Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: stack exhaustion from infinite recursion in putsubimage()CVE-2023-43786Public exploitFix available5.5 Medium
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: out-of-bounds memory access in _xkbreadkeysyms()CVE-2023-43785Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreKernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swapCVE-2023-42756Fix available4.4 Medium
- redhat libnbd, red hat enterprise linux 8, enterprise linux 8 advanced virtualization +2 more +4 moreLibnbd: crash or misbehaviour when nbd server returns an unexpected block sizeCVE-2023-5215Fix available5.3 Medium
- red hat amq broker 7, rhel-8 based middleware containers, redhat jboss a-mq +2 more +4 moreOperator: passwords defined in secrets shown in statefulset yamlCVE-2023-40665.5 Medium
- redhat undertow, red hat build of quarkus, data grid 8 +25 more +27 moreUndertow: outofmemoryerror due to @multipartconfig handlingCVE-2023-3223Fix available7.5 High
- redhat a-mq streams, squareup okhttp, red hat amq streams 2.2.1 +1 more +3 moreRed hat a-mq streams: component version with information disclosure flawCVE-2023-0833Fix available4.7 Medium
- redhat apicast, red hat 3scale api management platform 2 +1 moreApicast proxies the api call with incorrect jwt token to the api backend without proper authorization checkCVE-2023-04567.4 High
- red hat amq broker 7, rhel-8 based middleware containers, redhat jboss a-mq +2 more +4 moreOperator: plaintext password in operator logCVE-2023-40655.5 Medium
- debian linux, linux kernel, red hat enterprise linux 6 +17 more +19 moreKernel: netfilter: potential slab-out-of-bound access due to integer underflowCVE-2023-42753Fix available7.0 High
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: xml external entity (xxe) injectionCVE-2022-4245Fix available4.3 Medium
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: directory traversalCVE-2022-4244Public exploitFix available7.5 High
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 morePossible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.cCVE-2023-5158Fix available6.5 Medium
- gnu glibc, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGlibc: dos due to memory leak in getaddrinfo.cCVE-2023-5156Fix available7.5 High
- openstack barbican, rdo openstack rdo, red hat openstack platform 13 (queens) +4 more +6 moreInsecure barbican configuration file leaking credentialCVE-2023-1633Fix available6.6 Medium
- openstack barbican, rdo openstack rdo, red hat openstack platform 13 (queens) +4 more +6 moreIncomplete container isolationCVE-2023-16366.0 Medium
- kubernetes kube-apiserver, red hat openshift container platform 4, openshift container platform 4.10 +5 more +7 moreKube-apiserver: privescCVE-2023-1260Fix available8.0 High
- kiali, red hat openshift service mesh 2.1, openshift service mesh 2.3 for rhel 8 +1 more +3 moreKiali: error message spoofing in kiali uiCVE-2022-3962Fix available4.3 Medium
- redhat single sign-on, red hat single sign-on 7, rhel-8 based middleware containers +4 more +6 moreRhsso-container-image: unsecured management interface exposed to adjecent networkCVE-2022-40398.0 High
- theforeman foreman, red hat satellite 6, redhat satellite +2 moreOs command injection via ct_command and fcct_commandCVE-2022-38748.0 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: deadlock in ksmbd_find_crypto_ctx()CVE-2023-32253Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd brute force delay bypass via asynchronous requestsCVE-2023-32251Fix available3.7 Low
- red hat openstack platform 13.0 (queens) for rhel 7.6 eus, openstack platform 13.0 - els, redhat openstack platform +2 moreInstack-undercloud: rsync leaks information to undercloudCVE-2022-3596Fix available7.5 High
- ovn open virtual network, fedora, red hat fast datapath for rhel 7 +6 more +8 moreService monitor mac flow is not rate limitedCVE-2023-3153Fix available5.3 Medium
- theforeman foreman, red hat satellite 6, redhat satellite +2 moreArbitrary code execution through yaml global parametersCVE-2023-04628.0 High
- theforeman foreman, red hat satellite 6.11 for rhel 7, satellite 6.11 for rhel 8 +4 more +6 moreForeman: arbitrary code execution through templatesCVE-2023-01189.1 Critical
- quarkus, red hat openshift serverless 1 on rhel 8, build of optaplanner 8 +20 more +22 moreQuarkus: http security policy bypassCVE-2023-4853Fix available8.1 High
- mariadb, fedoraproject fedora, red hat enterprise linux 7 +18 more +20 moreMariadb: node crashes with transport endpoint is not connected mysqld got signal 6CVE-2023-5157Fix available7.5 High
- gnu glibc, fedoraproject fedora, red hat enterprise linux 6 +28 more +30 moreGlibc: potential use-after-free in getaddrinfo()CVE-2023-4806Fix available5.9 Medium
- gnu glibc, fedoraproject fedora, netapp h300s firmware +31 more +33 moreGlibc: stack read overflow in getaddrinfo in no-aaaa modeCVE-2023-4527Fix available6.5 Medium
- red hat openstack platform 16.2, redhat openstack platform +1 morePlain-text passwords saved in /var/log/messagesCVE-2022-32614.4 Medium
- redhat network observability, red hat network-observability-1.1.0-rhel-8 +1 moreNetwork-observability-console-plugin-container: setting loki authtoken configuration to disable or host mode leads to authentication longer being enforcedCVE-2023-08137.5 High
- red hat rhods-1.22-rhel-8, redhat openshift data science +1 moreOdh-notebook-controller-container: missing authorization allows for file contents disclosureCVE-2023-09238.8 High
- kubernetes cri-o, redhat openshift container platform, red hat openshift container platform 3.11 +1 more +3 moreCri-o: security regression of cve-2022-27652CVE-2022-34664.8 Medium
- redhat quay, red hat quay 3 +1 moreQuay: cross-site request forgery (csrf) on config-editor pageCVE-2023-49596.5 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreLocal variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitializedCVE-2023-25586Fix available4.7 Medium
- qemu, red hat enterprise linux 9, redhat enterprise linux +7 more +9 moreDma reentrancy issue (incomplete fix for cve-2021-3750)CVE-2023-2680Fix available7.5 High
- shadow-maint shadow-utils, red hat enterprise linux 6, enterprise linux 7 +12 more +14 moreShadow-utils: possible password leak during passwd(1) changeCVE-2023-4641Fix available4.7 Medium
- gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 moreGlibc: potential use-after-free in gaih_inet()CVE-2023-4813Public exploitFix available5.9 Medium
- redhat keycloak, red hat single sign-on 7 +1 morePlaintext storage of user passwordCVE-2023-4918Fix available8.8 High
- red hat satellite 6.13 for rhel 8, satellite 6.14 for rhel 8, redhat satellite +2 moreForeman: stored cross-site scripting in host tabCVE-2023-0119Fix available5.4 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreUse after free race between mbind() and vma-locked page faultCVE-2023-4611Fix available7.0 High
- debian linux, linux kernel, fedora +5 more +7 moreKernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.cCVE-2023-4569Fix available5.5 Medium
- keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 moreKeylime: challenge-response protocol bypass during agent registrationCVE-2023-38201Fix available6.5 Medium
- artifex ghostscript, red hat enterprise linux 8, redhat enterprise linux +10 more +12 moreGhostscript: incomplete fix for cve-2020-16305CVE-2023-40425.5 Medium
- redhat subscription-manager, fedoraproject fedora, red hat enterprise linux 6 +30 more +32 moreSubscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configurationCVE-2023-3899Fix available7.8 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +12 more +14 moreKernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()CVE-2023-4459Fix available5.5 Medium
- red hat rhol-5.5-rhel-8, rhol-5.6-rhel-8, rhol-5.7-rhel-8 +1 more +3 moreOpenshift-logging: lokistack authorisation is cached too broadlyCVE-2023-44565.7 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreMemory leak in btrfs_get_dev_args_from_path()CVE-2023-4394Fix available6.7 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: btrfs: double free in btrfs_get_root_ref()CVE-2023-4389Fix available7.0 High
- Show moreLoading…