Red Hat CVEs
2,579 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-39192Kernel: netfilter: xtables out-of-bounds read in u32_match_it()
- CVE-2023-39189Kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()
- CVE-2023-5366Openvswitch don't match packets on nd_target field
- CVE-2023-41175Libtiff: potential integer overflow in raw2tiff.c
- CVE-2023-40745Libtiff: integer overflow in tiffcp.c
- CVE-2023-42755Kernel: rsvp: out-of-bounds read in rsvp_classify()
- CVE-2023-42754Kernel: ipv4: null pointer dereference in ipv4_send_dest_unreach()
- CVE-2022-3248Openshift api admission checks does not enforce "custom-host" permissions
- CVE-2022-4145Content spoofing
- CVE-2023-39191Kernel: ebpf: insufficient stack type checks in dynptr
- CVE-2023-3576Libtiff: memory leak in tiffcrop.c
- CVE-2023-3428Imagemagick: heap-buffer-overflow in coders/tiff.c
- CVE-2023-3971Controller: html injection in custom login info
- CVE-2023-4380Platform: token exposed at importing project
- CVE-2023-4237Platform: ec2_key module prints out the private key directly to the standard output
- CVE-2023-1832Improper authorization check in the server component
- CVE-2023-3361S3 credentials included when exporting elyra notebook
- CVE-2022-4132Memory leak on tls connections
- CVE-2023-3153Service monitor mac flow is not rate limited
- CVE-2023-2422Keycloak: oauth client impersonation
- CVE-2023-1584Quarkus-oidc: id and access tokens leak via the authorization code flow
- CVE-2023-4586Hotrod-client: hot rod client does not enable hostname validation when using tls that lead to a mitm attack
- CVE-2023-4911Glibc: buffer overflow in ld.so leading to privilege escalation
- CVE-2023-4732Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in…
- CVE-2023-4886Foreman: world readable file containing secrets
- CVE-2023-42756Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap
- CVE-2023-5215Libnbd: crash or misbehaviour when nbd server returns an unexpected block size
- CVE-2023-4066Operator: passwords defined in secrets shown in statefulset yaml
- CVE-2023-3223Undertow: outofmemoryerror due to @multipartconfig handling
- CVE-2023-0833Red hat a-mq streams: component version with information disclosure flaw