Red Hat CVEs
2,577 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-4629Keycloak: potential bypass of brute force protection
- CVE-2024-5148Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate
- CVE-2024-8285Kroxylicious: missing upstream kafka tls hostname verification
- CVE-2024-8235Libvirt: crash of virtinterfaced via virconnectlistinterfaces()
- CVE-2024-7885Undertow: improper state management in proxy protocol parsing causes information leakage
- CVE-2024-8007Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors
- CVE-2024-6508Openshift-console: oauth2 insufficient state parameter entropy
- CVE-2024-7700Foreman: command injection in "host init config" template via "install packages" field on foreman
- CVE-2024-5651Fence-agents-remediation: fence agent command line options leads to remote code execution
- CVE-2024-7557Odh-dashboard: odh-model-controller: cross-model authentication bypass in openshift ai
- CVE-2024-7006Libtiff: null pointer dereference in tif_dirinfo.c
- CVE-2024-43168Unbound: heap-buffer-overflow in unbound
- CVE-2024-43167Unbound: null pointer dereference in unbound
- CVE-2024-7143Pulpcore: rbac permissions incorrectly assigned in tasks that create objects
- CVE-2024-7409Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
- CVE-2024-7383Libnbd: nbd server improper certificate validation
- CVE-2024-3056Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack
- CVE-2024-7319Openstack-heat: incomplete fix for cve-2023-1625
- CVE-2024-7128Openshift-console: unauthenticated data exposure
- CVE-2024-7079Openshift-console: unauthenticated installation of helm charts
- CVE-2024-6535Skupper: potential authentication bypass to skupper console via forged cookies
- CVE-2024-6655Gtk3: gtk2: library injection from cwd
- CVE-2023-39329Openjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c
- CVE-2023-39327Openjpeg: malicious files can cause the program to enter a large loop
- CVE-2024-6501Networkmanager: denial of service
- CVE-2024-6237389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request
- CVE-2023-39328Openjpeg: denail of service via crafted image file
- CVE-2024-3653Undertow: learningpushhandler can lead to remote memory dos attacks
- CVE-2024-5971Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket
- CVE-2024-6409Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9