Vulnérabilités de Red Hat Red Hat Enterprise Linux 8

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-91920	Undertow: undertow: chunkreader message length permits chunk-size overflow	6.5 Moyenne	30 oct. 2026
CVE-2026-110133	Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback	5.8 Moyenne	30 oct. 2026
CVE-2026-93009	Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder	4.3 Moyenne	29 oct. 2026
CVE-2026-93010	A flaw was found in dnsmasq	4.3 Moyenne	29 oct. 2026
CVE-2026-93006	Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content	6.8 Moyenne	29 oct. 2026
CVE-2026-93007	Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation	5.3 Moyenne	29 oct. 2026
CVE-2026-93011	Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms	5.3 Moyenne	29 oct. 2026
CVE-2026-93008	Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations	6.8 Moyenne	29 oct. 2026
CVE-2026-85498	A flaw was found in polkit	3.5 Faible	29 oct. 2026
CVE-2026-117548	389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service	6.5 Moyenne	29 oct. 2026
CVE-2026-109411	Samba: access control bypass via vfs_ceph_rgw case-insensitive open	8.1 Élevée	28 oct. 2026
CVE-2026-116497	Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon	5.5 Moyenne	26 oct. 2026
CVE-2026-115486	Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning	7.1 Élevée	23 oct. 2026
CVE-2026-115485	Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio	6.3 Moyenne	23 oct. 2026
CVE-2026-115484	Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg	7.6 Élevée	23 oct. 2026
CVE-2026-115449	A flaw was found in libslirp	3.5 Faible	22 oct. 2026
CVE-2026-115221	Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership	5.4 Moyenne	22 oct. 2026
CVE-2026-115207	Patch: filename validation bypass in reversal fallback allows file creation outside the working directory	5.5 Moyenne	22 oct. 2026
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Moyenne	21 oct. 2026
CVE-2026-85518	Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition	6.1 Moyenne	21 oct. 2026
CVE-2026-114370	A flaw was found in the PathResourceManager component of the Undertow web server	3.7 Faible	21 oct. 2026
CVE-2026-92824	Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts	6.2 Moyenne	21 oct. 2026
CVE-2026-92822	Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml	6.2 Moyenne	21 oct. 2026
CVE-2026-92823	Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml	6.2 Moyenne	21 oct. 2026
CVE-2026-114038	Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string	5.1 Moyenne	21 oct. 2026

Autres produits Red Hat