Red Hat CVEs
2,577 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-5871Libnbd: malicious nbd server may crash libnbd
- CVE-2023-6277Libtiff: out-of-memory in tiffopen via a craft file
- CVE-2023-5972Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c
- CVE-2023-6238Kernel: nvme: memory corruption via unprivileged user passthrough
- CVE-2023-5341Imagemagick: heap use-after-free in coders/bmp.c
- CVE-2023-6176Kernel: local dos vulnerability in scatterwalk_copychunks
- CVE-2023-6121Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get
- CVE-2023-5189Hub: insecure galaxy-importer tarfile extraction
- CVE-2023-39198Kernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()
- CVE-2023-6039Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect
- CVE-2023-4061Wildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor
- CVE-2023-4154Samba: ad dc password exposure to privileged users and rodcs
- CVE-2023-4956Quay: clickjacking on config-editor page severity
- CVE-2023-40661Opensc: multiple memory issues with pkcs15-init (enrollment tool)
- CVE-2023-40660Opensc: potential pin bypass when card tracks its own login state
- CVE-2023-4535Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys
- CVE-2023-49103scale-admin-portal: logged out users tokens can be accessed
- CVE-2023-5090Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs
- CVE-2023-42669Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc
- CVE-2023-5088Qemu: improper ide controller reset can lead to mbr overwrite
- CVE-2023-3961Samba: smbd allows client access to unix domain sockets on the file system as root
- CVE-2023-1476Kpatch: mm/mremap.c: incomplete fix for cve-2022-41222
- CVE-2023-46847Squid: denial of service in http digest authentication
- CVE-2023-46848Squid: denial of service in ftp
- CVE-2023-42670Samba: ad dc busy rpc multiple listener dos
- CVE-2023-5824Squid: dos against http and https
- CVE-2023-4091Samba: smb clients can truncate files with read-only permissions
- CVE-2023-1194Use-after-free in parse_lease_state()
- CVE-2023-46846Squid: request/response smuggling in http/1.1 and icap
- CVE-2022-4900Potential buffer overflow in php_cli_server_startup_workers