Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +11 more +13 moreOpensc: side-channel leaks while stripping encryption pkcs#1 paddingCVE-2023-5992Fix available5.6 Medium
- opencryptoki project opencryptoki, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreOpencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)CVE-2024-0914Fix available5.9 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: max page sharing of kernel samepage merging (ksm) may cause memory deduplicationCVE-2024-0564Fix available5.3 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super functionCVE-2024-0841Fix available6.6 Medium
- libtiff, apple ipados, iphone os +21 more +23 moreLibtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of serviceCVE-2023-52356Public exploitFix available7.5 High
- libtiff, red hat ai inference server 3.2, discovery 2 +11 more +13 moreLibtiff: tiffrasterscanlinesize64 produce too-big size and could cause oomCVE-2023-52355Fix available7.5 High
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out of bounds read when parsing mz binariesCVE-2023-40551Fix available5.1 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out-of-bound read in verify_buffer_sbat()CVE-2023-40550Fix available5.5 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out-of-bounds read in verify_buffer_authenticode() malformed pe fileCVE-2023-40549Fix available6.2 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +12 more +14 moreShim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systemsCVE-2023-40548Fix available7.4 High
- redhat shim, red hat enterprise linux 7, enterprise linux 8 +12 more +14 moreShim: rce in http boot support may lead to secure boot bypassCVE-2023-40547Fix available8.3 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: use-after-free while changing the mount option in __ext4_remount leadingCVE-2024-0775Fix available6.7 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreKernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destinationCVE-2024-0646Fix available7.0 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: deadlock leading to denial of service in tipc_crypto_key_revokeCVE-2024-0641Fix available5.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: potential deadlock on &net->sctp.addr_wq_lock leading to dosCVE-2024-0639Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreKernel: nf_tables: pointer math issue in nft_byteorder_eval()CVE-2024-0607Fix available6.6 Medium
- gnu gnutls, fedoraproject fedora, red hat enterprise linux 6 +10 more +12 moreGnutls: incomplete fix for cve-2023-5981CVE-2024-0553Fix available7.5 High
- x.org xwayland, fedoraproject fedora, red hat enterprise linux 6 +13 more +15 moreXorg-x11-server: selinux context corruptionCVE-2024-0409Fix available7.8 High
- fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +13 more +15 moreXorg-x11-server: selinux unlabeled glx pbufferCVE-2024-0408Fix available5.5 Medium
- fedoraproject fedora, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +20 more +22 moreXorg-x11-server: reattaching to different master device may lead to out-of-bounds memory accessCVE-2024-0229Fix available7.8 High
- debian linux, fedoraproject fedora, red hat enterprise linux 6 +19 more +21 moreXorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointerCVE-2023-6816Fix available9.8 Critical
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +5 more +7 moreKernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.cCVE-2024-0562Fix available7.8 High
- debian linux, linux kernel, red hat enterprise linux 6 +25 more +27 moreKernel: null pointer dereference vulnerability in ida_free in lib/idr.cCVE-2023-6915Fix available6.2 Medium
- qemu, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreQemu: vnc: null pointer dereference in qemu_clipboard_request()CVE-2023-6683Fix available6.5 Medium
- sqlite, fedoraproject extra packages for enterprise linux, fedora +9 more +11 moreSqlite: use-after-free bug in jsonparseaddnodearrayCVE-2024-0232Fix available4.7 Medium
- relax-and-recover, fedoraproject fedora, redhat enterprise linux +1 more +3 moreRelax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y...CVE-2024-23301Fix available5.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreKernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.CVE-2024-0443Fix available5.5 Medium
- gnu grub2, fedoraproject fedora, red hat enterprise linux 8 +4 more +6 moreGrub2: bypass the grub password protection featureCVE-2023-4001Fix available6.8 Medium
- freeipa, fedoraproject fedora, red hat enterprise linux 6 +32 more +34 moreIpa: invalid csrf protectionCVE-2023-5455Fix available6.5 Medium
- red hat openshift container platform 3.11, openshift container platform 4.13, openshift container platform 4.14 +1 more +3 moreCri-o: pods are able to break out of resource confinement on cgroupv2CVE-2023-6476Fix available6.5 Medium
- redhat red hat developer hub, linuxfoundation backstage, red hat rhdh-1.1-rhel-9 +2 moreRhdh: catalog-import function leaks credentials to frontendCVE-2023-6944Fix available5.7 Medium
- packagekit project packagekit, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 morePackagekitd: use-after-free in idle function callbackCVE-2024-0217Fix available3.3 Low
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +26 more +28 moreKernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalationCVE-2024-0193Fix available7.8 High
- qemu, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreQemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()CVE-2023-6693Fix available4.9 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreKernel: refcount leak in ctnetlink_create_conntrack()CVE-2023-7192Fix available5.5 Medium
- latchset jwcrypto, fedoraproject fedora, red hat ansible automation platform 2 +7 more +9 moreJwcrypto: denail of service via specifically crafted jweCVE-2023-6681Fix available5.3 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uafCVE-2023-6531Fix available7.0 High
- red hat eap 7.4.13, jboss enterprise application platform 7.4 for rhel 8, jboss enterprise application platform 7.4 for rhel 9 +2 more +4 moreEap-7: heap exhaustion via deserializationCVE-2023-31717.5 High
- openbsd openssh, fedoraproject fedora, redhat enterprise linux +1 more +3 moreOpenSSH through 9.6, when common types of DRAM are used, might allow row hammer attacks (for...CVE-2023-51767Fix availableDisputed7.0 High
- sendmail, freebsd, redhat enterprise linux +2 moresendmail through at least 8.14.7 allows SMTP smuggling in certain configurations. Remote...CVE-2023-51765Fix available5.3 Medium
- postfix, fedoraproject fedora, redhat enterprise linux +2 morePostfix through 3.8.4 allows SMTP smuggling unless configured with smtpd_data_restrictions...CVE-2023-51764Public exploitFix available5.3 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +14 more +16 moreKernel: gsm multiplexing race condition leads to privilege escalationCVE-2023-6546Public exploitFix available7.0 High
- redhat keycloak, red hat migration toolkit for applications 6, migration toolkit for applications 7 +21 more +23 moreKeycloak: redirect_uri validation bypassCVE-2023-6291Fix available7.1 High
- libssh, fedoraproject fedora, red hat enterprise linux 7 +3 more +5 moreLibssh: proxycommand/proxyjump features allow injection of malicious code through hostnameCVE-2023-6004Fix available4.8 Medium
- libssh, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibssh: missing checks for return values for digestsCVE-2023-6918Fix available3.7 Low
- redhat keycloak, red hat build of keycloak 22, build of keycloak 22.0.8 +7 more +9 moreKeycloak: open redirect via "form_post.jwt" jarm response modeCVE-2023-6927Fix available4.6 Medium
- infinispan, red hat data grid 8.4.6, redhat data grid +1 more +3 moreInfinispan: credentials returned from configuration as clear textCVE-2023-5384Fix available7.2 High
- infinispan, red hat build of apache camel 4 for quarkus 3, build of apache camel for spring boot 4 +13 more +15 moreInfinispan: circular reference on marshalling leads to dosCVE-2023-5236Fix available4.4 Medium
- redhat ansible automation platform, debian linux, red hat ansible automation platform 1.2 +6 more +8 moreAnsible: malicious role archive can cause ansible-galaxy to overwrite arbitrary filesCVE-2023-5115Fix available6.3 Medium
- red hat service interconnect 1 for rhel 9, redhat service interconnect +1 moreSkupper-operator: privelege escalation via config mapCVE-2023-50566.8 Medium
- Show moreLoading…