Red Hat Enterprise Linux Update Services For Sap Solutions vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Red Hat Enterprise Linux Update Services For Sap Solutions: 9 record(s), with affected versions and fixes.cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions
CVE-2026-31431
High · 7.8
KEV Urgent · 72 Public exploit CWE-669 Apr 22, 2026
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.
CVE-2026-34486
High · 7.5
KEV High · 68 Public exploit CWE-311 Apr 9, 2026
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor.
This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116.
Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.
CVE-2025-62230
High · 7.3
CWE-416 Oct 30, 2025
Xorg: xwayland: use-after-free in xkb client resource removal
A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected clients disconnect.
CVE-2025-62231
High · 7.3
CWE-190 Oct 30, 2025
Xorg: xmayland: value overflow in xkbsetcompatmap()
A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a crash.
CVE-2025-31277
High · 8.8
KEV High · 58 Public exploit CWE-119 Jul 29, 2025
Apple Multiple Products Buffer Overflow Vulnerability
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.
CVE-2024-12085
High · 7.5
CWE-908 Jan 14, 2025
Rsync: info leak via uninitialized stack contents
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
CVE-2023-4911
High · 7.8
KEV Urgent · 76 Public exploit CWE-787 Oct 3, 2023
GNU C Library Buffer Overflow Vulnerability
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
CVE-2021-40438
Critical · 9.0
KEV Urgent · 83 Public exploit Ransomware CWE-918 Sep 16, 2021
Apache HTTP Server-Side Request Forgery (SSRF)
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVE-2019-0211
High · 7.8
KEV Urgent · 70 Public exploit CWE-416 Apr 8, 2019
Apache HTTP Server Privilege Escalation Vulnerability
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.