Red Hat CVEs
2,579 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-2860Out-of-bounds read when setting hmac data
- CVE-2023-3863Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c
- CVE-2023-3603Processing sftp server read may cause null dereference
- CVE-2023-34968Samba: spotlight server-side share path disclosure
- CVE-2023-34967Samba: type confusion in mdssvc rpc service for spotlight
- CVE-2023-34966Samba: infinite loop in mdssvc rpc service for spotlight
- CVE-2023-3347Samba: smb2 packet signing is not enforced when "server signing = required" is set
- CVE-2022-2127Samba: out-of-bounds read in winbind auth_crap
- CVE-2023-3674Keylime: attestation failure when the quote's signature does not validate
- CVE-2023-0160Possibility of deadlock in libbpf function sock_hash_delete_elem
- CVE-2023-38253W3m: out of bounds read in growbuf_to_str() at w3m/indep.c
- CVE-2023-38252W3m: out of bounds read in strnew_size() at w3m/str.c
- CVE-2023-3618Segmentation fault in fax3encode in libtiff/tif_fax3.c
- CVE-2023-3106Kernel: netlink socket crash (null pointer deref) in netlink_dump function
- CVE-2023-3354Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service
- CVE-2023-3108Kernel: a race condition in crypto module in the function skcipher_recvmsg
- CVE-2023-1672Race condition exists in the key generation and rotation functionality
- CVE-2023-3269Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal
- CVE-2023-34432Heap-buffer-overflow in src/formats_i.c
- CVE-2023-34318Heap-buffer-overflow in src/hcom.c
- CVE-2023-32627Floating point exception in src/voc.c
- CVE-2023-26590Floating point exception in src/aiff.c
- CVE-2023-32254Tree connection race condition remote code execution vulnerability
- CVE-2023-32250Session race condition remote code execution vulnerability
- CVE-2023-1183Arbitrary file write
- CVE-2023-3089Ocp & fips mode
- CVE-2023-2974Quarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocol
- CVE-2023-3338Crash due to a null pointer dereference in the dn_nsp_send function
- CVE-2023-2908Libtiff: null pointer dereference in tif_dir.c
- CVE-2023-3355Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c