Aller au contenu

Vulnérabilités de Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-11218 Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile 8.6 Élevée 22 janv. 2025
CVE-2024-12085 A flaw was found in rsync which could be triggered when rsync compares file checksums 7.5 Élevée 14 janv. 2025
CVE-2024-11614 An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature 7.4 Élevée 18 déc. 2024
CVE-2024-52337 Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method 5.5 Moyenne 26 nov. 2024
CVE-2024-9632 Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability 7.8 Élevée 30 oct. 2024
CVE-2024-9050 Networkmanager-libreswan: local privilege escalation via leftupdown 7.8 Élevée 22 oct. 2024
CVE-2024-9675 Buildah: buildah allows arbitrary directory mount 7.8 Élevée 9 oct. 2024
CVE-2024-45770 Pcp: pmpost symlink attack allows escalating pcp to root user 4.4 Moyenne 19 sept. 2024
CVE-2024-45769 Pcp: pmcd heap corruption through metric pmstore operations 5.5 Moyenne 19 sept. 2024
CVE-2024-4467 Qemu-kvm: 'qemu-img info' leads to host file read/write 7.8 Élevée 2 juil. 2024
CVE-2024-5953 A denial of service vulnerability was found in the 389-ds-base LDAP server 5.7 Moyenne 18 juin 2024
CVE-2024-3183 Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force 8.1 Élevée 12 juin 2024
CVE-2024-2698 A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition… 8.8 Élevée 12 juin 2024
CVE-2023-4727 A flaw was found in dogtag-pki and pki-core 7.5 Élevée 11 juin 2024
CVE-2024-3049 Booth: specially crafted hash can lead to invalid hmac being accepted by booth server 5.9 Moyenne 6 juin 2024
CVE-2024-5564 Libndp: buffer overflow in route information length field 8.1 Élevée 31 mai 2024
CVE-2024-3657 389-ds-base: potential denial of service via specially crafted kerberos as-req request 7.5 Élevée 28 mai 2024
CVE-2024-2199 389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c 5.7 Moyenne 28 mai 2024
CVE-2023-3758 A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users 7.1 Élevée 18 avr. 2024
CVE-2024-31083 Xorg-x11-server: use-after-free in procrenderaddglyphs 7.8 Élevée 5 avr. 2024
CVE-2024-31081 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice 7.3 Élevée 4 avr. 2024
CVE-2024-31080 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents 7.3 Élevée 4 avr. 2024
CVE-2024-3019 Pcp: exposure of the redis server backend allows remote command execution via pmproxy 8.8 Élevée 28 mars 2024
CVE-2024-28834 A flaw was found in GnuTLS 5.3 Moyenne 21 mars 2024
CVE-2024-1753 Buildah: buildah: container escape via improper bind mount validation 8.6 Élevée 18 mars 2024

Autres produits Red Hat