RH
Product
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
On CISA KEVExploited in the wild
267
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 59High 174Medium 32Low 2
Watch
Add Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-3576 | 5.9 | Apr 15 | Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions Affected: All versions, or not specified |
| CVE-2024-3049 | 5.9 | Jun 6 | Booth: specially crafted hash can lead to invalid hmac being accepted by booth server Affected: All versions, or not specified |
| CVE-2026-23401 | 5.5 | Apr 1 | KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE Affected: All versions, or not specified |
| CVE-2026-20608 | 5.5 | Feb 11 | This issue was addressed through improved state management Affected: All versions, or not specified |
| CVE-2025-49178 | 5.5 | Jun 17 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore Affected: All versions, or not specified |
| CVE-2024-45769 | 5.5 | Sep 19 | Pcp: pmcd heap corruption through metric pmstore operations Affected: All versions, or not specified |
| CVE-2025-5318 | 5.4 | Jun 24 | Libssh: out-of-bounds read in sftp_handle() Affected: All versions, or not specified |
| CVE-2025-13465 | 5.3 | Jan 21 | Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Affected: All versions, or not specified |
| CVE-2025-32907 | 5.3 | Apr 14 | Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header Affected: All versions, or not specified |
| CVE-2026-23868 | 5.1 | Mar 10 | Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling Affected: All versions, or not specified |
| CVE-2025-4373 | 4.8 | May 6 | Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar Affected: All versions, or not specified |
| CVE-2024-45770 | 4.4 | Sep 19 | Pcp: pmpost symlink attack allows escalating pcp to root user Affected: All versions, or not specified |
| CVE-2026-20664 | 4.3 | Mar 25 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-28859 | 4.3 | Mar 25 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2026-20635 | 4.3 | Feb 11 | The issue was addressed with improved memory handling Affected: All versions, or not specified |
| CVE-2025-4945 | 3.7 | May 19 | Libsoup: integer overflow in cookie expiration date handling in libsoup Affected: All versions, or not specified |
| CVE-2026-4519 | 3.3 | Mar 20 | webbrowser.open() allows leading dashes in URLs Affected: All versions, or not specified |
