Redhat Developer Tools vulnerabilities

• devfile registry-support, red hat openshift developer tools and services, openshift container platform 4 +1 more +3 more Registry-support: decompress can delete files outside scope via relative paths CVE-2024-1485 Fix available 8.0 HighFebruary 13, 2024
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• redhat openshift api for data protection, openshift container platform, openshift developer tools and services +2 more distribution catalog API endpoint can lead to OOM via malicious user input CVE-2023-2253 Fix available 6.5 MediumMay 9, 2023
• gnu grub2, redhat codeready linux builder, developer tools +9 more +11 more A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user... CVE-2021-3697 Fix available 7.0 HighJune 10, 2022
• gnu grub2, netapp ontap select deploy administration utility, redhat codeready linux builder +10 more +12 more A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader.... CVE-2021-3696 Fix available 4.5 MediumJune 10, 2022
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +11 more +13 more A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An... CVE-2021-3695 Fix available 4.5 MediumJune 10, 2022
• podman project podman, fedoraproject fedora, psgo project psgo +13 more +15 more Podman publishes a malicious image to public registries CVE-2022-1227 Public exploitFix available 8.8 HighApril 29, 2022
• containers podman, fedoraproject fedora, redhat developer tools +11 more +13 more Podman's default inheritable capabilities for linux container not empty CVE-2022-27649 Fix available 7.5 HighApril 1, 2022
• debian linux, linux kernel, fedoraproject fedora +27 more +29 more A flaw use after free in the Linux kernel FUSE filesystem was found in the way user triggers... CVE-2022-1011 Public exploitFix available 7.8 HighMarch 18, 2022
• linux kernel, fedoraproject fedora, netapp h300e firmware +35 more +37 more Important: kernel security, bug fix, and enhancement update CVE-2022-0330 Fix available 7.8 HighJanuary 26, 2022
• debian linux, linux kernel, fedoraproject fedora +20 more +22 more A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with... CVE-2021-3669 Fix available 5.5 MediumOctober 12, 2021
• debian linux, linux kernel, fedoraproject fedora +20 more +22 more Important: kernel security, bug fix, and enhancement update CVE-2021-3744 Fix available 5.5 MediumSeptember 15, 2021
• golang go, arista cloudvision portal, eos +8 more +10 more Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic... CVE-2019-17596 Public exploitFix available 7.5 HighOctober 24, 2019
• golang go, debian linux, fedoraproject fedora +6 more +8 more Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling. CVE-2019-16276 Fix available 7.5 HighSeptember 27, 2019
• apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 more Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service CVE-2019-9514 Fix available EPSS 82.8% 7.5 HighAugust 13, 2019
• linux kernel, netapp cloud backup, h300e firmware +18 more +20 more A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x... CVE-2018-16871 Fix available 7.5 HighJuly 4, 2019
• golang go, debian linux, fedoraproject fedora +2 more +4 more An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker... CVE-2019-9741 Fix available 6.1 MediumMarch 13, 2019
• golang go, debian linux, redhat developer tools +4 more +6 more Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom... CVE-2017-15041 Fix available 9.8 CriticalOctober 5, 2017