Red Hat CVEs
2,579 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-4273Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry
- CVE-2023-4194Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid
- CVE-2023-4147Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free
- CVE-2023-4135Out-of-bounds read information disclosure vulnerability
- CVE-2023-4132Kernel: smsusb: use-after-free caused by do_submit_urb()
- CVE-2023-4133Kernel: cxgb4: use-after-free in ch_flower_stats_cb()
- CVE-2023-3180Heap buffer overflow in virtio_crypto_sym_op_helper()
- CVE-2023-38560Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name
- CVE-2023-38559Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos
- CVE-2023-4004Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()
- CVE-2023-3773Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr
- CVE-2023-3772Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()
- CVE-2023-3637Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277)
- CVE-2023-3640Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2…
- CVE-2023-32248Tree connection null pointer dereference denial-of-service vulnerability
- CVE-2023-32257Session race condition remote code execution vulnerability
- CVE-2023-32252Session null pointer dereference denial-of-service vulnerability
- CVE-2023-32258Session race condition remote code execution vulnerability
- CVE-2023-1386Qemu: 9pfs: suid/sgid bits not dropped on file write
- CVE-2023-33951Kernel: vmwgfx: race condition leading to information disclosure vulnerability
- CVE-2023-32247Session setup memory exhaustion denial-of-service vulnerability
- CVE-2023-3745Imagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.h
- CVE-2023-3750Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service
- CVE-2023-3812Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags
- CVE-2023-3384Quay: stored cross site scripting
- CVE-2023-3748Inifinite loop in babld message parsing may cause dos
- CVE-2023-3019Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()
- CVE-2023-3567Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race
- CVE-2023-38200Keylime: registrar is subject to a dos against ssl connections
- CVE-2023-33952Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects