RH
Product
Red Hat Enterprise Linux 9.4 Extended Update Support
On CISA KEVExploited in the wild
150
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 23High 106Medium 21Low 1
Watch
Add Red Hat Enterprise Linux 9.4 Extended Update Support to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-26465 | 6.8 | Feb 18 | Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled Affected: All versions, or not specified |
| CVE-2026-39979 | 6.5 | Apr 13 | jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers Affected: All versions, or not specified |
| CVE-2026-33983 | 6.5 | Mar 30 | FreeRDP: Progressive Codec Quant BYTE Underflow - UB + CPU DoS Affected: All versions, or not specified |
| CVE-2026-28857 | 6.5 | Mar 25 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2025-12801 | 6.5 | Mar 4 | Nfs-utils: rpc.mountd in the nfs-utils privilege escalation Affected: All versions, or not specified |
| CVE-2025-14512 | 6.5 | Dec 11 | Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow Affected: All versions, or not specified |
| CVE-2025-6395 | 6.5 | Jul 10 | Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite() Affected: All versions, or not specified |
| CVE-2024-9355 | 6.5 | Oct 1 | Golang-fips: golang fips zeroed buffer Affected: All versions, or not specified |
| CVE-2024-2236 | 5.9 | Mar 6 | Libgcrypt: vulnerable to marvin attack Affected: All versions, or not specified |
| CVE-2026-23401 | 5.5 | Apr 1 | KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE Affected: All versions, or not specified |
| CVE-2024-10306 | 5.4 | Apr 23 | Mod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requests Affected: All versions, or not specified |
| CVE-2025-14831 | 5.3 | Feb 9 | Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification Affected: All versions, or not specified |
| CVE-2025-13465 | 5.3 | Jan 21 | Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Affected: All versions, or not specified |
| CVE-2025-32989 | 5.3 | Jul 10 | Gnutls: vulnerability in gnutls sct extension parsing Affected: All versions, or not specified |
| CVE-2024-12243 | 5.3 | Feb 10 | Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos Affected: All versions, or not specified |
| CVE-2024-12133 | 5.3 | Feb 10 | Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos Affected: All versions, or not specified |
| CVE-2026-23868 | 5.1 | Mar 10 | Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling Affected: All versions, or not specified |
| CVE-2025-4373 | 4.8 | May 6 | Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar Affected: All versions, or not specified |
| CVE-2024-9407 | 4.7 | Oct 1 | Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction Affected: All versions, or not specified |
| CVE-2026-20664 | 4.3 | Mar 25 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-28859 | 4.3 | Mar 25 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
Showing 21
