What’s Vulnerable › Products
Red Hat Enterprise Linux 8.4 Telecommunications Update Service vulnerabilities
21 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.
Latest Red Hat Enterprise Linux 8.4 Telecommunications Update Service vulnerabilities
- CVE-2025-46421 — Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server (CVSS 6.8)
- CVE-2025-46420 — Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c (CVSS 6.5)
- CVE-2025-32911 — Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value (CVSS 9.0)
- CVE-2025-32906 — Libsoup: out of bounds reads in soup_headers_parse_request() (CVSS 7.5)
- CVE-2025-32913 — Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header (CVSS 7.5)
- CVE-2024-8176 — Libexpat: expat: improper restriction of xml entity expansion depth in libexpat (CVSS 7.5)
- CVE-2025-0624 — Grub2: net: out-of-bounds write in grub_net_search_config_file() (CVSS 7.6)
- CVE-2025-1244 — Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme (CVSS 8.8)
- CVE-2024-52337 — Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVSS 5.5)
- CVE-2024-9632 — Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVSS 7.8)
- CVE-2024-9050 — Networkmanager-libreswan: local privilege escalation via leftupdown (CVSS 7.8)
- CVE-2024-45770 — Pcp: pmpost symlink attack allows escalating pcp to root user (CVSS 4.4)
- CVE-2024-45769 — Pcp: pmcd heap corruption through metric pmstore operations (CVSS 5.5)
- CVE-2024-4467 — Qemu-kvm: 'qemu-img info' leads to host file read/write (CVSS 7.8)
- CVE-2023-4727 — Ca: token authentication bypass vulnerability (CVSS 7.5)
- CVE-2024-5564 — Libndp: buffer overflow in route information length field (CVSS 8.1)
- CVE-2024-31083 — Xorg-x11-server: use-after-free in procrenderaddglyphs (CVSS 7.8)
- CVE-2024-31081 — Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice (CVSS 7.3)
- CVE-2024-31080 — Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents (CVSS 7.3)
- CVE-2024-3019 — Pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVSS 8.8)
- CVE-2024-21885 — Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent (CVSS 7.8)
- CVE-2023-39417 — Postgresql: extension script @substitutions@ within quoting allow sql injection (CVSS 8.8)