Red Hat CVEs
2,577 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-0582Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap
- CVE-2023-6395Mock: privilege escalation for users that can access mock configuration
- CVE-2024-0567Gnutls: rejects certificate chain with distributed trust
- CVE-2024-0232Sqlite: use-after-free bug in jsonparseaddnodearray
- CVE-2024-0553Gnutls: incomplete fix for cve-2023-5981
- CVE-2024-0565Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of…
- CVE-2024-0562Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c
- CVE-2023-4001Grub2: bypass the grub password protection feature
- CVE-2023-6915Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c
- CVE-2023-6683Qemu: vnc: null pointer dereference in qemu_clipboard_request()
- CVE-2024-0443Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.
- CVE-2023-5455Ipa: invalid csrf protection
- CVE-2023-6476Cri-o: pods are able to break out of resource confinement on cgroupv2
- CVE-2024-0340Kernel: information disclosure in vhost/vhost.c:vhost_new_msg()
- CVE-2023-6270Kernel: aoe: improper reference count leads to use-after-free vulnerability
- CVE-2023-6944Rhdh: catalog-import function leaks credentials to frontend
- CVE-2024-0217Packagekitd: use-after-free in idle function callback
- CVE-2023-6004Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname
- CVE-2023-7192Kernel: refcount leak in ctnetlink_create_conntrack()
- CVE-2024-0193Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation
- CVE-2023-6693Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()
- CVE-2023-47039Perl: perl for windows binary hijacking vulnerability
- CVE-2023-3171Eap-7: heap exhaustion via deserialization
- CVE-2023-4641Shadow-utils: possible password leak during passwd(1) change
- CVE-2023-7090Sudo: improper handling of ipa_hostname leads to privilege mismanagement
- CVE-2023-7008Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes
- CVE-2023-7042Kernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- CVE-2023-6546Kernel: gsm multiplexing race condition leads to privilege escalation
- CVE-2023-2585Keycloak: client access via device auth request spoof
- CVE-2023-6918Libssh: missing checks for return values for digests