Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: redhat'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-73196 4.3 A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password (OTP) key value. This oversized key is then decoded and re-encoded without proper size limits, consuming exces 2026-08-24 17:49:31
CVE-2024-21626 8.6 runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to hav 2026-08-24 13:16:46
CVE-2026-35092 7.5 A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading 2026-08-21 13:17:37
CVE-2026-35091 8.2 A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to a 2026-08-21 13:17:36
CVE-2024-12086 6.1 A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send chec 2026-08-21 13:16:23
CVE-2026-9064 7.5 A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a specially crafted LDAP request c 2026-08-21 12:16:37
CVE-2024-5154 8.1 A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system. 2026-08-21 12:16:17
CVE-2026-15722 7.5 A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checkin 2026-08-17 02:16:40
CVE-2026-11770 7.5 A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated repl 2026-08-17 02:16:40
CVE-2026-11788 5.9 A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure 2026-08-17 02:16:40
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/904
Zapisa po stranici: