Aller au contenu

Vulnérabilités de Red Hat Red Hat Enterprise Linux 10

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-11218 Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile 8.6 Élevée 22 janv. 2025
CVE-2024-12084 Rsync: heap buffer overflow in rsync due to improper checksum length handling 9.8 Critique 15 janv. 2025
CVE-2024-11029 Freeipa: administrative user data leaked through systemd journal 5.5 Moyenne 15 janv. 2025
CVE-2024-12087 A path traversal vulnerability exists in rsync 6.5 Moyenne 14 janv. 2025
CVE-2024-12747 Rsync: race condition in rsync handling symbolic links 5.6 Moyenne 14 janv. 2025
CVE-2024-12088 Rsync: --safe-links option bypass leads to path traversal 6.5 Moyenne 14 janv. 2025
CVE-2024-12086 Rsync: rsync server leaks arbitrary client files 6.1 Moyenne 14 janv. 2025
CVE-2024-12085 A flaw was found in rsync which could be triggered when rsync compares file checksums 7.5 Élevée 14 janv. 2025
CVE-2025-0306 Ruby: openssl: ruby marvin attack 7.4 Élevée 9 janv. 2025
CVE-2024-56827 Openjpeg: heap buffer overflow in lib/openjp2/j2k.c 5.6 Moyenne 9 janv. 2025
CVE-2024-56826 Openjpeg: heap buffer overflow in bin/common/color.c 5.6 Moyenne 9 janv. 2025
CVE-2024-52337 Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method 5.5 Moyenne 26 nov. 2024
CVE-2024-52336 Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root 7.8 Élevée 26 nov. 2024
CVE-2024-52615 Avahi: avahi wide-area dns uses constant source port 5.3 Moyenne 21 nov. 2024
CVE-2020-25720 Samba: check attribute access rights for ldap adds of computers 7.5 Élevée 17 nov. 2024
CVE-2024-49395 In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field… 5.3 Moyenne 12 nov. 2024
CVE-2024-49393 Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing 6.5 Moyenne 12 nov. 2024
CVE-2024-11079 Ansible-core: unsafe tagging bypass via hostvars object in ansible-core 5.5 Moyenne 11 nov. 2024
CVE-2024-10963 Pam: improper hostname interpretation in pam_access leads to access control bypass 7.4 Élevée 7 nov. 2024
CVE-2024-9902 Ansible-core: ansible-core user may read/write unauthorized content 6.3 Moyenne 6 nov. 2024
CVE-2024-9632 Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability 7.8 Élevée 30 oct. 2024
CVE-2024-10041 Pam: libpam: libpam vulnerable to read hashed password 4.7 Moyenne 23 oct. 2024
CVE-2024-9050 Networkmanager-libreswan: local privilege escalation via leftupdown 7.8 Élevée 22 oct. 2024
CVE-2024-9676 Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) 6.5 Moyenne 15 oct. 2024
CVE-2024-9979 Pyo3: risk of use-after-free in `borrowed` reads from python weak references 5.3 Moyenne 15 oct. 2024

Autres produits Red Hat