Aller au contenu

Vulnérabilités connues pour Red Hat Enterprise Linux 6

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-18047 Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash 6.5 Moyenne 28 juil. 2026
CVE-2026-17072 Gstreamer1-plugins-good: gst-plugins-good: 4-byte heap over-read in gst_matroska_parse_flac_stream_headers when parsing flac codec data in matroska containers 3.3 Faible 28 juil. 2026
CVE-2026-66759 Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images 7.1 Élevée 27 juil. 2026
CVE-2026-66757 Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images 5.5 Moyenne 27 juil. 2026
CVE-2026-66758 Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images 7.8 Élevée 27 juil. 2026
CVE-2026-15003 Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service 5.6 Moyenne 27 juil. 2026
CVE-2026-17523 In the Linux kernel, the following vulnerability has been resolved: can: bcm: switch timer to HRTIMER_MODE_SOFT and… 7.8 Élevée 27 juil. 2026
CVE-2026-66337 Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until() 6.5 Moyenne 24 juil. 2026
CVE-2026-66338 Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked() 5.4 Moyenne 24 juil. 2026
CVE-2026-66339 Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels 6.5 Moyenne 24 juil. 2026
CVE-2026-17039 Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path 3.1 Faible 24 juil. 2026
CVE-2026-16768 Gdk-pixbuf: out-of-bounds read in ico parser 5.3 Moyenne 23 juil. 2026
CVE-2026-6390 Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling. 6.8 Moyenne 23 juil. 2026
CVE-2026-16560 389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdn 5.3 Moyenne 22 juil. 2026
CVE-2026-16517 Libarchive: libarchive: signed integer overflow in archive_write_zip_header 2.9 Faible 21 juil. 2026
CVE-2026-16445 Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module 7.5 Élevée 21 juil. 2026
CVE-2026-12080 Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys 7.3 Élevée 20 juil. 2026
CVE-2026-15588 Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering 5.3 Moyenne 20 juil. 2026
CVE-2026-3842 A flaw was found in QEMU 7.8 Élevée 16 juil. 2026
CVE-2026-15779 Samba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validation 6.1 Moyenne 15 juil. 2026
CVE-2026-15714 Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string 6.5 Moyenne 14 juil. 2026
CVE-2026-15713 Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak 5.9 Moyenne 14 juil. 2026
CVE-2026-15711 Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation 7.5 Élevée 14 juil. 2026
CVE-2026-15709 Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service 7.5 Élevée 14 juil. 2026
CVE-2026-12478 Libsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup websocket frame processing (unmasked path) 4.8 Moyenne 14 juil. 2026

Autres produits Red Hat