Product by Red Hat
Enterprise Linux Update Services For Sap Solutions
37 known vulnerabilities in Enterprise Linux Update Services For Sap Solutions (Red Hat), 7 of them actively exploited (CISA KEV).
Key figures
37
Vulnerabilities
7
Actively exploited (KEV)
1
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-40438 | mod_proxy SSRF In CISA KEVRansomwarealso in 39 other products | 9.0 | |
| Critical | CVE-2026-46300 | Linux Kernel Missing Initialization of a Variable Vulnerability In CISA KEValso in 12 other products | 7.8 | |
| Critical | CVE-2026-31431 | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability In CISA KEValso in 37 other products | 7.8 | |
| Critical | CVE-2026-34486 | Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor In CISA KEValso in 7 other products | 7.5 | |
| Critical | CVE-2023-4911 | Glibc: buffer overflow in ld.so leading to privilege escalation In CISA KEValso in 46 other products | 7.8 | |
| Critical | CVE-2019-0211 | Apache HTTP Server Privilege Escalation Vulnerability In CISA KEValso in 27 other products | 7.8 | |
| Critical | CVE-2025-31277 | Apple Multiple Products Buffer Overflow Vulnerability In CISA KEValso in 20 other products | 8.8 | |
| High | CVE-2025-3155 | Yelp: arbitrary file read | 7.4 | |
| High | CVE-2024-12085 | Rsync: info leak via uninitialized stack contents | 7.5 | |
| High | CVE-2024-12088 | Rsync: --safe-links option bypass leads to path traversal | 6.5 | |
| High | CVE-2019-6470 | dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries | 6.5 | |
| High | CVE-2024-3183 | Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force | 8.1 | |
| High | CVE-2026-5201 | Red Hat: Heap-based Buffer Overflow | 7.5 | |
| High | CVE-2024-12087 | Rsync: path traversal vulnerability in rsync | 6.5 | |
| Medium | CVE-2020-14355 | Spice: Classic Buffer Overflow | 6.6 | |
| High | CVE-2026-4775 | Red Hat: Integer Overflow or Wraparound | 7.8 | |
| Critical | CVE-2026-58016 | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" | 9.1 | |
| High | CVE-2024-0229 | Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access | 7.8 | |
| High | CVE-2026-58379 | Gimp: gimp: heap buffer overflow in read_channel_data() | 7.3 | |
| High | CVE-2022-24805 | Net-SNMP: Classic Buffer Overflow | 6.5 | |
| High | CVE-2023-3758 | Sssd: race condition during authorization leads to gpo policies functioning inconsistently | 7.1 | |
| Medium | CVE-2022-24808 | Net-SNMP: NULL Pointer Dereference | 6.5 | |
| Medium | CVE-2022-24809 | Net-SNMP: NULL Pointer Dereference | 6.5 | |
| Medium | CVE-2022-24806 | Net-SNMP: Improper Input Validation | 6.5 | |
| Medium | CVE-2022-24807 | Net-SNMP: Classic Buffer Overflow | 6.5 |
News
- PHP2Shell plus Fragnesia: A dangerous new route from web server to rootcsoonline,
- Human oversight is still critical as AI patching tools miss security riskscsoonline,
- CISA Adds Five CVEs to Known Exploited Vulnerabilities Catalogsans-newsbites-mail,
- Frontier LLMs Generate Flawed Patchessans-newsbites-mail,
- 16-year-old KVM flaw allows attackers to escape VMs and take over Linux serverscsoonline,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 20sans-atrisk,