Red Hat CVEs
2,577 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-6780Glibc: integer overflow in __vsyslog_internal()
- CVE-2023-6779Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()
- CVE-2023-6246Glibc: heap-based buffer overflow in __vsyslog_internal()
- CVE-2023-5992Opensc: side-channel leaks while stripping encryption pkcs#1 padding
- CVE-2024-0914Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)
- CVE-2024-0564Kernel: max page sharing of kernel samepage merging (ksm) may cause memory deduplication
- CVE-2023-40551Shim: out of bounds read when parsing mz binaries
- CVE-2023-40546Shim: out-of-bounds read printing error messages
- CVE-2023-40549Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file
- CVE-2023-40550Shim: out-of-bound read in verify_buffer_sbat()
- CVE-2023-40548Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems
- CVE-2023-6200Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability
- CVE-2024-0841Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function
- CVE-2023-6291Keycloak: redirect_uri validation bypass
- CVE-2023-52356Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
- CVE-2023-52355Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom
- CVE-2023-6267Quarkus: json payload getting processed prior to security checks when rest resources are used with annotations.
- CVE-2023-40547Shim: rce in http boot support may lead to secure boot bypass
- CVE-2024-0822Ovirt: authentication bypass
- CVE-2023-39197Kernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()
- CVE-2024-0775Kernel: use-after-free while changing the mount option in __ext4_remount leading
- CVE-2023-6531Kernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uaf
- CVE-2024-0607Kernel: nf_tables: pointer math issue in nft_byteorder_eval()
- CVE-2024-0409Xorg-x11-server: selinux context corruption
- CVE-2024-0408Xorg-x11-server: selinux unlabeled glx pbuffer
- CVE-2023-6816Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer
- CVE-2024-0646Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination
- CVE-2024-0641Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke
- CVE-2024-0639Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos
- CVE-2024-0582Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap