Aller au contenu

Vulnérabilités connues pour Red Hat Enterprise Linux 9.2 Extended Update Support

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-11218 Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile 8.6 Élevée 22 janv. 2025
CVE-2024-12085 A flaw was found in rsync which could be triggered when rsync compares file checksums 7.5 Élevée 14 janv. 2025
CVE-2024-11614 An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature 7.4 Élevée 18 déc. 2024
CVE-2024-52337 Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method 5.5 Moyenne 26 nov. 2024
CVE-2024-9632 Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability 7.8 Élevée 30 oct. 2024
CVE-2024-9050 Networkmanager-libreswan: local privilege escalation via leftupdown 7.8 Élevée 22 oct. 2024
CVE-2024-9675 Buildah: buildah allows arbitrary directory mount 7.8 Élevée 9 oct. 2024
CVE-2024-45770 Pcp: pmpost symlink attack allows escalating pcp to root user 4.4 Moyenne 19 sept. 2024
CVE-2024-45769 Pcp: pmcd heap corruption through metric pmstore operations 5.5 Moyenne 19 sept. 2024
CVE-2024-7006 Libtiff: null pointer dereference in tif_dirinfo.c 7.5 Élevée 8 août 2024
CVE-2024-7409 Qemu: denial of service via improper synchronization in qemu nbd server during socket closure 7.5 Élevée 5 août 2024
CVE-2024-6409 Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9 7.0 Élevée 8 juil. 2024
CVE-2024-4467 Qemu-kvm: 'qemu-img info' leads to host file read/write 7.8 Élevée 2 juil. 2024
CVE-2024-6387 A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd) 8.1 Élevée 1 juil. 2024
CVE-2024-5953 A denial of service vulnerability was found in the 389-ds-base LDAP server 5.7 Moyenne 18 juin 2024
CVE-2024-3183 Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force 8.1 Élevée 12 juin 2024
CVE-2024-2698 A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition… 8.8 Élevée 12 juin 2024
CVE-2023-4727 A flaw was found in dogtag-pki and pki-core 7.5 Élevée 11 juin 2024
CVE-2024-3049 Booth: specially crafted hash can lead to invalid hmac being accepted by booth server 5.9 Moyenne 6 juin 2024
CVE-2024-5564 Libndp: buffer overflow in route information length field 8.1 Élevée 31 mai 2024
CVE-2024-3657 389-ds-base: potential denial of service via specially crafted kerberos as-req request 7.5 Élevée 28 mai 2024
CVE-2024-2199 389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c 5.7 Moyenne 28 mai 2024
CVE-2024-4418 Libvirt: stack use-after-free in virnetclientioeventloop() 6.2 Moyenne 8 mai 2024
CVE-2024-2905 A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds… 6.2 Moyenne 25 avr. 2024
CVE-2023-3758 A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users 7.1 Élevée 18 avr. 2024

Autres produits Red Hat