Redhat Enterprise_linux_for_arm_64

46 CVEs affecting Redhat Enterprise_linux_for_arm_64. Latest disclosed: 2026-02-06. Critical: 3, High: 23.

Top CVEs affecting Redhat Enterprise_linux_for_arm_64
CVESeverityScorePublishedSummary
CVE-2026-1709Critical9.42026-02-06A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This auth…
CVE-2023-46846Critical9.32023-11-03SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall…
CVE-2021-40438Critical9.02021-09-16A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4…
CVE-2023-5869High8.82023-12-10A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modifi…
CVE-2019-11043High8.72019-10-28In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to writ…
CVE-2023-46847High8.62023-11-03Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory…
CVE-2024-6387High8.12024-07-01A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an uns…
CVE-2024-1488High8.02024-02-15A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configu…
CVE-2024-9675High7.82024-10-09A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a…
CVE-2024-0193High7.82024-01-02A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, th…
CVE-2023-3972High7.82023-11-01A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and director…
CVE-2023-5633High7.82023-10-23The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled wh…
CVE-2023-4911High7.82023-10-03A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a…
CVE-2023-3899High7.82023-08-23A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1…
CVE-2019-13272High7.82019-07-17In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relati…
CVE-2019-0211High7.82019-04-08In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including…
CVE-2025-13601High7.72025-11-26A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to…
CVE-2025-6021High7.52025-06-12A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue…
CVE-2025-1756High7.52025-02-27mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated pr…
CVE-2025-1755High7.52025-02-27MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with ele…