rhvm-appliance vulnerabilities (Red Hat)
40 vulnerabilities.
-
rhvm-applianceRed Hat A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory... 6.5 Medium -
rhvm-applianceRed Hat Untrusted Search Path in PostgreSQL 7.3 High -
rhvm-applianceRed Hat It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly... 7.1 High -
rhvm-applianceRed Hat Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0... 9.8 Critical -
rhvm-applianceRed Hat Credential exposure through log files in Undertow 5.3 Medium -
rhvm-applianceRed Hat Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some... 5.6 Medium -
rhvm-applianceRed Hat Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors... 5.6 Medium -
rhvm-applianceRed Hat Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing... 5.6 Medium -
rhvm-applianceRed Hat Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors... 5.6 Medium -
rhvm-applianceRed Hat It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly... 7.5 High -
rhvm-applianceRed Hat Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode... 9.8 Critical -
rhvm-applianceRed Hat 0-byte record padding oracle 5.9 Medium -
rhvm-applianceRed Hat An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus... 5.5 Medium -
rhvm-applianceRed Hat A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could... 5.3 Medium -
rhvm-applianceRed Hat An allocation of memory without limits, that could result in the stack clashing with another... 7.5 High -
rhvm-applianceRed Hat An allocation of memory without limits, that could result in the stack clashing with another... 7.4 High -
rhvm-applianceRed Hat Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software... 4.7 Medium -
rhvm-applianceRed Hat Paramiko Authentication Bypass vulnerability 8.8 High -
rhvm-applianceRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Undertow 5.3 Medium -
rhvm-applianceRed Hat Uncontrolled Resource Consumption in Undertow 6.5 Medium -
rhvm-applianceRed Hat Dom4j contains a XML Injection vulnerability 7.5 High -
rhvm-applianceRed Hat Systems with microprocessors utilizing speculative execution and address translations may allow... 5.6 Medium -
rhvm-applianceRed Hat Systems with microprocessors utilizing speculative execution and address translations may allow... 5.6 Medium -
rhvm-applianceRed Hat A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to... 8.5 High -
rhvm-applianceRed Hat Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service 7.5 High -
rhvm-applianceRed Hat Improper Limitation of a Pathname to a Restricted Directory in WildFly 5.5 Medium -
rhvm-applianceRed Hat Apache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.* 8.1 High -
rhvm-applianceRed Hat The web console login form in ovirt-engine before version 4.2.3 returned different errors for non... 5.3 Medium -
rhvm-applianceRed Hat Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator 7.5 High -
rhvm-applianceRed Hat Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow 5.4 Medium -
rhvm-applianceRed Hat DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a... 7.5 High -
rhvm-applianceRed Hat Denial of Service in Google Guava 5.9 Medium -
rhvm-applianceRed Hat Incorrect Authorization in Undertow 4.8 Medium -
rhvm-applianceRed Hat Improper Access Control in SLF4J 9.8 Critical -
rhvm-applianceRed Hat Paramiko not properly checking authentication before processing other requests 9.8 Critical -
rhvm-applianceRed Hat FasterXML jackson-databind allows unauthenticated remote code execution 9.8 Critical -
rhvm-applianceRed Hat Deserialization of Untrusted Data in jackson-databind 8.1 High -
rhvm-applianceRed Hat Privilege Escalation in Hibernate Validator 7.0 High -
rhvm-applianceRed Hat jackson-databind is vulnerable to a deserialization flaw 9.8 Critical -
rhvm-applianceRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Jasypt 7.5 High