Red Hat CVEs
2,577 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-6918Libssh: missing checks for return values for digests
- CVE-2023-6927Keycloak: open redirect via "form_post.jwt" jarm response mode
- CVE-2023-6228Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c
- CVE-2023-5384Infinispan: credentials returned from configuration as clear text
- CVE-2023-5236Infinispan: circular reference on marshalling leads to dos
- CVE-2023-5056Skupper-operator: privelege escalation via config map
- CVE-2023-5115Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files
- CVE-2023-3629Infinispan: non-admins should not be able to get cache config via rest api
- CVE-2023-3628Infispan: rest bulk ops don't check permissions
- CVE-2023-4320Satellite: arithmetic overflow in satellite
- CVE-2023-47038Perl: write past buffer end via illegal user-defined unicode property
- CVE-2023-6134Keycloak: reflected xss via wildcard in oidc redirect_uri
- CVE-2023-6563Keycloak: offline session token dos
- CVE-2023-6478Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty
- CVE-2023-6377Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions
- CVE-2023-6710Mod_cluster/mod_proxy_cluster: stored cross site scripting
- CVE-2023-5764Ansible: template injection
- CVE-2023-5379Undertow: ajp request closes connection exceeding maxrequestsize
- CVE-2023-4958Stackrox: missing http security headers allows for clickjacking in web ui
- CVE-2023-6679Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c
- CVE-2023-5870Postgresql: role pg_signal_backend can signal certain superuser processes.
- CVE-2023-5868Postgresql: memory disclosure in aggregate function calls
- CVE-2023-5869Postgresql: buffer overrun from integer overflow in array modification
- CVE-2023-6394Quarkus: graphql operations over websockets bypass
- CVE-2023-6560Kernel: io_uring out of boundary memory access in __io_uaddr_map()
- CVE-2023-6622Kernel: null pointer dereference vulnerability in nft_dynset_init()
- CVE-2023-6610Kernel: oob access in smb2_dump_detail
- CVE-2023-6606Kernel: out-of-bounds read vulnerability in smbcalcsize
- CVE-2023-6393Quarkus: potential invalid reuse of context when @cacheresult on a uni is used
- CVE-2023-5981Gnutls: timing side-channel in the rsa-psk authentication