Vulnerabilities of Red Hat Red Hat Ceph Storage 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-93009	Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder	4.3 Medium	Oct 29, 2026
CVE-2026-93010	A flaw was found in dnsmasq	4.3 Medium	Oct 29, 2026
CVE-2026-93006	Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content	6.8 Medium	Oct 29, 2026
CVE-2026-93007	Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation	5.3 Medium	Oct 29, 2026
CVE-2026-93011	Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms	5.3 Medium	Oct 29, 2026
CVE-2026-93008	Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations	6.8 Medium	Oct 29, 2026
CVE-2026-18495	Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough	6.1 Medium	Sep 11, 2026
CVE-2026-87872	A flaw was found in the OCAPI modules (ocapi_command, ocapi_info) of the community.general Ansible collection	6.8 Medium	Sep 9, 2026
CVE-2026-87874	A flaw was found in the memcached cache plugin of the community.general Ansible collection	8.1 High	Sep 9, 2026
CVE-2026-80158	A flaw was found in the ipa_getkeytab module of the community.general Ansible collection	5.5 Medium	Aug 26, 2026
CVE-2026-41567	Moby is an open source container framework	7.2 High	Jun 5, 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Medium	Jun 2, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-42508	Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation	9.1 Critical	May 22, 2026
CVE-2026-46595	Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of…	10.0 Critical	May 22, 2026
CVE-2026-39829	The RSA and DSA public key parsers did not enforce size limits on key parameters	7.5 High	May 22, 2026
CVE-2026-39830	A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the…	9.1 Critical	May 22, 2026
CVE-2026-39835	SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be…	5.3 Medium	May 22, 2026
CVE-2026-39828	When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were…	6.3 Medium	May 22, 2026
CVE-2026-39832	When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not…	9.1 Critical	May 22, 2026
CVE-2026-44289	protobufjs compiles protobuf definitions into JavaScript (JS) functions	7.5 High	May 13, 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 High	May 7, 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 High	May 7, 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 High	May 7, 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 High	May 7, 2026

Other Red Hat products