What’s Vulnerable › Products
Red Hat Enterprise Linux 8.8 Extended Update Support vulnerabilities
36 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 18 published in the last 12 months.
Check whether your Red Hat Enterprise Linux 8.8 Extended Update Support version is affected
Latest Red Hat Enterprise Linux 8.8 Extended Update Support vulnerabilities
- CVE-2025-4948 — Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup (CVSS 7.5)
- CVE-2025-46421 — Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server (CVSS 6.8)
- CVE-2025-46420 — Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c (CVSS 6.5)
- CVE-2025-32911 — Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value (CVSS 9.0)
- CVE-2025-32914 — Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process (CVSS 7.4)
- CVE-2025-32906 — Libsoup: out of bounds reads in soup_headers_parse_request() (CVSS 7.5)
- CVE-2025-32913 — Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header (CVSS 7.5)
- CVE-2025-32053 — Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVSS 6.5)
- CVE-2025-32052 — Libsoup: heap buffer overflow in sniff_unknown() (CVSS 6.5)
- CVE-2025-32050 — Libsoup: integer overflow in append_param_quoted (CVSS 5.9)
- CVE-2025-32049 — Libsoup: denial of service attack to websocket server (CVSS 7.5)
- CVE-2025-2784 — Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content (CVSS 6.5)
- CVE-2024-8176 — Libexpat: expat: improper restriction of xml entity expansion depth in libexpat (CVSS 7.5)
- CVE-2025-0624 — Grub2: net: out-of-bounds write in grub_net_search_config_file() (CVSS 7.6)
- CVE-2025-1244 — Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme (CVSS 8.8)
- CVE-2024-11218 — Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile (CVSS 8.6)
- CVE-2024-11614 — Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library (CVSS 7.4)
- CVE-2024-52337 — Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (CVSS 5.5)
- CVE-2024-9632 — Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVSS 7.8)
- CVE-2024-9050 — Networkmanager-libreswan: local privilege escalation via leftupdown (CVSS 7.8)
- CVE-2024-9675 — Buildah: buildah allows arbitrary directory mount (CVSS 4.4)
- CVE-2024-45770 — Pcp: pmpost symlink attack allows escalating pcp to root user (CVSS 4.4)
- CVE-2024-45769 — Pcp: pmcd heap corruption through metric pmstore operations (CVSS 5.5)
- CVE-2024-4467 — Qemu-kvm: 'qemu-img info' leads to host file read/write (CVSS 7.8)
- CVE-2024-5953 — 389-ds-base: malformed userpassword hash may cause denial of service (CVSS 5.7)