Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreQemu: virtio: dma reentrancy issue leads to double free vulnerabilityCVE-2024-3446Fix available8.2 High
- red hat jboss enterprise application platform, jboss enterprise application platform 7.1 eus for rhel 7, jboss enterprise application platform 7.3 eus for rhel 7 +7 more +9 moreEap: wildfly-elytron has a ssrf security issueCVE-2024-12337.3 High
- red hat openshift container platform 4, openshift container platform 4.12 +1 moreKube-controller-manager: malformed hpa v1 manifest causes crashCVE-2024-0793Fix available7.7 High
- mholt archiver, red hat advanced cluster security 3, advanced cluster security 4 +3 more +5 moreMholt/archiver: path traversal vulnerabilityCVE-2024-0406Public exploitFix available6.1 Medium
- red hat enterprise linux 8, enterprise linux 9 +1 moreRust-openssl: timing based side-channel can lead to a bleichenbacher style attackCVE-2024-32965.9 Medium
- red hat hawtio 4.0.0 for red hat build of apache camel 4, amq streams 2.7.0, build of apache camel 4 for quarkus 3 +9 more +11 moreQuarkus-core: leak of local configuration properties into quarkus applicationsCVE-2024-2700Fix available7.0 High
- red hat openshift virtualization 4Cnv: dos through repeatedly calling vm-dump-metrics until virt handler crashesCVE-2024-314206.5 Medium
- red hat openshift virtualization 4Cnv: information disclosure through the usage of vm-dump-metricsCVE-2024-314194.3 Medium
- red hat a-mq clients 2, ceq 3.2, cryostat 2 on rhel 8 +22 more +24 moreIo.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni supportCVE-2024-1300Fix available5.4 Medium
- tukaani xz, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreXz: malicious code in distributed sourceCVE-2024-3094Public exploitFix availableEPSS 90.9%10.0 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +10 more +12 morePcp: exposure of the redis server backend allows remote command execution via pmproxyCVE-2024-3019Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreCockpit: command injection when deleting a sosreport with a crafted nameCVE-2024-2947Fix available7.3 High
- red hat a-mq clients 2, ceq 3.2, cryostat 2 on rhel 8 +22 more +24 moreIo.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertxCVE-2024-1023Fix available6.5 Medium
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +2 moreFreeipa: specially crafted http requests potentially lead to denial of serviceCVE-2024-1481Fix available5.3 Medium
- red hat build of apache camel - hawtio 4, build of apache camel 4.4.0 for spring boot, build of apache camel for spring boot 3 +15 more +17 moreXnio: stackoverflowexception when the chain of notifier states becomes problematically bigCVE-2023-5685Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 moreGnutls: vulnerable to minerva side-channel information leakCVE-2024-28834Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGnutls: potential crash during chain building/verificationCVE-2024-28835Fix available5.0 Medium
- red hat nbde tang server, openshift developer tools and services, openshift pipelines +32 more +34 moreGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloadsCVE-2024-1394Fix available7.5 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreLibvirt: negative g_new0 length can lead to unbounded memory allocationCVE-2024-2494Fix available6.2 Medium
- red hat enterprise linux 8, enterprise linux 9 +1 moreOsbuild-composer: race condition may disable gpg verification for package repositoriesCVE-2024-2307Fix available6.1 Medium
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 8.6 extended update support +9 more +11 moreBuildah: buildah: container escape via improper bind mount validationCVE-2024-1753Fix available8.6 High
- libdwarf project libdwarf, fedoraproject fedora, red hat enterprise linux 7 +2 more +4 moreLibdwarf: crashes randomly on fuzzed objectCVE-2024-2002Fix available7.5 High
- es iperf3, red hat enterprise linux 7, enterprise linux 8 +5 more +7 moreIperf3: possible denial of serviceCVE-2023-7250Fix available5.3 Medium
- unixodbc, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreUnixodbc: out of bounds stack write due to pointer-to-integer types conversionCVE-2024-1013Fix available7.8 High
- redhat libvirt, debian linux, red hat enterprise linux 6 +5 more +7 moreLibvirt: null pointer dereference in udevconnectlistallinterfaces()CVE-2024-2496Fix available5.0 Medium
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.1 +4 more +6 moreTripleo-ansible: bind keys are world readableCVE-2023-6725Fix available5.5 Medium
- red hat build of quarkus, build of quarkus 3.2.11.final +1 moreQuarkus: information leak in annotationCVE-2024-1979Fix available3.5 Low
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 10 +5 more +7 moreOvn: insufficient validation of bfd packets may lead to denial of serviceCVE-2024-2182Fix available6.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreLibvirt: off-by-one error in udevlistinterfacesbystatus()CVE-2024-1441Public exploitFix available5.5 Medium
- red hat openshift container platform 4.13, openshift container platform 4.14, openshift container platform 4.15 +5 more +7 moreKubevirt-csi: persistentvolume allows access to hcp's root nodeCVE-2024-1725Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +7 more +9 moreLibgcrypt: vulnerable to marvin attackCVE-2024-2236Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +13 more +15 moreXorg-x11-server: use-after-free in procrenderaddglyphsCVE-2024-31083Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreXorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmapCVE-2024-31082Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +13 more +15 moreXorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdeviceCVE-2024-31081Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +13 more +15 moreXorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsCVE-2024-31080Fix available7.3 High
- redhat 3scale, red hat 3scale api management platform 2 +1 moreApicast: use_3scale_oidc_issuer_endpoint of token introspection policy isn't compatible with rh-sso 7.5 or later versionsCVE-2024-05606.3 Medium
- sgi performance co-pilot, red hat enterprise linux 6, enterprise linux 7 +3 more +5 morePcp: unsafe use of directories allows pcp to root privilege escalationCVE-2023-6917Fix available6.0 Medium
- redhat keycloak, red hat build of keycloak, single sign-on 7 +2 moreKeycloak-core: dos via account lockoutCVE-2024-1722Fix available3.7 Low
- netapp active iq unified manager, oncommand workflow automation, red hat openshift serverless +35 more +37 moreUndertow: out-of-memory error after several closed connections with wildfly-http-client protocolCVE-2024-1635Fix available7.5 High
- fedoraproject unbound, red hat enterprise linux 10, enterprise linux 6 +31 more +33 moreUnbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalationCVE-2024-1488Fix available8.0 High
- red hat openstack platform 16.1, openstack platform 16.2, openstack platform 17.0 +3 more +5 moreOpenstack: deleting a non existing access rule deletes another existing access rule in it's scopeCVE-2023-6110Fix available5.5 Medium
- devfile registry-support, red hat openshift developer tools and services, openshift container platform 4 +1 more +3 moreRegistry-support: decompress can delete files outside scope via relative pathsCVE-2024-1485Fix available8.0 High
- opensc project opensc, fedoraproject fedora, red hat enterprise linux 7 +3 more +5 moreOpensc: memory use after free in authentic driver when updating token infoCVE-2024-1454Fix available3.4 Low
- redhat undertow, red hat build of quarkus, data grid 8 +12 more +14 moreUndertow: directory traversal vulnerabilityCVE-2024-1459Fix available5.3 Medium
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: stack overflow problem in open vswitch kernel module leading to dosCVE-2024-1151Fix available5.5 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: race condition leads to use after free during vma lock in lock_vma_under_rcuCVE-2024-1312Fix available5.1 Medium
- fedoraproject fedora, red hat directory server 11.5 e4s for rhel 8, directory server 11.7 for rhel 8 +22 more +24 more389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)CVE-2024-1062Fix available5.5 Medium
- fedora, openvswitch, rdo openstack rdo +5 more +7 moreOpenvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packetCVE-2023-3966Fix available7.5 High
- debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 moreKernel: null pointer dereference in __nvmet_req_completeCVE-2023-6536Fix available6.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +22 more +24 moreKernel: null pointer dereference in nvmet_tcp_execute_requestCVE-2023-6535Fix available6.5 Medium
- Show moreLoading…