Vulnérabilités connues pour Red Hat Enterprise Linux 9

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-27858	Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large…	7.5 Élevée	27 mars 2026
CVE-2026-27857	Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage	4.3 Moyenne	27 mars 2026
CVE-2026-27856	Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack	7.4 Élevée	27 mars 2026
CVE-2026-24031	Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin	7.7 Élevée	27 mars 2026
CVE-2025-59032	ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response	7.5 Élevée	27 mars 2026
CVE-2026-4948	Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization	5.5 Moyenne	27 mars 2026
CVE-2026-0965	Libssh: libssh: denial of service via improper configuration file handling	3.3 Faible	26 mars 2026
CVE-2026-0967	Libssh: libssh: denial of service via inefficient regular expression processing	2.2 Faible	26 mars 2026
CVE-2026-0968	Libssh: libssh: denial of service due to malformed sftp message	3.1 Faible	26 mars 2026
CVE-2026-0964	Libssh: improper sanitation of paths received from scp servers	5.0 Moyenne	26 mars 2026
CVE-2026-0966	Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()	6.5 Moyenne	26 mars 2026
CVE-2026-2100	P11-kit: null dereference via c_derivekey with specific null parameters	5.3 Moyenne	26 mars 2026
CVE-2026-2239	Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow	2.8 Faible	26 mars 2026
CVE-2026-2272	Gimp: gimp: memory corruption due to integer overflow in ico file handling	4.3 Moyenne	26 mars 2026
CVE-2026-2271	Gimp: gimp: denial of service via crafted psp image file	3.3 Faible	26 mars 2026
CVE-2026-32286	The DataRow.Decode function fails to properly validate field lengths	7.5 Élevée	26 mars 2026
CVE-2026-2436	Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake	6.5 Moyenne	26 mars 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 Élevée	26 mars 2026
CVE-2026-33487	goxmlsig provides XML Digital Signatures implemented in Go	7.5 Élevée	26 mars 2026
CVE-2026-4897	Polkit: polkit: denial of service via unbounded input processing through standard input	5.5 Moyenne	26 mars 2026
CVE-2026-4887	Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image	6.1 Moyenne	26 mars 2026
CVE-2026-33526	Squid is a caching proxy for the Web	9.2 Critique	26 mars 2026
CVE-2026-32748	Squid is a caching proxy for the Web	8.7 Élevée	26 mars 2026
CVE-2026-3104	A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain	7.5 Élevée	25 mars 2026
CVE-2026-1519	If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume…	7.5 Élevée	25 mars 2026

Autres produits Red Hat