Red Hat CVEs
2,577 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-1441Libvirt: off-by-one error in udevlistinterfacesbystatus()
- CVE-2024-1725Kubevirt-csi: persistentvolume allows access to hcp's root node
- CVE-2024-2236Libgcrypt: vulnerable to marvin attack
- CVE-2024-0560Apicast: use_3scale_oidc_issuer_endpoint of token introspection policy isn't compatible with rh-sso 7.5 or later versions
- CVE-2023-6917Pcp: unsafe use of directories allows pcp to root privilege escalation
- CVE-2024-21886Xorg-x11-server: heap buffer overflow in disabledevice
- CVE-2024-21885Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent
- CVE-2024-1722Keycloak-core: dos via account lockout
- CVE-2023-3966Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet
- CVE-2024-1635Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol
- CVE-2024-1488Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation
- CVE-2024-1485Registry-support: decompress can delete files outside scope via relative paths
- CVE-2024-1454Opensc: memory use after free in authentic driver when updating token info
- CVE-2024-1459Undertow: directory traversal vulnerability
- CVE-2023-6681Jwcrypto: denail of service via specifically crafted jwe
- CVE-2024-1062389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
- CVE-2024-1151Kernel: stack overflow problem in open vswitch kernel module leading to dos
- CVE-2024-0229Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
- CVE-2024-1312Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu
- CVE-2023-6536Kernel: null pointer dereference in __nvmet_req_complete
- CVE-2023-6535Kernel: null pointer dereference in nvmet_tcp_execute_request
- CVE-2023-6356Kernel: null pointer dereference in nvmet_tcp_build_iovec
- CVE-2024-1048Grub2: grub2-set-bootflag can be abused by local (pseudo-)users
- CVE-2024-0690Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration
- CVE-2023-4503Eap-galleon: custom provisioning creates unsecured http-invoker
- CVE-2023-50782Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659
- CVE-2023-50781M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657
- CVE-2023-7216Cpio: extraction allows symlinks which enables remote command execution
- CVE-2023-6240Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation
- CVE-2024-1141Glance-store: glance store access key logged in debug log level