Red Hat Enterprise Linux For Eus vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Red Hat Enterprise Linux For Eus: 4 record(s), with affected versions and fixes.cpe:2.3:o:redhat:enterprise_linux_for_eus
CVE-2026-59849
High · 7.5
CWE-835 Jul 21, 2026
Libssh: libssh: denial of service via automatic certificate authentication loop
A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.
CVE-2026-59842
Medium · 5.3
CWE-125 Jul 21, 2026
Libssh: libssh: information disclosure via short gssapi curve25519 public key
A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.
CVE-2026-15370
High · 7.3
CWE-121 Jul 21, 2026
Libssh: libssh: stack buffer overflow in sftp server longname construction
A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.
CVE-2026-42009
High · 7.5
CWE-475 May 18, 2026
Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.