Redhat Enterprise Linux For Eus vulnerabilities

CVE-2026-42009 [HIGH] CWE-475 CVE-2026-42009: A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined beha

CVE-2026-59849 [HIGH] CWE-835 CVE-2026-59849: A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication ca A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.

CVE-2026-15370 [HIGH] CWE-121 CVE-2026-15370: A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.

CVE-2026-59842 [MEDIUM] CWE-125 CVE-2026-59842: A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 pub A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.

CVE-2024-0193 [MEDIUM] CWE-416 CVE-2024-0193: A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall elem A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalat