Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +25 more +27 moreKernel: vmwgfx: reference count issue leads to use-after-free in surface handlingCVE-2023-5633Fix available7.8 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreKernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrsCVE-2023-5090Fix available6.0 Medium
- linux kernel, netapp active iq unified manager, solidfire \& hci management node +21 more +23 moreKernel: use after free in nvmet_tcp_free_crypto in nvmeCVE-2023-5178Public exploitFix available8.8 High
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in avahi_alternative_host_nameCVE-2023-38473Fix available6.2 Medium
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in avahi_escape_labelCVE-2023-38470Fix available6.2 Medium
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in avahi_rdata_parseCVE-2023-38472Fix available6.2 Medium
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in dbus_set_host_nameCVE-2023-38471Fix available6.2 Medium
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in avahi_dns_packet_append_recordCVE-2023-38469Fix available6.2 Medium
- golang go, traefik, red hat openshift ai (rhoai) +2 more +4 moreTraefik - Denial of Service via HTTP/2 Request HandlingCVE-2023-54365Fix available8.7 High
- opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreOpensc: potential pin bypass when card tracks its own login stateCVE-2023-40660Fix available6.6 Medium
- gnome tracker miners, red hat enterprise linux 7, enterprise linux 8 +12 more +14 moreTracker-miners: sandbox escapeCVE-2023-5557Fix available7.5 High
- opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreOpensc: multiple memory issues with pkcs15-init (enrollment tool)CVE-2023-40661Fix available5.4 Medium
- samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 moreSamba: smbd allows client access to unix domain sockets on the file system as rootCVE-2023-3961Fix available9.1 Critical
- samba, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreSamba: "rpcecho" development server allows denial of service via sleep() call on ad dcCVE-2023-42669Fix available6.5 Medium
- samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 moreSamba: smb clients can truncate files with read-only permissionsCVE-2023-4091Fix available6.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: xfrm: out-of-bounds read in __xfrm_state_filter_match()CVE-2023-39194Fix available3.2 Low
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: xtables sctp out-of-bounds read in match_flags()CVE-2023-39193Fix available6.1 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: xtables out-of-bounds read in u32_match_it()CVE-2023-39192Fix available6.7 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()CVE-2023-39189Fix available5.1 Medium
- openvswitch, fedora, red hat fast datapath for rhel 7 +12 more +14 moreOpenvswitch don't match packets on nd_target fieldCVE-2023-5366Fix available7.1 High
- debian linux, linux kernel, red hat enterprise linux 6 +8 more +10 moreKernel: rsvp: out-of-bounds read in rsvp_classify()CVE-2023-42755Fix available6.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: ipv4: null pointer dereference in ipv4_send_dest_unreach()CVE-2023-42754Fix available5.5 Medium
- red hat advanced cluster management for kubernetes 2, ansible automation platform 1.2, ansible tower 3 +4 more +6 moreOpenshift api admission checks does not enforce "custom-host" permissionsCVE-2022-32484.4 Medium
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreUse-after-free in smb2_is_status_io_timeout()CVE-2023-1192Fix available6.5 Medium
- red hat openshift container platform 4, redhat openshift container platform +1 moreContent spoofingCVE-2022-41454.3 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreKernel: ebpf: insufficient stack type checks in dynptrCVE-2023-39191Fix available8.2 High
- red hat ansible automation platform 2.3 for rhel 8, ansible automation platform 2.3 for rhel 9, ansible automation platform 2.4 for rhel 8 +5 more +7 moreController: html injection in custom login infoCVE-2023-3971Public exploitFix available7.3 High
- redhat ansible automation platform, red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +2 more +4 morePlatform: token exposed at importing projectCVE-2023-43806.3 Medium
- redhat ansible automation platform, red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +1 more +3 morePlatform: ec2_key module prints out the private key directly to the standard outputCVE-2023-4237Fix available7.3 High
- candlepinproject candlepin, red hat satellite 6, redhat satellite +2 moreImproper authorization check in the server componentCVE-2023-18326.8 Medium
- redhat openshift data science, opendatahub open data hub dashboard, red hat openshift data science (rhods) +2 moreS3 credentials included when exporting elyra notebookCVE-2023-33617.7 High
- dogtagpki network security services for java, fedora extra packages for enterprise linux, fedora +7 more +9 moreMemory leak on tls connectionsCVE-2022-4132Fix available5.9 Medium
- infinispan hot rod, red hat data grid 8.4.6, redhat data grid +2 moreHotrod-client: hot rod client does not enable hostname validation when using tls that lead to a mitm attackCVE-2023-45867.4 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreKernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.hCVE-2023-4732Fix available4.7 Medium
- theforeman foreman, red hat satellite 6.13 for rhel 8, satellite 6.14 for rhel 8 +1 more +3 moreForeman: world readable file containing secretsCVE-2023-48866.7 Medium
- gnu glibc, c library, canonical ubuntu linux +48 more +50 moreGlibc: buffer overflow in ld.so leading to privilege escalationCVE-2023-4911In KEVPublic exploitFix availableEPSS 63.8%7.8 High
- gnu grub2, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: out-of-bounds read at fs/ntfs.cCVE-2023-4693Fix available5.3 Medium
- gnu grub2, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code executionCVE-2023-4692Fix available7.5 High
- libxpm project libxpm, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibxpm: out of bounds read on xpm with corrupted colormapCVE-2023-43789Fix available5.5 Medium
- x.org libxpm, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibxpm: out of bounds read in xpmcreatexpmimagefrombuffer()CVE-2023-43788Fix available5.5 Medium
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: integer overflow in xcreateimage() leading to a heap overflowCVE-2023-43787Fix available7.8 High
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: stack exhaustion from infinite recursion in putsubimage()CVE-2023-43786Public exploitFix available5.5 Medium
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: out-of-bounds memory access in _xkbreadkeysyms()CVE-2023-43785Fix available6.5 Medium
- webmproject libvpx, debian linux, fedoraproject fedora +1 more +3 moreVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.CVE-2023-44488Fix available7.5 High
- google chrome, libvpx, apple ipados +9 more +11 moreElectron affected by libvpx's heap buffer overflow in vp8 encodingCVE-2023-5217In KEVPublic exploitFix availableEPSS 49.0%8.8 High
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreKernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swapCVE-2023-42756Fix available4.4 Medium
- redhat libnbd, red hat enterprise linux 8, enterprise linux 8 advanced virtualization +2 more +4 moreLibnbd: crash or misbehaviour when nbd server returns an unexpected block sizeCVE-2023-5215Fix available5.3 Medium
- red hat amq broker 7, rhel-8 based middleware containers, redhat jboss a-mq +2 more +4 moreOperator: passwords defined in secrets shown in statefulset yamlCVE-2023-40665.5 Medium
- redhat undertow, red hat build of quarkus, data grid 8 +25 more +27 moreUndertow: outofmemoryerror due to @multipartconfig handlingCVE-2023-3223Fix available7.5 High
- redhat a-mq streams, squareup okhttp, red hat amq streams 2.2.1 +1 more +3 moreRed hat a-mq streams: component version with information disclosure flawCVE-2023-0833Fix available4.7 Medium
- Show moreLoading…