Vulnérabilités connues pour Red Hat Enterprise Linux 9

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2025-61732	A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary	8.6 Élevée	5 févr. 2026
CVE-2026-23074	In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as…	7.8 Élevée	4 févr. 2026
CVE-2026-1801	Libsoup: libsoup: http request smuggling via malformed chunk headers	5.3 Moyenne	3 févr. 2026
CVE-2026-1760	Libsoup: soupserver: denial of service via http request smuggling	5.3 Moyenne	2 févr. 2026
CVE-2026-1761	Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response	8.6 Élevée	2 févr. 2026
CVE-2026-1757	Libxml2: memory leak leading to local denial of service in xmllint interactive shell	6.2 Moyenne	2 févr. 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 Élevée	28 janv. 2026
CVE-2025-61731	Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of…	7.8 Élevée	28 janv. 2026
CVE-2026-1539	Libsoup: libsoup: credential leakage via http redirects	5.8 Moyenne	28 janv. 2026
CVE-2026-1536	Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header	5.8 Moyenne	28 janv. 2026
CVE-2026-24842	node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink…	8.2 Élevée	28 janv. 2026
CVE-2026-24882	In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command…	8.4 Élevée	27 janv. 2026
CVE-2026-24881	In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause…	8.1 Élevée	27 janv. 2026
CVE-2025-15467	Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…	Non notée	27 janv. 2026
CVE-2026-24869	Use-after-free in the Layout: Scrolling and Overflow component	8.8 Élevée	27 janv. 2026
CVE-2026-1489	Glib: glib: memory corruption via integer overflow in unicode case conversion	5.4 Moyenne	27 janv. 2026
CVE-2026-1485	Glib: glib: local denial of service via buffer underflow in content type parsing	2.8 Faible	27 janv. 2026
CVE-2026-1484	Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()	4.2 Moyenne	27 janv. 2026
CVE-2026-1467	Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured	5.8 Moyenne	27 janv. 2026
CVE-2026-21721	The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:*…	8.1 Élevée	27 janv. 2026
CVE-2026-21720	Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image	7.5 Élevée	27 janv. 2026
CVE-2025-9820	Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function	4.0 Moyenne	26 janv. 2026
CVE-2025-9615	Networkmanager: networkmanager file access	3.3 Faible	26 janv. 2026
CVE-2026-0810	Gix-date: gix-date: undefined behavior due to invalid string generation	7.1 Élevée	26 janv. 2026
CVE-2025-11065	Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure	5.3 Moyenne	26 janv. 2026

Autres produits Red Hat