Rezultati pretraživanja za 'Proizvođač: redhat'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-59847 | 5.9 | A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection. | 2026-09-04 19:23:04 | 2026-07-21 14:16:34 |
| CVE-2025-26465 | 6.8 | A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in spec | 2026-09-02 02:17:18 | 2025-02-18 19:15:29 |
| CVE-2026-59850 | 4.3 | A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions. | 2026-09-01 21:18:35 | 2026-07-21 15:16:37 |
| CVE-2026-59848 | 5.3 | A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service. | 2026-09-01 21:18:35 | 2026-07-21 14:16:34 |
| CVE-2026-59846 | 3.9 | A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior. | 2026-09-01 21:18:34 | 2026-07-21 13:17:18 |
| CVE-2026-59845 | 5.3 | A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service. | 2026-09-01 21:18:34 | 2026-07-21 12:18:58 |
| CVE-2026-59844 | 6.5 | A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests. | 2026-09-01 21:18:34 | 2026-07-21 12:18:57 |
| CVE-2026-59843 | 6.5 | A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service. | 2026-09-01 21:18:34 | 2026-07-21 12:18:57 |
| CVE-2020-8619 | 4.0 | In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone | 2026-09-01 20:57:40 | 2020-06-17 22:15:13 |
| CVE-2022-38178 | 7.5 | By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources. | 2026-09-01 19:44:42 | 2022-09-21 11:15:09 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/904
Zapisa po stranici: