-52337). Data can be tampered with by attackers. CVE-2024-52337 Nov 27, 2024
• High 7.8 Vulnerability in X.org server CVE-2024-9632 Oct 30, 2024
• High 7.8 Code Injection in libreswan client plugin for NetworkManager CVE-2024-9050 Oct 22, 2024
• Medium 6.5 Vulnerability in github.com/golang-fips/openssl CVE-2024-9355 Oct 2, 2024
• Medium 5.7 Vulnerability in 389-ds-base CVE-2024-8445 Sep 5, 2024
• Medium 5.7 389-ds-base: malformed userpassword hash may cause denial of service A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password. CVE-2024-5953 Jun 18, 2024
• High 8.1 libndpの脆弱性でバッファオーバーフローが起き、ローカルから悪用されるおそれ 2024年5月31日に公表された、libndpのバッファオーバーフローの脆弱性です。細工したIPv6ルーター通知パケットにより、NetworkManagerでバッファオーバーフローが起きるおそれがあり、CVSSv3の基本値は8.1です。1.0以上1.7-7未満の版が影響を受け、修正版は1.7-7です。修正版への更新を検討してください。 CVE-2024-5564 Jun 1, 2024