Red Hat CVEs
2,579 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-4959Quay: cross-site request forgery (csrf) on config-editor page
- CVE-2023-25584Out of bounds read in parse_module function in bfd/vms-alpha.c
- CVE-2023-25585Field `file_table` of `struct module *module` is uninitialized
- CVE-2023-25586Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized
- CVE-2023-25588Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`
- CVE-2023-32611G_variant_byteswap() can take a long time with some non-normal inputs
- CVE-2023-29499Gvariant offset table entry size is not checked in is_normal()
- CVE-2023-32665Gvariant deserialisation does not match spec for non-normal data
- CVE-2023-1108Undertow: infinite loop in sslconduit during close
- CVE-2023-2680Dma reentrancy issue (incomplete fix for cve-2021-3750)
- CVE-2023-3255Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service
- CVE-2023-4155Sev-es / sev-snp vmgexit double fetch vulnerability
- CVE-2023-3301Triggerable assertion due to race condition in hot-unplug
- CVE-2023-4813Glibc: potential use-after-free in gaih_inet()
- CVE-2023-4918Plaintext storage of user password
- CVE-2023-0119Foreman: stored cross-site scripting in host tab
- CVE-2022-1415Drools: unsafe data deserialization in streamutils
- CVE-2023-4611Use after free race between mbind() and vma-locked page fault
- CVE-2023-4569Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c
- CVE-2023-38201Keylime: challenge-response protocol bypass during agent registration
- CVE-2023-4042Ghostscript: incomplete fix for cve-2020-16305
- CVE-2023-3899Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration
- CVE-2023-4459Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()
- CVE-2023-4456Openshift-logging: lokistack authorisation is cached too broadly
- CVE-2023-4394Memory leak in btrfs_get_dev_args_from_path()
- CVE-2023-4389Kernel: btrfs: double free in btrfs_get_root_ref()
- CVE-2023-4387Kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()
- CVE-2023-4385Kernel: jfs: null pointer dereference in dbfree()
- CVE-2023-39418Postgresql: merge fails to enforce update or select row security policies
- CVE-2023-39417Postgresql: extension script @substitutions@ within quoting allow sql injection