Aller au contenu

Vulnérabilités connues pour Red Hat Enterprise Linux 8

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-39830 A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the… 9.1 Critique 22 mai 2026
CVE-2026-39835 SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be… 5.3 Moyenne 22 mai 2026
CVE-2026-39828 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were… 6.3 Moyenne 22 mai 2026
CVE-2026-39832 When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not… 9.1 Critique 22 mai 2026
CVE-2026-43501 In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when… 9.8 Critique 21 mai 2026
CVE-2026-43494 In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fails… 7.8 Élevée 21 mai 2026
CVE-2026-9149 Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file 6.5 Moyenne 20 mai 2026
CVE-2026-9150 Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums 6.5 Moyenne 20 mai 2026
CVE-2026-8632 A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software 8.5 Élevée 20 mai 2026
CVE-2026-8631 A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software 9.3 Critique 20 mai 2026
CVE-2026-5947 Undefined behavior may result due to a race condition leading to a use-after-free violation 7.5 Élevée 20 mai 2026
CVE-2026-5946 Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet… 7.5 Élevée 20 mai 2026
CVE-2026-3593 A use-after-free vulnerability exists within the DNS-over-HTTPS implementation 7.4 Élevée 20 mai 2026
CVE-2026-3039 BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive… 7.5 Élevée 20 mai 2026
CVE-2026-29518 Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling… 7.3 Élevée 20 mai 2026
CVE-2026-44390 NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets… 6.9 Moyenne 20 mai 2026
CVE-2026-42959 NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that… 8.7 Élevée 20 mai 2026
CVE-2026-42944 NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when… 8.7 Élevée 20 mai 2026
CVE-2026-42534 NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its… 6.9 Moyenne 20 mai 2026
CVE-2026-41292 NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to… 6.6 Moyenne 20 mai 2026
CVE-2026-33278 NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables… 9.1 Critique 20 mai 2026
CVE-2026-9064 389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos) 7.5 Élevée 20 mai 2026
CVE-2026-47783 In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because… 8.1 Élevée 20 mai 2026
CVE-2026-43618 Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit… 6.1 Moyenne 20 mai 2026
CVE-2026-8975 Memory safety bugs present in Thunderbird 140.10 and Thunderbird 150 8.8 Élevée 19 mai 2026

Autres produits Red Hat