Rezultati pretraživanja za 'Proizvođač: redhat'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-68743 | 5.5 | A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to | 2026-08-31 19:17:10 | 2026-08-04 19:16:53 |
| CVE-2026-68744 | 3.3 | A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to t | 2026-08-31 19:17:10 | 2026-08-04 06:16:30 |
| CVE-2026-68742 | 5.5 | A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS res | 2026-08-31 19:17:10 | 2026-08-03 10:16:33 |
| CVE-2026-13595 | 6.8 | A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent par | 2026-08-31 18:17:13 | 2026-06-29 09:16:28 |
| CVE-2026-13002 | 4.4 | A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients. | 2026-08-31 18:17:12 | 2026-08-14 16:16:49 |
| CVE-2025-13601 | 7.7 | A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), | 2026-08-31 18:17:09 | 2025-11-26 15:15:51 |
| CVE-2026-15154 | 6.5 | A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service (ReDoS), allows a remote attacker to provide specially crafted regular expressions to the public detect | 2026-08-31 15:17:11 | 2026-07-08 20:16:48 |
| CVE-2026-6732 | 6.5 | A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious d | 2026-08-31 12:17:56 | 2026-04-23 23:16:16 |
| CVE-2026-16103 | 4.3 | A flaw was found in the keycloak-services component of Keycloak. This issue is an incomplete fix for CVE-2026-9798, where brute-force protection checks were added to the Client-Initiated Backchannel Authentication (CIBA) initiation handler but were o | 2026-08-31 12:17:55 | 2026-07-17 17:17:14 |
| CVE-2026-3184 | 3.7 | A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a s | 2026-08-31 12:17:55 | 2026-04-03 19:17:23 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/904
Zapisa po stranici: