Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- stefanberger swtpm, fedoraproject fedora, redhat enterprise linux +2 moreOut-of-bounds read in swtpmCVE-2022-23645Fix available6.2 Medium
- debian linux, fedoraproject fedora, isync project isync +1 more +3 moreA flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large...CVE-2021-3657Fix available9.8 Critical
- redhat vscode-xmlServer-Side Request Forgery and Uncontrolled Resource Consumption in LemMinXCVE-2022-0671Fix available9.1 Critical
- port389 389-ds-base, redhat enterprise linux desktop, enterprise linux for ibm z systems +5 more +7 moreA double-free was found in the way 389-ds-base handles virtual attributes context in persistent...CVE-2021-4091Fix available7.5 High
- konveyor mig-controller, redhat migration toolkit +1 moreAn incorrect default permissions vulnerability was found in the mig-controller. Due to an...CVE-2021-3948Fix available6.3 Medium
- fedoraproject fedora, linux kernel, oracle communications cloud native core binding support function +3 more +5 moreA flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint...CVE-2021-3773Public exploitFix available9.8 Critical
- argoproj argo cd, redhat openshift gitops +1 moreA flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and...CVE-2021-35576.5 Medium
- polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 moreThere is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to...CVE-2021-4115Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreNull source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in...CVE-2022-0561Fix available5.5 Medium
- debian linux, linux kernel, redhat enterprise linux +2 moreA vulnerability was found in the Linux kernel's EBPF verifier when handling internal data...CVE-2021-4159Fix available4.4 Medium
- linux kernel, ovirt node, fedoraproject fedora +27 more +29 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0435Public exploitFix availableEPSS 67.8%8.8 High
- info-zip unzip, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in unzip 6.0. The vulnerability occurs during the conversion of wide string to...CVE-2022-0529Public exploitFix available5.5 Medium
- info-zip unzip, apple mac os x, macos +3 more +5 moreA flaw was found in unzip 6.0. The vulnerability occurs during the conversion of an utf-8 string...CVE-2022-0530Fix available5.5 Medium
- kubernetes cri-o, redhat openshift container platform +1 moreIncorrect Permission Assignment for Critical Resource in CRI-OCVE-2022-0532Fix available4.2 Medium
- samba, debian linux, redhat enterprise linux +4 more +6 moreA flaw was found in the way Samba handled file/directory metadata. This flaw allows an...CVE-2021-20316Fix available6.8 Medium
- debian linux, linux kernel, canonical ubuntu linux +24 more +26 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0492In KEVPublic exploitFix available7.8 High
- debian linux, linux kernel, redhat enterprise linux +2 moreA use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host...CVE-2022-0487Fix available5.5 Medium
- microsoft virglrenderer, debian linux, redhat enterprise linux +2 moreAn out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This...CVE-2022-0135Fix available7.8 High
- linux kernel, netapp hci baseboard management controller, redhat enterprise linux +1 more +3 moreA use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux...CVE-2021-4154Public exploitFix available8.8 High
- samba, canonical ubuntu linux, debian linux +20 more +22 moreThe Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced...CVE-2021-44142Public exploitFix availableEPSS 73.6%8.8 High
- samba, fedoraproject fedora, redhat storage +2 moreAll versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink...CVE-2021-44141Fix available4.3 Medium
- openstack barbican, redhat openstack platform +1 moreopenstack-barbican Denial of Service vulnerabilityCVE-2022-23452Fix available4.9 Medium
- openstack barbican, redhat openstack platform +1 moreBarbican authorization flaw before v14.0.0CVE-2022-23451Fix available8.1 High
- qemu, redhat enterprise linux +1 moreA flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This...CVE-2022-0358Fix available7.8 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +35 more +37 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0330Fix available7.8 High
- qemu, redhat enterprise linux +1 moreA NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to...CVE-2021-4145Fix available6.5 Medium
- polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 moreA local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec...CVE-2021-4034In KEVPublic exploitFix availableEPSS 94.9%7.8 High
- advanced intrusion detection environment project intrusion detection environment, canonical ubuntu linux, debian linux +4 more +6 moreAIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such...CVE-2021-45417Fix available7.8 High
- microsoft virglrenderer, redhat enterprise linux +1 moreA flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly...CVE-2022-0175Fix available5.5 Medium
- debian linux, flatpak, flatpak flatpak-builder +2 more +4 moreflatpak-builder can access files outside the build directory.CVE-2022-21682Fix available7.7 High
- debian linux, flatpak, fedoraproject fedora +1 more +3 morePermissions granted to applications can be hidden from the user at install timeCVE-2021-43860Fix available8.2 High
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreAn out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper...CVE-2021-4204Public exploitFix available7.1 High
- systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 moreA flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial...CVE-2021-3997Fix available5.5 Medium
- keycloakImproper Authorization in KeycloakCVE-2021-4133Fix available8.8 High
- redhat libvirt, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreA flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself...CVE-2021-4147Fix available6.5 Medium
- python, debian linux, netapp ontap select deploy administration utility +7 more +9 moreA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...CVE-2021-4189Fix available5.3 Medium
- samba, fedoraproject fedora, redhat storage +2 moreMaxQueryDuration not honoured in Samba AD DC LDAPCVE-2021-3670Fix available6.5 Medium
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets...CVE-2021-3623Fix available6.1 Medium
- vim, vim vim/vim, apple mac os x +6 more +8 moreOut-of-bounds Read in vim/vimCVE-2021-4166Fix available7.1 High
- qemu, redhat enterprise linux +1 moreA NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user...CVE-2021-4158Fix available6.0 Medium
- debian linux, fedoraproject fedora, libarchive +11 more +13 moreAn improper link resolution flaw can occur while extracting an archive leading to changing modes,...CVE-2021-31566Fix available7.8 High
- debian linux, fedoraproject fedora, libarchive +10 more +12 moreAn improper link resolution flaw while extracting an archive can lead to changing the access...CVE-2021-23177Fix available7.8 High
- ruby-lang cgi, ruby, debian linux +6 more +8 moreCookie Prefix Spoofing in CGI::Cookie.parseCVE-2021-41819Fix available7.5 High
- the foreman foreman, redhat satellite +1 moreA server side remote code execution vulnerability was found in Foreman project. A authenticated...CVE-2021-35847.2 High
- containers podman, fedoraproject fedora, redhat enterprise linux +2 moreExposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podmanCVE-2021-4024Fix available6.5 Medium
- redhat jboss enterprise application platformThe HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A...CVE-2021-203187.2 High
- gegl, gimp, fedoraproject fedora +1 more +3 moreGEGL before 0.4.34, as used (for example) in GIMP before 2.10.30, allows shell expansion when a...CVE-2021-45463Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreA use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through...CVE-2021-44733Public exploitFix available7.0 High
- qos logback, netapp cloud manager, service level manager +3 more +5 moreRCE from attacker with configuration edit priviledges through JNDI lookupCVE-2021-42550Fix available6.6 Medium
- gnu binutils, debian linux, fedoraproject fedora +2 more +4 morestab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a...CVE-2021-45078Fix available7.8 High
- Show moreLoading…