Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: information disclosure in vhost/vhost.c:vhost_new_msg()CVE-2024-0340Fix available4.4 Medium
- debian linux, linux kernel, fedoraproject fedora +4 more +6 moreKernel: aoe: improper reference count leads to use-after-free vulnerabilityCVE-2023-6270Fix available7.0 High
- redhat red hat developer hub, linuxfoundation backstage, red hat rhdh-1.1-rhel-9 +2 moreRhdh: catalog-import function leaks credentials to frontendCVE-2023-6944Fix available5.7 Medium
- packagekit project packagekit, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 morePackagekitd: use-after-free in idle function callbackCVE-2024-0217Fix available3.3 Low
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +26 more +28 moreKernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalationCVE-2024-0193Fix available7.8 High
- qemu, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreQemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()CVE-2023-6693Fix available4.9 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreKernel: refcount leak in ctnetlink_create_conntrack()CVE-2023-7192Fix available5.5 Medium
- latchset jwcrypto, fedoraproject fedora, red hat ansible automation platform 2 +7 more +9 moreJwcrypto: denail of service via specifically crafted jweCVE-2023-6681Fix available5.3 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uafCVE-2023-6531Fix available7.0 High
- red hat eap 7.4.13, jboss enterprise application platform 7.4 for rhel 8, jboss enterprise application platform 7.4 for rhel 9 +2 more +4 moreEap-7: heap exhaustion via deserializationCVE-2023-31717.5 High
- sudo project sudo, fedora, red hat enterprise linux 6 +3 more +5 moreSudo: improper handling of ipa_hostname leads to privilege mismanagementCVE-2023-7090Fix available6.6 Medium
- systemd project systemd, red hat cryostat 2, enterprise linux 8 +2 more +4 moreSystemd-resolved: unsigned name response in signed zone is not refused when dnssec=yesCVE-2023-7008Fix available5.9 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()CVE-2023-7042Fix available4.4 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +14 more +16 moreKernel: gsm multiplexing race condition leads to privilege escalationCVE-2023-6546Public exploitFix available7.0 High
- redhat keycloak, red hat migration toolkit for applications 6, migration toolkit for applications 7 +21 more +23 moreKeycloak: redirect_uri validation bypassCVE-2023-6291Fix available7.1 High
- libssh, fedoraproject fedora, red hat enterprise linux 7 +3 more +5 moreLibssh: proxycommand/proxyjump features allow injection of malicious code through hostnameCVE-2023-6004Fix available4.8 Medium
- libssh, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibssh: missing checks for return values for digestsCVE-2023-6918Fix available3.7 Low
- redhat keycloak, red hat build of keycloak 22, build of keycloak 22.0.8 +7 more +9 moreKeycloak: open redirect via "form_post.jwt" jarm response modeCVE-2023-6927Fix available4.6 Medium
- infinispan, red hat data grid 8.4.6, redhat data grid +1 more +3 moreInfinispan: credentials returned from configuration as clear textCVE-2023-5384Fix available7.2 High
- infinispan, red hat build of apache camel 4 for quarkus 3, build of apache camel for spring boot 4 +13 more +15 moreInfinispan: circular reference on marshalling leads to dosCVE-2023-5236Fix available4.4 Medium
- redhat ansible automation platform, debian linux, red hat ansible automation platform 1.2 +6 more +8 moreAnsible: malicious role archive can cause ansible-galaxy to overwrite arbitrary filesCVE-2023-5115Fix available6.3 Medium
- red hat service interconnect 1 for rhel 9, redhat service interconnect +1 moreSkupper-operator: privelege escalation via config mapCVE-2023-50566.8 Medium
- redhat satellite, red hat satellite 6.15 for rhel 8 +1 moreSatellite: arithmetic overflow in satelliteCVE-2023-43207.6 High
- infinispan, red hat data grid 8.4.4, jboss enterprise application platform 6 +3 more +5 moreInfinispan: non-admins should not be able to get cache config via rest apiCVE-2023-3629Fix available4.3 Medium
- infinispan, red hat data grid 8.4.4, jboss enterprise application platform 6 +3 more +5 moreInfispan: rest bulk ops don't check permissionsCVE-2023-3628Fix available6.5 Medium
- redhat keycloak, red hat build of keycloak 22, build of keycloak 22.0.7 +10 more +12 moreKeycloak: reflected xss via wildcard in oidc redirect_uriCVE-2023-6134Fix available4.6 Medium
- redhat keycloak, red hat build of keycloak, single sign-on 7.6 for rhel 7 +8 more +10 moreKeycloak: offline session token dosCVE-2023-6563Fix available7.7 High
- couchbase server, cryptography.io cryptography, red hat ansible automation platform 2 +8 more +10 morePython-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659CVE-2023-50782Fix available7.5 High
- debian linux, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +17 more +19 moreXorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderpropertyCVE-2023-6478Fix available7.6 High
- debian linux, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +17 more +19 moreXorg-x11-server: out-of-bounds memory reads/writes in xkb button actionsCVE-2023-6377Fix available7.8 High
- modcluster mod proxy cluster, red hat jboss core services for rhel 8, jboss core services on rhel 7 +3 more +5 moreMod_cluster/mod_proxy_cluster: stored cross site scriptingCVE-2023-6710Public exploit5.4 Medium
- redhat ansible, fedoraproject extra packages for enterprise linux, fedora +6 more +8 moreAnsible: template injectionCVE-2023-5764Fix available7.1 High
- redhat undertow, red hat build of quarkus, data grid 8 +12 more +14 moreUndertow: ajp request closes connection exceeding maxrequestsizeCVE-2023-5379Fix available7.5 High
- redhat advanced cluster security, red hat advanced cluster security 3, advanced cluster security 4.2 +2 moreStackrox: missing http security headers allows for clickjacking in web uiCVE-2023-49586.1 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreKernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.cCVE-2023-6679Fix available5.5 Medium
- quarkus, red hat build of quarkus, build of quarkus 2.13.9 +1 more +3 moreQuarkus: graphql operations over websockets bypassCVE-2023-6394Fix available7.4 High
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreKernel: null pointer dereference vulnerability in nft_dynset_init()CVE-2023-6622Fix available5.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +8 more +10 moreKernel: oob access in smb2_dump_detailCVE-2023-6610Fix available7.1 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreKernel: out-of-bounds read vulnerability in smbcalcsizeCVE-2023-6606Fix available7.1 High
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: io_uring out of boundary memory access in __io_uaddr_map()CVE-2023-6560Fix available5.5 Medium
- red hat build of quarkusQuarkus: potential invalid reuse of context when @cacheresult on a uni is usedCVE-2023-6393Fix available5.3 Medium
- red hat single sign-on 7Keycloak: ldap injection on username inputCVE-2022-2232Fix available7.5 High
- perl, red hat enterprise linux 6, enterprise linux 7 +2 more +4 morePerl: perl for windows binary hijacking vulnerabilityCVE-2023-470397.8 High
- perl, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 morePerl: write past buffer end via illegal user-defined unicode propertyCVE-2023-47038Fix available7.0 High
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreLibtiff: out-of-memory in tiffopen via a craft fileCVE-2023-6277Fix available6.5 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.cCVE-2023-5972Fix available7.0 High
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: nvme: memory corruption via unprivileged user passthroughCVE-2023-6238Fix available6.7 Medium
- libtiff, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreLibtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.cCVE-2023-6228Fix available3.3 Low
- gnu gnutls, debian linux, fedoraproject fedora +12 more +14 moreGnutls: timing side-channel in the rsa-psk authenticationCVE-2023-5981Fix available5.9 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: local dos vulnerability in scatterwalk_copychunksCVE-2023-6176Fix available4.7 Medium
- Show moreLoading…