Aller au contenu

Vulnérabilités connues pour Red Hat Enterprise Linux 6

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-85197 Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload 7.6 Élevée 4 sept. 2026
CVE-2026-84838 Rpm: command injection in rpmuncompress via unescaped filenames passed to popen() 7.8 Élevée 2 sept. 2026
CVE-2026-84837 Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path 7.8 Élevée 2 sept. 2026
CVE-2026-53683 Freeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.html 4.3 Moyenne 2 sept. 2026
CVE-2026-84270 Gvfs: mtp: out-of-bounds read in do_read() 4.3 Moyenne 1 sept. 2026
CVE-2026-84269 Gvfs: afp: heap-based buffer overflow in dsi read path 6.5 Moyenne 1 sept. 2026
CVE-2026-84267 Gvfs: sftp: uninitialized heap disclosure in read_string() 4.3 Moyenne 1 sept. 2026
CVE-2026-84268 Gvfs: sftp: heap-based buffer overflow in read_reply() 8.8 Élevée 1 sept. 2026
CVE-2026-84233 Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames 7.0 Élevée 1 sept. 2026
CVE-2026-53682 Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts 5.3 Moyenne 1 sept. 2026
CVE-2026-11873 Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure 6.5 Moyenne 1 sept. 2026
CVE-2026-18743 A flaw was found in popt 2.5 Faible 1 sept. 2026
CVE-2026-83596 Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature 8.8 Élevée 31 août 2026
CVE-2026-13732 Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf 7.0 Élevée 31 août 2026
CVE-2026-82343 Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling 6.1 Moyenne 28 août 2026
CVE-2026-82330 Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check 6.1 Moyenne 28 août 2026
CVE-2026-82328 Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count 6.1 Moyenne 28 août 2026
CVE-2026-82324 Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0 6.1 Moyenne 28 août 2026
CVE-2026-81893 Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery 4.7 Moyenne 27 août 2026
CVE-2026-78002 Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function 7.5 Élevée 27 août 2026
CVE-2026-79902 Gimp: stack vla size underflow denial of service in seattle 5.5 Moyenne 26 août 2026
CVE-2026-80185 Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root 5.7 Moyenne 25 août 2026
CVE-2026-80186 Bluez: stack overflow in name2utf8 causes dos and potential code execution 7.6 Élevée 25 août 2026
CVE-2026-80101 Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation 4.4 Moyenne 25 août 2026
CVE-2026-79992 Emacs: emacs: command injection via crafted filenames in tramp 7.8 Élevée 25 août 2026

Autres produits Red Hat