Vulnérabilités de Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2026-114236 | storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a… | 3.3 Faible | 21 oct. 2026 |
| CVE-2026-107935 | Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose | 9.3 Critique | 9 oct. 2026 |
| CVE-2026-89091 | Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution | 8.8 Élevée | 8 oct. 2026 |
| CVE-2026-19391 | Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives | 6.5 Moyenne | 11 août 2026 |
| CVE-2026-39821 | The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label | 9.6 Critique | 22 mai 2026 |
| CVE-2026-33811 | When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… | 7.5 Élevée | 7 mai 2026 |
| CVE-2026-39820 | Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion… | 7.5 Élevée | 7 mai 2026 |
| CVE-2026-42499 | Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322 | 7.5 Élevée | 7 mai 2026 |
| CVE-2026-33814 | When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it… | 7.5 Élevée | 7 mai 2026 |
| CVE-2026-32280 | During chain building, the amount of work that is done is not correctly limited when a large number of intermediate… | 7.5 Élevée | 8 avr. 2026 |
| CVE-2026-32283 | If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection… | 7.5 Élevée | 8 avr. 2026 |
| CVE-2026-33810 | When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to… | 7.5 Élevée | 8 avr. 2026 |
| CVE-2026-33186 | gRPC-Go is the Go language implementation of gRPC | 9.1 Critique | 20 mars 2026 |
| CVE-2026-25679 | url.Parse insufficiently validated the host/authority component and accepted some invalid URLs | 7.5 Élevée | 6 mars 2026 |
| CVE-2026-27137 | When verifying a certificate chain which contains a certificate containing multiple email address constraints which… | 7.5 Élevée | 6 mars 2026 |
| CVE-2025-61726 | The net/url package does not set a limit on the number of query parameters in a query | 7.5 Élevée | 28 janv. 2026 |
| CVE-2025-11065 | Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure | 5.3 Moyenne | 26 janv. 2026 |
| CVE-2025-56005 | An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via… | 9.8 Critique | 20 janv. 2026 |
| CVE-2026-21441 | urllib3 is an HTTP client library for Python | 8.9 Élevée | 7 janv. 2026 |
| CVE-2024-1394 | Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads | 7.5 Élevée | 21 mars 2024 |
Autres produits Red Hat
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433