Skip to contentRed Hat Hardened Images vulnerabilities
- red hat hardened imagesDnf5: dnf5daemon-server: dnf5daemon-server: unauthenticated privileged cmdline package fetch/open via add_cmdline_packagesCVE-2026-1231778.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreCpio: cpio: stack-based buffer overflow in write_out_tar_header() with long usernames/groupnamesCVE-2026-1268315.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: out-of-bounds read in volume_id_get_buffer() via an offset+length wraparoundCVE-2026-1247465.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: cpio hardlink target not sanitized under feature_path_traversal_protectionCVE-2026-1247446.3 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: divide-by-zero and heap over-read in the volume_id hfs+ proberCVE-2026-1247435.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: divide-by-zero in the volume_id fat prober via a zero sectors_per_cluster valueCVE-2026-1247425.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: use-after-free of requested_ipv6 in udhcpc6CVE-2026-1247404.3 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: httpd password rule bypass for pre-compressed .gz files via accept-encoding: gzipCVE-2026-1247385.3 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: stack buffer overflow in udhcpc6 send_d6_renew() and send_d6_release()CVE-2026-1247417.6 High
- red hat enterprise linux 6, hardened images +1 moreBusybox: httpd stack buffer overflow via an "i:" rule in a subdirectory httpd.confCVE-2026-1247397.5 High
- red hat enterprise linux 6, hardened images +1 moreBusybox: heap buffer overflow in the tftp client on fallback to the default block sizeCVE-2026-1247377.5 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 morePodman: untrusted image labels allow auto-update to restart arbitrary systemd unitsCVE-2026-121885Fix available6.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: heap buffer overflow in wget ftp resume when the resume offset exceeds the reported file sizeCVE-2026-1247477.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibstdc++: overflow leaves streambuf in inconsistent state on i/o error.CVE-2026-1257094.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreOpenscap: one-byte heap buffer overflow in sds-compose may lead to denial-of-serviceCVE-2026-122056Public exploit5.9 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 gss-rpc client memory leak on xid mismatch retriesCVE-2026-112314Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory leak dos via auth_gssapi_init error pathsCVE-2026-112321Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory leak dos via gss-rpc auth flavor switchingCVE-2026-112320Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocationCVE-2026-112319Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointersCVE-2026-112318Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind authenticated memory leak dos in xdr_krb5_tl_data() decode failureCVE-2026-112316Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kdc unauthenticated memory leak dos in kdb keytab key decryption error pathCVE-2026-112317Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory leak dos in rpcsec_gss buffer decode failureCVE-2026-112315Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kdc unauthenticated cpu dos via quadratic asn.1 sequence of decodingCVE-2026-119079Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated memory exhaustion via failed auth_gssapi_init requestsCVE-2026-112323Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +5 more +7 moreKrb5: mit krb5 kadmind unauthenticated cpu dos via auth_gssapi client states cleanupCVE-2026-112322Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 morePodman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncationCVE-2026-123876Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreDbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored busCVE-2026-120749Fix available6.2 Medium
- red hat hardened imagesDnf5daemon-server: dnf5: dnf5daemon-server: missing session-owner check allows foreign d-bus callers to replace another client's resolved transactionCVE-2026-1112536.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tailCVE-2026-1231517.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatchCVE-2026-1219978.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression lengthCVE-2026-1219968.2 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tailCVE-2026-1219957.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply lengthCVE-2026-1219948.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: out-of-bounds read in std::from_charsCVE-2026-1154563.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreGcc: stack overflow in std::bitset on libstdc++CVE-2026-115455Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: integer wrap in `stdCVE-2026-114691Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGcc: confirmed out-of-bounds read/write in libstdc++ parallel `stdCVE-2026-114690Fix available6.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 morePatch: filename validation bypass in reversal fallback allows file creation outside the working directoryCVE-2026-115207Fix available5.5 Medium
- red hat agentic cluster security suite 0.2, cost management 4, advanced cluster security for kubernetes 4.11 +55 more +57 moreCa-certificates: distrust emudhra intermediate ca certificates due to security concernsCVE-2026-114406Fix available6.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreOpenscap: openscap: arbitrary file write via path traversal in source datastream decompositionCVE-2026-85518Fix available6.1 Medium
- red hat confidential compute attestation, dpu kit for nvidia, exploit intelligence +18 more +20 morePodman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layersCVE-2026-1142363.3 Low
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifactsCVE-2026-92824Fix available6.2 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yamlCVE-2026-928236.2 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +4 more +6 moreLibmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yamlCVE-2026-928226.2 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreBootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalizationCVE-2026-164607.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreLibarchive: libarchive: use-after-free via aliased mac metadata copyCVE-2026-17591Fix available3.6 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decodingCVE-2026-85977Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreLibtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decodingCVE-2026-852316.5 Medium
- red hat enterprise linux 6, hardened images +1 moreBusybox: tar deferred hardlink target resolved through a deferred symlink escapes the extraction directoryCVE-2026-1247456.3 Medium
- Show moreLoading…