Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- e2fsprogs project e2fsprogs, fedoraproject fedora, redhat enterprise linux +3 more +5 moreAn out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a...CVE-2022-1304Fix available7.8 High
- linux kernel, redhat enterprise linux +1 moreA use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the...CVE-2022-1280Fix available6.3 Medium
- redhat origin-aggregated-loggingA flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift...CVE-2022-05525.9 Medium
- redhat openshiftThe release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch...CVE-2021-4047Fix available7.5 High
- linux kernel, fedoraproject fedora, netapp active iq unified manager +12 more +14 morejbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use...CVE-2022-28796Fix available7.0 High
- linux kernel, redhat enterprise linux +1 moreA NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support...CVE-2022-1263Fix available5.5 Medium
- gnu gzip, debian linux, redhat jboss data grid +5 more +7 moreAn arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is...CVE-2022-1271Fix available8.8 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreCVE-2022-1158 affecting package kernel for versions less than 5.15.67.1-4CVE-2022-1158Fix available7.8 High
- dnsmasq, redhat enterprise linux +1 moreA single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an...CVE-2022-0934Fix available7.5 High
- containers crun, fedoraproject fedora, redhat enterprise linux +1 more +3 moreImportant: container-tools:rhel8 security, bug fix, and enhancement updateCVE-2022-27650Fix available7.5 High
- linux kernel, netapp active iq unified manager, h300s firmware +5 more +7 moreA flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by...CVE-2022-1199Fix available7.5 High
- linux kernel, redhat enterprise linux +1 moreA use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that...CVE-2022-1198Fix available5.5 Medium
- keycloak, redhat single sign-on +1 moreKeycloak insufficient session expirationCVE-2021-3461Fix available7.1 High
- red hat business-central, redhat descision manager, process automation +2 moreIt was observed that while login into Business-central console, HTTP request discloses sensitive...CVE-2019-148397.5 High
- redhat openshift container platform, openshift machine-config-operator +1 moreIt was found in OpenShift Container Platform 4 that ignition config, served by the Machine Config Server, can be accessed externally from clusters without authentication. The MCS endpoint (port 22623)…CVE-2021-202383.7 Low
- containers podman, fedoraproject fedora, redhat developer tools +11 more +13 morePodman's default inheritable capabilities for linux container not emptyCVE-2022-27649Fix available7.5 High
- buildah project buildah, fedoraproject fedora, redhat enterprise linux +2 moreNon-empty default inheritable capabilities for linux container in BuildahCVE-2022-27651Fix available6.8 Medium
- linux kernel, redhat enterprise linux +1 moreA flaw was found in the Linux kernels implementation of audit rules, where a syscall can...CVE-2020-35501Fix available3.4 Low
- linux kernel, canonical ubuntu linux, fedoraproject fedora +9 more +11 moreUse after Free in tc_new_tfilter allowing for privilege escalation in Linux KernelCVE-2022-1055Fix available8.6 High
- linux kernel, redhat enterprise linux +1 moreModerate: kernel-rt security and bug fix updateCVE-2022-1016Fix available5.5 Medium
- redhat kubeclientImproper Certificate Validation in kubeclientCVE-2022-0759Fix available8.1 High
- redhat keycloak, red hat keycloak-services +1 moreCross-site Scripting in KeycloakCVE-2021-20323Public exploitFix availableEPSS 37.2%6.1 Medium
- redhat 3scaleIt was found that 3scale's APIdocs does not validate the access token, in the case of invalid...CVE-2021-38147.5 High
- debian linux, linux kernel, netapp h300e firmware +8 more +10 moreModerate: kernel-rt security and bug fix updateCVE-2022-1048Fix available7.0 High
- redhat libvirt, netapp ontap select deploy administration utility +1 moreA flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method...CVE-2022-0897Fix available4.3 Medium
- linux kernel, redhat enterprise linux +1 moreModerate: kernel-rt security and bug fix updateCVE-2022-0168Fix available4.4 Medium
- [unknown] openstack-tripleo-heat-templates, redhat openstack, openstack tripleo heat templates +2 moreExposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templatesCVE-2021-4180Fix available4.3 Medium
- redhat 389 directory server, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability was found in the 389 Directory Server that allows expired passwords to access the...CVE-2022-0996Fix available6.5 Medium
- theforeman foreman ansible, redhat satellite +1 moreMissing Authentication for Critical Function in Foreman AnsibleCVE-2021-3589Fix available8.0 High
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreIn the Linux kernel before 5.16.15, there is a buffer overflow in ESP transformation in net/ipv4...CVE-2022-27666Public exploitFix available7.8 High
- debian linux, openstack oslo.utils, redhat openshift container platform +1 more +3 morepython-oslo-utils has improper password parsingCVE-2022-0718Fix available4.9 Medium
- grafana, redhat ceph storage, storage +2 moreAn issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix...CVE-2022-26148Fix availableEPSS 52.5%9.8 Critical
- golang ssh, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moregolang.org/x/crypto/ssh Denial of service via crafted SignerCVE-2022-27191Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +27 more +29 moreA flaw use after free in the Linux kernel FUSE filesystem was found in the way user triggers...CVE-2022-1011Public exploitFix available7.8 High
- port389 389-ds-base, redhat enterprise linux +1 moreA vulnerability was discovered in the 389 Directory Server that allows an unauthenticated...CVE-2022-0918Public exploitFix available7.5 High
- redhat descision manager, jboss enterprise application platform, jboss enterprise application platform expansion pack +2 more +4 moreA flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss...CVE-2022-0853Public exploit7.5 High
- cockpit-hq cockpit, redhat enterprise linux +1 moreA flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate...CVE-2021-3698Fix available7.5 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +26 more +28 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0847In KEVPublic exploitFix availableEPSS 92.8%7.8 High
- redhat clair, quay +1 morePath traversal in claircoreCVE-2021-3762Fix available9.8 Critical
- microsoft nbdkit, redhat enterprise linux +1 moreA flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS...CVE-2021-3716Fix available3.1 Low
- haproxy, debian linux, redhat enterprise linux +2 more +4 moreA flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header....CVE-2022-0711Fix availableEPSS 16.6%7.5 High
- openstack nova, openstack-nova, redhat openstack platform +2 moreOpen Redirect in CPython that affects users of OpenStack NovaCVE-2021-3654Fix availableEPSS 26.8%6.1 Medium
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreA vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in...CVE-2022-0516Fix available7.8 High
- imagemagick, fedoraproject fedora, redhat enterprise linux +2 moreA heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11...CVE-2021-3610Fix available7.5 High
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in...CVE-2021-3596Fix available6.5 Medium
- gnu fribidi, redhat enterprise linux +1 moreA segmentation fault (SEGV) flaw was found in the Fribidi package and affects the...CVE-2022-25310Fix available5.5 Medium
- gnu fribidi, redhat enterprise linux +1 moreA heap-based buffer overflow flaw was found in the Fribidi package and affects the...CVE-2022-25309Fix available5.5 Medium
- gnu fribidi, redhat enterprise linux +1 moreA stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker...CVE-2022-25308Fix available7.8 High
- gnu gnutls, netapp active iq unified manager, hci bootstrap os +5 more +7 moreA NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally...CVE-2021-4209Fix available6.5 Medium
- ceph, redhat ceph storage, fedoraproject fedora +5 more +7 moreA key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the...CVE-2021-3979Fix available6.5 Medium
- Show moreLoading…