Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support
146 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-114406 | corrigé en 0:2026.2.92_v9.0.319-70.3.el7_9 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-18922 | | 389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl aux… | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-18453 | | 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search | HIGH 7.5 | 0.8 % | ||
| CVE-2026-18355 | | 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet() | HIGH 7.5 | 0.8 % | ||
| CVE-2026-76560 | | 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn | HIGH 7.5 | 0.6 % | ||
| CVE-2026-81665 | corrigé en 0:2.4.5-7.el7_9.4 | Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly | HIGH 7.5 | 0.4 % | ||
| CVE-2026-84268 | corrigé en 0:1.36.2-7.el7_9.1 | Gvfs: sftp: heap-based buffer overflow in read_reply() | HIGH 8.8 | 0.6 % | ||
| CVE-2026-83596 | corrigé en 0:2.54.0-1.el7_9 | Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature | HIGH 8.8 | 0.3 % | ||
| CVE-2026-78376 | corrigé en 0:2.54.0-1.el7_9 | Webkitgtk: use-after-free of jscvalue function parameters | HIGH 8.8 | 0.4 % | ||
| CVE-2026-18917 | corrigé en 0:4.5.0-36.el7_9.7 | Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow | HIGH 7.8 | 0.2 % | ||
| CVE-2026-73433 | corrigé en 0:1.10.4-4.el7_9.3 | Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write | MEDIUM 6.6 | 0.1 % | ||
| CVE-2026-73434 | corrigé en 0:1.10.4-4.el7_9.3 | Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing | MEDIUM 6.1 | 0.1 % | ||
| CVE-2026-63622 | corrigé en 0:4.5.0-36.el7_9.7 | Libvirt: swtpm privilege escalation via symlink following | HIGH 7.8 | 0.1 % | ||
| CVE-2026-19387 | corrigé en 0:1.10.4-8.el7_9 | Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder | HIGH 7.6 | 0.4 % | ||
| CVE-2026-15816 | corrigé en 0:033-577.el7_9 | Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() | HIGH 7.5 | 0.5 % | ||
| CVE-2026-18649 | corrigé en 0:1.10.4-4.el7_9.3 | Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders | HIGH 7.5 | 1.0 % | ||
| CVE-2026-11770 | | 389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check | HIGH 7.5 | 0.5 % | ||
| CVE-2026-15722 | | 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing | HIGH 7.5 | 0.8 % | ||
| CVE-2026-16313 | corrigé en 1:1.37-20.el7_9 | Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export | HIGH 7.6 | 0.3 % | ||
| CVE-2026-15588 | corrigé en 0:2.56.1-13.el7_9.1 | Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering | MEDIUM 5.3 | 0.5 % | ||
| CVE-2026-59692 | corrigé en 0:1.10.4-7.el7_9 | Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callback | HIGH 7.5 | 0.6 % | ||
| CVE-2026-59691 | corrigé en 0:1.10.4-7.el7_9 | Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer | HIGH 7.1 | 0.3 % | ||
| CVE-2026-11610 | | 389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind | HIGH 8.8 | 0.5 % | ||
| CVE-2026-14476 | corrigé en 0:1.16.5-10.el7_9.18 | Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass | HIGH 8.0 | 0.7 % | ||
| CVE-2026-14474 | corrigé en 0:1.16.5-10.el7_9.18 | Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation | HIGH 8.8 | 0.6 % | ||
| CVE-2026-58016 | corrigé en 0:2.56.1-13.el7_9 | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-58015 | corrigé en 0:2.56.1-13.el7_9.1 | Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive | HIGH 7.5 | 0.8 % | ||
| CVE-2026-58014 | corrigé en 0:2.56.1-13.el7_9.1 | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" | HIGH 8.6 | 0.6 % | ||
| CVE-2026-58013 | corrigé en 0:2.56.1-13.el7_9.1 | Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" | HIGH 8.2 | 0.5 % | ||
| CVE-2026-58012 | corrigé en 0:2.56.1-13.el7_9.1 | Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() | HIGH 8.2 | 0.5 % | ||
| CVE-2026-58011 | corrigé en 0:2.56.1-13.el7_9.1 | Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime | HIGH 7.5 | 0.5 % | ||
| CVE-2026-58010 | corrigé en 0:2.56.1-13.el7_9.1 | Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() | HIGH 8.2 | 0.5 % | ||
| CVE-2026-12912 | corrigé en 0:3.9.4-12.el7_9.3 | Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image | HIGH 7.3 | 0.4 % | ||
| CVE-2026-13601 | corrigé en 2:3.28.1-2.el7_9 | Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications | HIGH 7.1 | 0.2 % | ||
| CVE-2026-56208 | corrigé en 0:140.13.0-1.el7_9 | Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode | HIGH 7.6 | 0.6 % | ||
| CVE-2026-10649 | corrigé en 0:1.1.23-1.el7_9.2 | Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression | HIGH 8.6 | 0.6 % | ||
| CVE-2026-42014 | corrigé en 0:3.3.29-9.el7_9.2 | Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin | MEDIUM 6.6 | 0.1 % | ||
| CVE-2026-52722 | corrigé en 0:1.10.4-6.el7_9 | Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling | HIGH 7.1 | 0.4 % | ||
| CVE-2026-52720 | corrigé en 0:1.10.4-6.el7_9 | Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb | HIGH 8.8 | 0.6 % | ||
| CVE-2026-53705 | corrigé en 0:1.10.4-4.el7_9.1 | Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflow | HIGH 7.6 | 0.4 % | ||
| CVE-2026-54230 | corrigé en 0:2.1.11-62.el7_9 | Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites | HIGH 7.8 | 0.2 % | ||
| CVE-2026-54229 | corrigé en 0:2.1.11-61.el7_9 | Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking | HIGH 7.0 | 0.1 % | ||
| CVE-2026-54228 | corrigé en 0:2.1.11-61.el7_9 | Abrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directories | HIGH 7.8 | 0.1 % | ||
| CVE-2026-11774 | | 389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow | HIGH 7.6 | 0.7 % | ||
| CVE-2026-6893 | corrigé en 0:033-577.el7_9 | Dracut: dracut: root code execution via dhcp options command injection | HIGH 7.5 | 1.3 % | ||
| CVE-2026-11788 | | 389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser | HIGH 7.5 | 0.6 % | ||
| CVE-2026-50263 | corrigé en 0:1.20.4-35.el7_9 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-50262 | corrigé en 0:1.20.4-35.el7_9 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-50264 | corrigé en 0:1.20.4-35.el7_9 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat | HIGH 7.8 | 0.1 % | ||
| CVE-2026-50261 | corrigé en 0:1.20.4-35.el7_9 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50260 | corrigé en 0:1.20.4-35.el7_9 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50259 | corrigé en 0:1.20.4-35.el7_9 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50258 | corrigé en 0:1.20.4-35.el7_9 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50257 | corrigé en 0:1.20.4-35.el7_9 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() | HIGH 7.8 | 0.1 % | ||
| CVE-2026-50256 | corrigé en 0:1.20.4-35.el7_9 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length m… | HIGH 7.8 | 0.2 % | ||
| CVE-2026-10118 | corrigé en 0:0.22.5-7.el7_9 | Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication | HIGH 7.8 | 0.3 % | ||
| CVE-2026-4408 | corrigé en 0:4.10.16-26.el7_9.1 | Samba: remote code execution in samr | CRITICAL 9.8 | 2.5 % | ||
| CVE-2026-42015 | corrigé en 0:3.3.29-9.el7_9.2 | Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling | MEDIUM 5.3 | 0.7 % | ||
| CVE-2026-42013 | corrigé en 0:3.3.29-9.el7_9.2 | Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name | HIGH 8.2 | 0.4 % | ||
| CVE-2026-42012 | corrigé en 0:3.3.29-9.el7_9.2 | Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans | HIGH 7.1 | 0.4 % | ||
| CVE-2026-48864 | corrigé en 0:0.6.34-4.el7_9.1 | Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data | HIGH 7.8 | 0.2 % | ||
| CVE-2026-4480 | corrigé en 0:4.10.16-26.el7_9.1 | Samba: samba: remote code execution in printing subsystem via unescaped job description | CRITICAL 9.8 | 14 % | ||
| CVE-2026-9064 | | 389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos) | HIGH 7.5 | 0.8 % | ||
| CVE-2026-42009 | corrigé en 0:3.3.29-9.el7_9.1 | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability | HIGH 7.5 | 1.3 % | ||
| CVE-2026-42011 | corrigé en 0:3.3.29-9.el7_9.2 | Gnutls: gnutls: security bypass due to incorrect name constraint handling | HIGH 7.4 | 0.5 % | ||
| CVE-2026-34002 | corrigé en 0:1.20.4-34.el7_9 | Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-34000 | corrigé en 0:1.20.4-34.el7_9 | Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-33846 | corrigé en 0:3.3.29-9.el7_9.1 | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly | HIGH 7.5 | 1.3 % | ||
| CVE-2026-33845 | corrigé en 0:3.3.29-9.el7_9.1 | Gnutls: gnutls: denial of service via dtls zero-length fragment | CRITICAL 9.1 | 2.1 % | ||
| CVE-2026-3833 | corrigé en 0:3.3.29-9.el7_9.2 | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison | HIGH 7.4 | 0.6 % | ||
| CVE-2026-34003 | corrigé en 0:1.20.4-34.el7_9 | Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access | HIGH 7.8 | 0.3 % | ||
| CVE-2026-34001 | corrigé en 0:1.20.4-34.el7_9 | Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption | HIGH 7.8 | 0.3 % | ||
| CVE-2026-33999 | corrigé en 0:1.20.4-34.el7_9 | Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling | HIGH 7.8 | 0.4 % | ||
| CVE-2026-35092 | corrigé en 0:2.4.5-7.el7_9.3 | Corosync: corosync: denial of service via integer overflow in join message validation | HIGH 7.5 | 1.0 % | ||
| CVE-2026-35091 | corrigé en 0:2.4.5-7.el7_9.3 | Corosync: corosync: denial of service and information disclosure via crafted udp packet | HIGH 8.2 | 0.9 % | ||
| CVE-2026-5201 | corrigé en 0:2.36.12-5.el7_9 | Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image | HIGH 7.5 | 1.1 % | ||
| CVE-2026-5121 | corrigé en 0:3.1.2-14.el7_9.2 | Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing | CRITICAL 9.8 | 1.1 % | ||
| CVE-2026-5119 | corrigé en 0:2.62.2-12.el7_9 | Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment | HIGH 8.2 | 0.3 % | ||
| CVE-2026-4887 | corrigé en 2:2.8.22-1.el7_9.6 | Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image | HIGH 7.1 | 0.6 % | ||
| CVE-2026-4775 | corrigé en 0:3.9.4-12.el7_9.2 | Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing | HIGH 7.8 | 0.6 % | ||
| CVE-2026-4424 | corrigé en 0:3.1.2-14.el7_9.2 | Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing | HIGH 7.5 | 1.3 % | ||
| CVE-2025-14905 | | 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow | HIGH 7.2 | 1.3 % | ||
| CVE-2026-1761 | corrigé en 0:2.62.2-11.el7_9 | Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response | HIGH 8.6 | 1.1 % | ||
| CVE-2026-0719 | corrigé en 0:2.62.2-11.el7_9 | Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication | HIGH 8.6 | 0.6 % | ||
| CVE-2025-14523 | corrigé en 0:2.62.2-10.el7_9 | Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) | HIGH 8.2 | 0.5 % | ||
| CVE-2025-14087 | corrigé en 0:2.56.1-12.el7_9 | Glib: glib: buffer underflow in gvariant parser leads to heap corruption | CRITICAL 9.8 | 0.8 % | ||
| CVE-2025-66287 | corrigé en 0:2.50.3-2.el7_9 | Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash | HIGH 8.8 | 0.5 % | ||
| CVE-2025-13947 | corrigé en 0:2.50.3-2.el7_9 | Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop | HIGH 7.4 | 0.3 % | ||
| CVE-2025-13601 | corrigé en 0:2.56.1-11.el7_9 | Glib: integer overflow in in g_escape_uri_string() | HIGH 7.7 | 0.3 % | ||
| CVE-2025-13502 | corrigé en 0:2.50.3-2.el7_9 | Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos | HIGH 7.5 | 0.6 % | ||
| CVE-2025-61662 | corrigé en 1:2.02-0.87.el7_9.16 | Grub2: missing unregister call for gettext command may lead to use-after-free | HIGH 7.8 | 0.2 % | ||
| CVE-2025-59089 | corrigé en 0:0.3.2-3.el7_9.3 | Python-kdcproxy: remote dos via unbounded tcp upstream buffering | MEDIUM 5.9 | 0.6 % | ||
| CVE-2025-59088 | corrigé en 0:0.3.2-3.el7_9.3 | Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv | HIGH 8.6 | 0.5 % | ||
| CVE-2025-62229 | corrigé en 0:1.20.4-33.el7_9 | Xorg: xmayland: use-after-free in xpresentnotify structure creation | HIGH 7.3 | 0.5 % | ||
| CVE-2025-62230 | corrigé en 0:1.20.4-33.el7_9 | Xorg: xwayland: use-after-free in xkb client resource removal | HIGH 7.3 | 0.3 % | ||
| CVE-2025-62231 | corrigé en 0:1.20.4-33.el7_9 | Xorg: xmayland: value overflow in xkbsetcompatmap() | HIGH 7.3 | 0.3 % | ||
| CVE-2025-11561 | corrigé en 0:1.16.5-10.el7_9.17 | Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems | HIGH 8.8 | 0.8 % | ||
| CVE-2025-7493 | corrigé en 0:4.6.8-5.el7_9.23 | Freeipa: idm: privilege escalation from host to domain admin in freeipa | CRITICAL 9.1 | 0.6 % | ||
| CVE-2025-11021 | corrigé en 0:2.62.2-9.el7_9 | Libsoup: out-of-bounds read in cookie date handling of libsoup http library | HIGH 7.5 | 0.6 % | ||
| CVE-2025-9900 | corrigé en 0:3.9.4-12.el7_9.1 | Libtiff: libtiff write-what-where | HIGH 8.8 | 1.0 % | ||
| CVE-2025-8067 | corrigé en 0:2.8.4-1.el7_9.2 | Udisks: out-of-bounds read in udisks daemon | HIGH 8.5 | 0.7 % | ||
| CVE-2025-8941 | corrigé en 0:1.1.8-23.el7_9.2 | Linux-pam: incomplete fix for cve-2025-6020 | HIGH 7.8 | 0.3 % | ||
| CVE-2025-7425 | corrigé en 0:2.9.1-6.el7_9.12 | Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr | HIGH 7.8 | 0.4 % | ||
| CVE-2025-7345 | corrigé en 0:2.36.12-4.el7_9 | Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf | HIGH 7.5 | 1.3 % | ||
| CVE-2025-6019 | corrigé en 0:2.18-5.el7_9.1 | Libblockdev: lpe from allow_active to root in libblockdev via udisks | HIGH 7.0 | 0.5 % | ||
| CVE-2025-49180 | corrigé en 0:1.20.4-32.el7_9 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension | HIGH 7.8 | 0.3 % | ||
| CVE-2025-49179 | corrigé en 0:1.20.4-32.el7_9 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension | HIGH 7.3 | 0.3 % | ||
| CVE-2025-49178 | corrigé en 0:1.20.4-32.el7_9 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-49176 | corrigé en 0:1.20.4-32.el7_9 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension | HIGH 7.3 | 0.4 % | ||
| CVE-2025-49175 | corrigé en 0:1.20.4-32.el7_9 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors | MEDIUM 6.1 | 0.3 % | ||
| CVE-2025-4404 | corrigé en 0:4.6.8-5.el7_9.18 | Freeipa: idm: privilege escalation from host to domain admin in freeipa | CRITICAL 9.1 | 2.0 % | ||
| CVE-2025-6020 | corrigé en 0:1.1.8-23.el7_9.1 | Linux-pam: linux-pam directory traversal | HIGH 7.8 | 0.5 % | ||
| CVE-2025-49794 | corrigé en 0:2.9.1-6.el7_9.10 | Libxml: heap use after free (uaf) leads to denial of service (dos) | CRITICAL 9.1 | 0.8 % | ||
| CVE-2025-49796 | corrigé en 0:2.9.1-6.el7_9.10 | Libxml: type confusion leads to denial of service (dos) | CRITICAL 9.1 | 1.6 % | ||
| CVE-2025-6021 | corrigé en 0:2.9.1-6.el7_9.10 | Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 | HIGH 7.5 | 1.4 % | ||
| CVE-2025-5914 | corrigé en 0:3.1.2-14.el7_9.1 | Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c | HIGH 7.8 | 0.5 % | ||
| CVE-2025-48798 | corrigé en 2:2.8.22-1.el7_9.2 | Gimp: multiple use after free in xcf parser | HIGH 7.3 | 0.2 % | ||
| CVE-2025-48797 | corrigé en 2:2.8.22-1.el7_9.2 | Gimp: multiple heap buffer overflows in tga parser | HIGH 7.3 | 0.3 % | ||
| CVE-2025-4945 | corrigé en 0:2.62.2-9.el7_9 | Libsoup: integer overflow in cookie expiration date handling in libsoup | LOW 3.7 | 0.7 % | ||
| CVE-2025-4948 | corrigé en 0:2.62.2-9.el7_9 | Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup | HIGH 7.5 | 0.8 % | ||
| CVE-2025-32911 | corrigé en 0:2.62.2-9.el7_9 | Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value | CRITICAL 9.0 | 1.0 % | ||
| CVE-2025-32914 | corrigé en 0:2.62.2-9.el7_9 | Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process | HIGH 7.4 | 0.8 % | ||
| CVE-2025-32906 | corrigé en 0:2.62.2-9.el7_9 | Libsoup: out of bounds reads in soup_headers_parse_request() | HIGH 7.5 | 1.0 % | ||
| CVE-2025-32913 | corrigé en 0:2.62.2-9.el7_9 | Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no valu… | HIGH 7.5 | 0.8 % | ||
| CVE-2025-32049 | corrigé en 0:2.62.2-9.el7_9 | Libsoup: denial of service attack to websocket server | HIGH 7.5 | 0.9 % | ||
| CVE-2025-2784 | corrigé en 0:2.62.2-9.el7_9 | Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content | HIGH 7.0 | 0.9 % | ||
| CVE-2025-26601 | corrigé en 0:1.8.0-36.el7_9 | Xorg: xwayland: use-after-free in syncinittrigger() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26600 | corrigé en 0:1.8.0-36.el7_9 | Xorg: xwayland: use-after-free in playreleasedevents() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26599 | corrigé en 0:1.8.0-36.el7_9 | Xorg: xwayland: use of uninitialized pointer in compredirectwindow() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26598 | corrigé en 0:1.8.0-36.el7_9 | Xorg: xwayland: out-of-bounds write in createpointerbarrierclient() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26597 | corrigé en 0:1.8.0-36.el7_9 | Xorg: xwayland: buffer overflow in xkbchangetypesofkey() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26596 | corrigé en 0:1.8.0-36.el7_9 | Xorg: xwayland: heap overflow in xkbwritekeysyms() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26595 | corrigé en 0:1.8.0-36.el7_9 | Xorg: xwayland: buffer overflow in xkbvmodmasktext() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26594 | corrigé en 0:1.8.0-36.el7_9 | X.org: xwayland: use-after-free of the root cursor | HIGH 7.8 | 0.4 % | ||
| CVE-2025-0624 | corrigé en 1:2.02-0.87.el7_9.15 | Grub2: net: out-of-bounds write in grub_net_search_config_file() | HIGH 7.6 | 1.4 % | ||
| CVE-2025-1244 | corrigé en 1:24.3-23.el7_9.2 | Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme | HIGH 8.8 | 2.6 % | ||
| CVE-2024-12087 | corrigé en 0:3.1.2-12.el7_9.2 | Rsync: path traversal vulnerability in rsync | HIGH 7.5 | 2.3 % | ||
| CVE-2024-12085 | corrigé en 0:3.1.2-12.el7_9.1 | Rsync: info leak via uninitialized stack contents | HIGH 7.5 | 8.6 % | ||
| CVE-2024-52337 | corrigé en 0:2.11.0-13.el7_9 | Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method | MEDIUM 5.5 | 0.3 % | ||
| CVE-2024-9632 | corrigé en 0:1.8.0-34.el7_9 | Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability | HIGH 7.8 | 0.9 % | ||
| CVE-2024-9050 | corrigé en 0:1.2.4-4.el7_9 | Networkmanager-libreswan: local privilege escalation via leftupdown | HIGH 7.8 | 0.5 % | ||
| CVE-2024-9355 | corrigé en 0:0.10-2.el7_9 | Golang-fips: golang fips zeroed buffer | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-8445 | corrigé en 0:1.3.11.1-7.el7_9 | 389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199) | MEDIUM 5.7 | 0.4 % | ||
| CVE-2024-5953 | | 389-ds-base: malformed userpassword hash may cause denial of service | MEDIUM 5.7 | 0.6 % | ||
| CVE-2024-5564 | corrigé en 0:1.2-10.el7_9 | Libndp: buffer overflow in route information length field | HIGH 8.1 | 1.2 % | ||
| CVE-2023-46846 | corrigé en 7:3.5.20-17.el7_9.13 | Squid: request/response smuggling in http/1.1 and icap | CRITICAL 9.3 | 7.2 % |