Red Hat CVEs
2,580 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-10926A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server.
- CVE-2018-10924It was discovered that fsync(2) system call in glusterfs client code leaks memory.
- CVE-2018-10923It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node.
- CVE-2018-10914It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a
- CVE-2018-10913An information disclosure vulnerability was discovered in glusterfs server.
- CVE-2018-10911A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values.
- CVE-2018-10907It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating f
- CVE-2018-10904It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attribute which is used by
- CVE-2017-2627A flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and 11.
- CVE-2017-7528Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection.
- CVE-2017-7513It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host
- CVE-2018-10884Ansible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF) in awx/api/authentication.py.
- CVE-2018-10894It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates.
- CVE-2016-8609It was found that the keycloak before 2.3.0 did not implement authentication flow correctly.
- CVE-2016-9579A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a buc
- CVE-2016-8651An input validation flaw was found in the way OpenShift 3 handles requests for images.
- CVE-2016-8653It was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the credentials passed to it.
- CVE-2016-8608JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor.
- CVE-2016-8614A flaw was found in Ansible before version 2.2.0.
- CVE-2016-8631The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes.
- CVE-2016-8628Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller.
- CVE-2016-8626A flaw was found in Red Hat Ceph before 0.94.9-8.
- CVE-2016-9597It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found
- CVE-2017-7514A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0.
- CVE-2016-9578A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling.
- CVE-2017-2663It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and c
- CVE-2017-15097Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL.
- CVE-2016-9577A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling.
- CVE-2017-2632A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher
- CVE-2017-7463JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a reflected XSS via artifact upload.