Red Hat CVEs
2,575 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-4035Libsoup: cookie domain validation bypass via uppercase characters in libsoup
- CVE-2025-3891Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled
- CVE-2025-46421Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server
- CVE-2025-46420Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c
- CVE-2025-46400Xfig: fig2dev segmentation fault in read_arcobject
- CVE-2025-46399Xfig: transfig: fig2dev segmentation fault vulnerability
- CVE-2025-46398Xfig: fig2dev stack-overflow via read_objects
- CVE-2025-46397Xfig: xfig: stack-overflow allows possible code execution via local input manipulation
- CVE-2024-10306Mod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requests
- CVE-2025-32911Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value
- CVE-2025-3576Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions
- CVE-2025-32914Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process
- CVE-2025-32912Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication
- CVE-2025-32910Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server…
- CVE-2025-32909Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c
- CVE-2025-32908Libsoup: denial of service on libsoup through http/2 server
- CVE-2025-32907Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header
- CVE-2025-32906Libsoup: out of bounds reads in soup_headers_parse_request()
- CVE-2025-32913Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value…
- CVE-2025-3416Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`
- CVE-2025-2251Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution
- CVE-2025-3360Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp…
- CVE-2025-3359Gnuplot: segmentation fault via io_str_init_static_internal function
- CVE-2025-32053Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()
- CVE-2025-32052Libsoup: heap buffer overflow in sniff_unknown()
- CVE-2025-32051Libsoup: segmentation fault when parsing malformed data uri
- CVE-2025-32050Libsoup: integer overflow in append_param_quoted
- CVE-2025-32049Libsoup: denial of service attack to websocket server
- CVE-2025-3155Yelp: arbitrary file read
- CVE-2025-2784Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content