Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- redhat keycloak, red hat build of keycloak, build of keycloak 22 +11 more +13 moreKeycloak: potential bypass of brute force protectionCVE-2024-4629Fix available6.5 Medium
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: uninitialized values after incorrect or missing checking return values of functions in libopenscCVE-2024-45617Fix available3.9 Low
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: incorrect handling of the length of buffers or files in pkcs15initCVE-2024-45620Fix available3.9 Low
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: incorrect handling length of buffers or files in libopenscCVE-2024-45619Fix available4.3 Medium
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15initCVE-2024-45618Fix available3.9 Low
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: uninitialized values after incorrect check or usage of apdu response values in libopenscCVE-2024-45616Fix available3.9 Low
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15initCVE-2024-45615Fix available3.9 Low
- redhat kroxylicious, red hat streams for apache kafka, streams for apache kafka 2.8.0 +2 moreKroxylicious: missing upstream kafka tls hostname verificationCVE-2024-8285Fix available5.9 Medium
- redhat libvirt, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibvirt: crash of virtinterfaced via virconnectlistinterfaces()CVE-2024-8235Fix available6.2 Medium
- red hat hawtio 4.0.0 for red hat build of apache camel 4, build of apache camel 3.20.7 for spring boot, build of apache camel 4.4.2 for spring boot +26 more +28 moreUndertow: improper state management in proxy protocol parsing causes information leakageCVE-2024-7885Fix available7.5 High
- redhat openstack platform, red hat openstack platform 16.1, openstack platform 16.2 +2 more +4 moreOpenstack-tripleo-common: rhosp director disables tls verification for registry mirrorsCVE-2024-8007Fix available8.1 High
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift-console: oauth2 insufficient state parameter entropyCVE-2024-65088.0 High
- qemu, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()CVE-2024-7730Fix available7.4 High
- theforeman foreman, red hat satellite 6 +1 moreForeman: command injection in "host init config" template via "install packages" field on foremanCVE-2024-77006.5 Medium
- red hat fence agents remediation 0.4 for rhel 8Fence-agents-remediation: fence agent command line options leads to remote code executionCVE-2024-56518.8 High
- redhat openshift ai, red hat openshift data science (rhods), rhoai-2.14-rhel-8 +1 more +3 moreOdh-dashboard: odh-model-controller: cross-model authentication bypass in openshift aiCVE-2024-75578.8 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +5 more +7 moreUnbound: heap-buffer-overflow in unboundCVE-2024-43168Fix available4.8 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +5 more +7 moreUnbound: null pointer dereference in unboundCVE-2024-43167Fix available2.8 Low
- pulpproject pulp, red hat ansible automation platform 2, satellite 6 +1 more +3 morePulpcore: rbac permissions incorrectly assigned in tasks that create objectsCVE-2024-71436.7 Medium
- libtiff, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreLibtiff: null pointer dereference in tif_dirinfo.cCVE-2024-7006Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +11 more +13 moreQemu: denial of service via improper synchronization in qemu nbd server during socket closureCVE-2024-7409Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8 advanced virtualization +1 more +3 moreLibnbd: nbd server improper certificate validationCVE-2024-7383Fix available7.4 High
- podman project podman, fedoraproject fedora, red hat enterprise linux 10 +7 more +9 morePodman: kernel: containers in shared ipc namespace are vulnerable to denial of service attackCVE-2024-3056Fix available7.7 High
- openstack heat, red hat openstack platform 13 (queens), openstack platform 16.1 +3 more +5 moreOpenstack-heat: incomplete fix for cve-2023-1625CVE-2024-73195.0 Medium
- red hat openshift container platform 3.11, openshift container platform 4.16, openshift container platform 4.17 +1 more +3 moreOpenshift-console: unauthenticated data exposureCVE-2024-71285.3 Medium
- red hat openshift container platform 3.11, openshift container platform 4, redhat openshift container platform +2 moreOpenshift-console: unauthenticated installation of helm chartsCVE-2024-70796.5 Medium
- red hat service interconnect 1, service interconnect 1 for rhel 9, service interconnect 1.4 for rhel 9 +1 more +3 moreSkupper: potential authentication bypass to skupper console via forged cookiesCVE-2024-6535Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGtk3: gtk2: library injection from cwdCVE-2024-6655Fix available7.0 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreNetworkmanager: denial of serviceCVE-2024-6501Fix available3.1 Low
- redhat 389 directory server, directory server, red hat directory server 11 +7 more +9 more389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search requestCVE-2024-6237Fix available6.5 Medium
- red hat openshift serverless, build of apache camel - hawtio 4, build of apache camel 4 for quarkus 3 +21 more +23 moreUndertow: learningpushhandler can lead to remote memory dos attacksCVE-2024-3653Fix available5.3 Medium
- red hat build of apache camel - hawtio 4, build of apache camel 3.20.7 for spring boot, build of apache camel 4.4.1 for spring boot 3.2 +17 more +19 moreUndertow: response write hangs in case of java 17 tlsv1.3 newsessionticketCVE-2024-5971Fix available7.5 High
- red hat enterprise linux 9, enterprise linux 10, enterprise linux 6 +11 more +13 moreOpenssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9CVE-2024-6409Fix availableEPSS 27.9%7.0 High
- qemu, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreQemu-kvm: virtio-net: queue index out-of-bounds access in software rssCVE-2024-6505Fix available6.8 Medium
- uclouvain openjpeg, red hat ai inference server 3.2, enterprise linux 6 +3 more +5 moreOpenjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.cCVE-2023-39329Fix available6.5 Medium
- uclouvain openjpeg, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreOpenjpeg: denail of service via crafted image fileCVE-2023-39328Fix available5.5 Medium
- uclouvain openjpeg, red hat ai inference server 3.2, enterprise linux 6 +3 more +5 moreOpenjpeg: malicious files can cause the program to enter a large loopCVE-2023-39327Fix available4.3 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreCockpit: authenticated user can kill any process when enabling pam_env's user_readenv optionCVE-2024-6126Fix available3.2 Low
- red hat advanced virtualization for rhel 8.2.1, advanced virtualization for rhel 8.4.0.eus, enterprise linux 10 +15 more +17 moreQemu-kvm: 'qemu-img info' leads to host file read/writeCVE-2024-4467Fix available7.8 High
- openbsd openssh, almalinux, amazon linux +71 more +73 moreOpenssh: regresshion - race condition in ssh allows rce/dosCVE-2024-6387Public exploitFix availableEPSS 99.5%8.1 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd: read request memory leak denial-of-service vulnerabilityCVE-2023-39180Fix available4.0 Medium
- freedesktop poppler, red hat enterprise linux 10, enterprise linux 6 +4 more +6 morePoppler: pdfinfo: crash in broken documents when using -dests parameterCVE-2024-6239Fix available7.5 High
- red hat eap 8.0.1, build of apache camel - hawtio 4, build of apache camel 4.4.1 for spring boot 3.2 +11 more +13 moreUndertow: url-encoded request path information can be broken on ajp-listenerCVE-2024-6162Fix available7.5 High
- red hat build of keycloak, build of keycloak 22, single sign-on 7 +4 more +6 moreKeycloak: leak of configured ldap bind credentials through the keycloak admin consoleCVE-2024-5967Fix available2.7 Low
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 for rhel 8, directory server 11.9 for rhel 8 +9 more +11 more389-ds-base: malformed userpassword hash may cause denial of serviceCVE-2024-5953Fix available5.7 Medium
- redhat quay, red hat quay 3 +1 moreQuay: unauthorized user may authenticate via oauth application tokenCVE-2024-58914.2 Medium
- red hat build of keycloak, jboss enterprise application platform 8, single sign-on 7 +2 moreKeycloak: unguarded admin rest api endpoints allows low privilege users to use administrative functionalitiesCVE-2024-3656Public exploitFix available8.1 High
- red hat certificate system 10.4 eus for rhel-8, enterprise linux 6, enterprise linux 7 +11 more +13 moreCa: token authentication bypass vulnerabilityCVE-2023-4727Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +16 more +18 moreFreeipa: user can obtain a hash of the passwords of all domain users and perform offline brute forceCVE-2024-3183Public exploitFix available8.1 High
- freeipa, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreFreeipa: delegation rules allow a proxy service to impersonate any user to access another target serviceCVE-2024-2698Fix available8.8 High
- Show moreLoading…