Red Hat CVEs
2,577 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-3446Qemu: virtio: dma reentrancy issue leads to double free vulnerability
- CVE-2024-1233Eap: wildfly-elytron has a ssrf security issue
- CVE-2024-0406Mholt/archiver: path traversal vulnerability
- CVE-2024-31083Xorg-x11-server: use-after-free in procrenderaddglyphs
- CVE-2024-31082Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap
- CVE-2024-31081Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice
- CVE-2024-31080Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents
- CVE-2024-3296Rust-openssl: timing based side-channel can lead to a bleichenbacher style attack
- CVE-2024-2700Quarkus-core: leak of local configuration properties into quarkus applications
- CVE-2024-31420Cnv: dos through repeatedly calling vm-dump-metrics until virt handler crashes
- CVE-2024-31419Cnv: information disclosure through the usage of vm-dump-metrics
- CVE-2024-1300Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support
- CVE-2024-3094Xz: malicious code in distributed source
- CVE-2024-3019Pcp: exposure of the redis server backend allows remote command execution via pmproxy
- CVE-2024-2947Cockpit: command injection when deleting a sosreport with a crafted name
- CVE-2024-1023Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx
- CVE-2023-5685Xnio: stackoverflowexception when the chain of notifier states becomes problematically big
- CVE-2024-2494Libvirt: negative g_new0 length can lead to unbounded memory allocation
- CVE-2024-28834Gnutls: vulnerable to minerva side-channel information leak
- CVE-2024-1394Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads
- CVE-2024-28835Gnutls: potential crash during chain building/verification
- CVE-2024-2307Osbuild-composer: race condition may disable gpg verification for package repositories
- CVE-2024-1753Buildah: buildah: container escape via improper bind mount validation
- CVE-2024-2496Libvirt: null pointer dereference in udevconnectlistallinterfaces()
- CVE-2024-2002Libdwarf: crashes randomly on fuzzed object
- CVE-2023-7250Iperf3: possible denial of service
- CVE-2024-1013Unixodbc: out of bounds stack write due to pointer-to-integer types conversion
- CVE-2023-6725Tripleo-ansible: bind keys are world readable
- CVE-2024-1979Quarkus: information leak in annotation
- CVE-2024-2182Ovn: insufficient validation of bfd packets may lead to denial of service