Vulnérabilités connues pour Red Hat Enterprise Linux 8

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-43869	Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift	Non notée	5 mai 2026
CVE-2026-42154	Prometheus is an open-source monitoring system and time series database	7.5 Élevée	4 mai 2026
CVE-2026-42151	Prometheus is an open-source monitoring system and time series database	7.5 Élevée	4 mai 2026
CVE-2026-43964	Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash…	3.7 Faible	4 mai 2026
CVE-2026-23918	Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol	Non notée	4 mai 2026
CVE-2026-33846	Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly	7.5 Élevée	4 mai 2026
CVE-2026-37459	An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS)…	7.5 Élevée	4 mai 2026
CVE-2026-43037	In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar…	9.8 Critique	1 mai 2026
CVE-2026-43038	In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in…	9.8 Critique	1 mai 2026
CVE-2026-31709	In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before…	8.8 Élevée	1 mai 2026
CVE-2026-31703	In the Linux kernel, the following vulnerability has been resolved: writeback: Fix use after free in…	7.8 Élevée	1 mai 2026
CVE-2026-37457	An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of…	7.5 Élevée	1 mai 2026
CVE-2026-5403	SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution	7.8 Élevée	30 avr. 2026
CVE-2026-5656	Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code…	7.0 Élevée	30 avr. 2026
CVE-2026-5405	RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible…	7.8 Élevée	30 avr. 2026
CVE-2026-33845	Gnutls: gnutls: denial of service via dtls zero-length fragment	7.5 Élevée	30 avr. 2026
CVE-2026-3832	Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response	3.7 Faible	30 avr. 2026
CVE-2026-3833	Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison	6.5 Moyenne	30 avr. 2026
CVE-2025-14576	Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading…	7.4 Élevée	30 avr. 2026
CVE-2026-5402	TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution	8.8 Élevée	30 avr. 2026
CVE-2026-42198	pgjdbc is an open source postgresql JDBC Driver	7.5 Élevée	29 avr. 2026
CVE-2026-37555	An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec	7.5 Élevée	29 avr. 2026
CVE-2026-38993	Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component	6.5 Moyenne	29 avr. 2026
CVE-2026-7324	Memory safety bugs present in Thunderbird 150.0.0	7.3 Élevée	28 avr. 2026
CVE-2026-7323	Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0	7.3 Élevée	28 avr. 2026

Autres produits Red Hat