Browse CVEs

HIGH 7.8 CVE-2026-6384 A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's `ReadJeffsImage` function allows an attacker to wri… Enterprise Linux Mitigation only Fix from $1,9502026-04-15 MEDIUM 5.5 CVE-2026-5164 A flaw was found in virtio-win. The `RhelDoUnMap()` function does not properly validate the number of descriptors provided by a user during an unmap … Virtio Win Patch available Fix from $1,6002026-03-30 HIGH 7.8 CVE-2025-46397 A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function. Enterprise Linux No fix yet Fix from $1,9502025-04-23 HIGH 7.5 CVE-2023-46847EPSS 88% Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to he… Enterprise Linux Mitigation only Fix from $1,9502023-11-03 MEDIUM 5.5 CVE-2023-3164 A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw all… Enterprise Linux 4.6.0+ Fix from $1,6002023-11-02 MEDIUM 5.5 CVE-2023-38559 A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a den… Enterprise Linux 10.02.0+ Fix from $1,6002023-08-01 MEDIUM 6.5 CVE-2022-2211 A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the get_keys() function… Enterprise Linux No fix yet Fix from $1,6002022-07-12 HIGH 8.2 CVE-2021-4206 A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation of a smal… Enterprise Linux 7.0.0+ Fix from $1,9502022-04-29 HIGH 8.2 CVE-2021-4207 A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.he… Enterprise Linux 7.0.0+ Fix from $1,9502022-04-29 MEDIUM 5.5 CVE-2021-3569 A stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while decrypting data using RSA. This flaw could result in a SI… Enterprise Linux 0.7.2 / 0.8.0+ Fix from $1,6002021-06-03 CRITICAL 9.8 CVE-2021-20236 A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by… Ceph Storage 4.3.3+ Fix from $2,3002021-05-28 CRITICAL 9.8 CVE-2021-3466EPSS 9% A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attac… Enterprise Linux Patch available Fix from $2,3002021-03-25 MEDIUM 6.6 CVE-2020-14355 Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Bot… Openstack Patch available Fix from $1,6002020-10-07 MEDIUM 6.5 CVE-2018-14652 The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling t… Gluster Storage after 4.1.8 Fix from $1,6002018-10-31 MEDIUM 6.5 CVE-2017-2633 An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshin… Enterprise Linux Desktop 1.7.2+ Fix from $1,6002018-07-27 HIGH 7.5 CVE-2018-1054 An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A rem… Enterprise Linux Desktop after 1.4.0.6 Fix from $1,9502018-03-07 HIGH 7.5 CVE-2017-15134 A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x before 1.4.0.5 handled certain L… Enterprise Linux 1.3.6.13 / 1.3.7.9+ Fix from $1,9502018-03-01 MEDIUM 6.0 CVE-2016-7422 The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service … Openstack after 2.7.1 Fix from $1,6002016-12-10 CRITICAL 9.0 CVE-2015-7512EPSS 8% Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial… Enterprise Linux Desktop Mitigation only Fix from $2,3002016-01-08 HIGH 7.2 CVE-2013-4344 Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached devices, allows local users to … Enterprise Linux Desktop after 1.6.2 Fix from $1,9502013-10-04 HIGH 7.8 CVE-2013-0641 KEVEPSS 32% Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrar… Enterprise Linux Desktop 9.5.4 / 10.1.6+ Fix from $1,9502013-02-14 HIGH 7.5 CVE-2008-1677 Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of ser… Directory Server Mitigation only Fix from $1,9502008-05-12