Red Hat CVEs
2,577 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-12397Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling
- CVE-2024-12369Elytron-oidc-client: oidc authorization code injection
- CVE-2024-11738Rustls: rustls network-reachable panic in `acceptor::accept`
- CVE-2024-8676Cri-o: checkpoint restore can be triggered from different namespaces
- CVE-2024-52337Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
- CVE-2024-52336Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root
- CVE-2024-10492Keycloak-quarkus-server: keycloak path trasversal
- CVE-2024-10451Org.keycloak:keycloak-quarkus-server: sensitive data exposure in keycloak build process
- CVE-2024-10270Org.keycloak:keycloak-services: keycloak denial of service
- CVE-2024-9666Org.keycloak/keycloak-quarkus-server: keycloak proxy header handling denial-of-service (dos) vulnerability
- CVE-2024-6538Openshift-console: openshift console: server-side request forgery
- CVE-2024-11483Automation-gateway: aap-gateway: improper scope handling in oauth2 tokens for aap 2.5
- CVE-2024-52616Avahi: avahi wide-area dns predictable transaction ids
- CVE-2024-52615Avahi: avahi wide-area dns uses constant source port
- CVE-2023-39180Kernel: ksmbd: read request memory leak denial-of-service vulnerability
- CVE-2023-39179Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability
- CVE-2023-39176Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability
- CVE-2024-0793Kube-controller-manager: malformed hpa v1 manifest causes crash
- CVE-2023-6110Openstack: deleting a non existing access rule deletes another existing access rule in it's scope
- CVE-2023-4639Undertow: cookie smuggling/spoofing
- CVE-2023-1419Debezium: script injection via connector parameter
- CVE-2023-0657Keycloak: impersonation via logout token exchange
- CVE-2020-25720Samba: check attribute access rights for ldap adds of computers
- CVE-2024-11217Oauth-server-container: oauth-server-container logs client secret in debug level
- CVE-2022-2232Keycloak: ldap injection on username input
- CVE-2024-7730Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()
- CVE-2024-3447Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()
- CVE-2023-4458Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability
- CVE-2023-4134Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()
- CVE-2024-49395Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block