Vulnérabilités de Red Hat Red Hat Enterprise Linux 10
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2024-11218 | Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile | 8.6 Élevée | 22 janv. 2025 |
| CVE-2024-12084 | Rsync: heap buffer overflow in rsync due to improper checksum length handling | 9.8 Critique | 15 janv. 2025 |
| CVE-2024-11029 | Freeipa: administrative user data leaked through systemd journal | 5.5 Moyenne | 15 janv. 2025 |
| CVE-2024-12087 | A path traversal vulnerability exists in rsync | 6.5 Moyenne | 14 janv. 2025 |
| CVE-2024-12747 | Rsync: race condition in rsync handling symbolic links | 5.6 Moyenne | 14 janv. 2025 |
| CVE-2024-12088 | Rsync: --safe-links option bypass leads to path traversal | 6.5 Moyenne | 14 janv. 2025 |
| CVE-2024-12086 | Rsync: rsync server leaks arbitrary client files | 6.1 Moyenne | 14 janv. 2025 |
| CVE-2024-12085 | A flaw was found in rsync which could be triggered when rsync compares file checksums | 7.5 Élevée | 14 janv. 2025 |
| CVE-2025-0306 | Ruby: openssl: ruby marvin attack | 7.4 Élevée | 9 janv. 2025 |
| CVE-2024-56827 | Openjpeg: heap buffer overflow in lib/openjp2/j2k.c | 5.6 Moyenne | 9 janv. 2025 |
| CVE-2024-56826 | Openjpeg: heap buffer overflow in bin/common/color.c | 5.6 Moyenne | 9 janv. 2025 |
| CVE-2024-52337 | Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method | 5.5 Moyenne | 26 nov. 2024 |
| CVE-2024-52336 | Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root | 7.8 Élevée | 26 nov. 2024 |
| CVE-2024-52615 | Avahi: avahi wide-area dns uses constant source port | 5.3 Moyenne | 21 nov. 2024 |
| CVE-2020-25720 | Samba: check attribute access rights for ldap adds of computers | 7.5 Élevée | 17 nov. 2024 |
| CVE-2024-49395 | In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field… | 5.3 Moyenne | 12 nov. 2024 |
| CVE-2024-49393 | Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing | 6.5 Moyenne | 12 nov. 2024 |
| CVE-2024-11079 | Ansible-core: unsafe tagging bypass via hostvars object in ansible-core | 5.5 Moyenne | 11 nov. 2024 |
| CVE-2024-10963 | Pam: improper hostname interpretation in pam_access leads to access control bypass | 7.4 Élevée | 7 nov. 2024 |
| CVE-2024-9902 | Ansible-core: ansible-core user may read/write unauthorized content | 6.3 Moyenne | 6 nov. 2024 |
| CVE-2024-9632 | Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability | 7.8 Élevée | 30 oct. 2024 |
| CVE-2024-10041 | Pam: libpam: libpam vulnerable to read hashed password | 4.7 Moyenne | 23 oct. 2024 |
| CVE-2024-9050 | Networkmanager-libreswan: local privilege escalation via leftupdown | 7.8 Élevée | 22 oct. 2024 |
| CVE-2024-9676 | Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) | 6.5 Moyenne | 15 oct. 2024 |
| CVE-2024-9979 | Pyo3: risk of use-after-free in `borrowed` reads from python weak references | 5.3 Moyenne | 15 oct. 2024 |
Autres produits Red Hat
Red Hat Enterprise Linux 9 1865
Red Hat Enterprise Linux 8 1839
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430