Vulnérabilités de Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2025-3891	Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled	7.5 Élevée	29 avr. 2025
CVE-2025-46421	Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server	6.8 Moyenne	24 avr. 2025
CVE-2025-46420	Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c	6.5 Moyenne	24 avr. 2025
CVE-2025-46397	Xfig: xfig: stack-overflow allows possible code execution via local input manipulation	7.8 Élevée	23 avr. 2025
CVE-2024-10306	A vulnerability was found in mod_proxy_cluster	5.4 Moyenne	23 avr. 2025
CVE-2025-32911	Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value	9.0 Critique	15 avr. 2025
CVE-2025-3576	Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions	5.9 Moyenne	15 avr. 2025
CVE-2025-32914	Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process	7.4 Élevée	14 avr. 2025
CVE-2025-32907	Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header	5.3 Moyenne	14 avr. 2025
CVE-2025-32906	Libsoup: out of bounds reads in soup_headers_parse_request()	7.5 Élevée	14 avr. 2025
CVE-2025-32913	Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header	7.5 Élevée	14 avr. 2025
CVE-2025-32053	Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()	6.5 Moyenne	3 avr. 2025
CVE-2025-32052	Libsoup: heap buffer overflow in sniff_unknown()	6.5 Moyenne	3 avr. 2025
CVE-2025-32050	Libsoup: integer overflow in append_param_quoted	5.9 Moyenne	3 avr. 2025
CVE-2025-32049	Libsoup: denial of service attack to websocket server	7.5 Élevée	3 avr. 2025
CVE-2025-3155	Yelp: arbitrary file read	7.4 Élevée	3 avr. 2025
CVE-2025-2784	Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content	7.0 Élevée	3 avr. 2025
CVE-2025-2487	389-ds-base: null pointer dereference leads to denial of service	4.9 Moyenne	18 mars 2025
CVE-2024-8176	Libexpat: expat: improper restriction of xml entity expansion depth in libexpat	7.5 Élevée	14 mars 2025
CVE-2025-26601	Xorg: xwayland: use-after-free in syncinittrigger()	7.8 Élevée	25 févr. 2025
CVE-2025-26600	Xorg: xwayland: use-after-free in playreleasedevents()	7.8 Élevée	25 févr. 2025
CVE-2025-26599	Xorg: xwayland: use of uninitialized pointer in compredirectwindow()	7.8 Élevée	25 févr. 2025
CVE-2025-26598	Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()	7.8 Élevée	25 févr. 2025
CVE-2025-26597	Xorg: xwayland: buffer overflow in xkbchangetypesofkey()	7.8 Élevée	25 févr. 2025
CVE-2025-26596	Xorg: xwayland: heap overflow in xkbwritekeysyms()	7.8 Élevée	25 févr. 2025

Autres produits Red Hat