Aller au contenu

Vulnérabilités de Red Hat Red Hat Enterprise Linux 10

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-4598 Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump 4.7 Moyenne 30 mai 2025
CVE-2025-5278 Coreutils: heap buffer under-read in gnu coreutils sort via key specification 4.4 Moyenne 27 mai 2025
CVE-2025-5222 Icu: stack buffer overflow in the srbroot::addtag function 7.0 Élevée 27 mai 2025
CVE-2025-5024 A flaw was found in gnome-remote-desktop 7.4 Élevée 22 mai 2025
CVE-2025-4969 Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c 6.5 Moyenne 21 mai 2025
CVE-2025-4945 A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software 3.7 Faible 19 mai 2025
CVE-2025-4948 Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup 7.5 Élevée 19 mai 2025
CVE-2025-4476 A denial-of-service vulnerability has been identified in the libsoup HTTP client library 4.3 Moyenne 16 mai 2025
CVE-2025-4478 Gnome-remote-desktop: freerdp: unauthenticated rdp packet causes segfault in freerdp leading to denial of service 6.5 Moyenne 16 mai 2025
CVE-2025-3931 Yggdrasil: local privilege escalation in yggdrasil 7.8 Élevée 14 mai 2025
CVE-2025-4574 Crossbeam-channel: crossbeam-channel vulnerable to double free on drop 6.5 Moyenne 13 mai 2025
CVE-2025-4432 Ring: some aes functions may panic when overflow checking is enabled in ring 5.3 Moyenne 9 mai 2025
CVE-2025-4382 Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm 5.9 Moyenne 9 mai 2025
CVE-2025-4373 Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar 4.8 Moyenne 6 mai 2025
CVE-2025-4035 Libsoup: cookie domain validation bypass via uppercase characters in libsoup 4.3 Moyenne 29 avr. 2025
CVE-2025-3891 Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled 7.5 Élevée 29 avr. 2025
CVE-2025-46421 Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server 6.8 Moyenne 24 avr. 2025
CVE-2025-46420 Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c 6.5 Moyenne 24 avr. 2025
CVE-2024-10306 A vulnerability was found in mod_proxy_cluster 5.4 Moyenne 23 avr. 2025
CVE-2025-32911 Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value 9.0 Critique 15 avr. 2025
CVE-2025-3576 Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions 5.9 Moyenne 15 avr. 2025
CVE-2025-32914 Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process 7.4 Élevée 14 avr. 2025
CVE-2025-32912 Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication 6.5 Moyenne 14 avr. 2025
CVE-2025-32910 Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with digest authentication 6.5 Moyenne 14 avr. 2025
CVE-2025-32909 Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c 5.3 Moyenne 14 avr. 2025

Autres produits Red Hat