Aller au contenu

Vulnérabilités connues pour Red Hat Enterprise Linux 9

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-12464 Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode 6.2 Moyenne 31 oct. 2025
CVE-2025-62229 Xorg: xmayland: use-after-free in xpresentnotify structure creation 7.3 Élevée 30 oct. 2025
CVE-2025-62230 Xorg: xwayland: use-after-free in xkb client resource removal 7.3 Élevée 30 oct. 2025
CVE-2025-62231 Xorg: xmayland: value overflow in xkbsetcompatmap() 7.3 Élevée 30 oct. 2025
CVE-2025-12105 Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion 7.5 Élevée 23 oct. 2025
CVE-2025-11568 Luksmeta: data corruption when handling luks1 partitions with luksmeta 4.4 Moyenne 15 oct. 2025
CVE-2025-9640 Samba: vfs_streams_xattr uninitialized memory write possible 4.3 Moyenne 15 oct. 2025
CVE-2025-11731 Libxslt: type confusion in exsltfuncresultcompfunction of libxslt 3.1 Faible 14 oct. 2025
CVE-2025-11561 Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems 8.8 Élevée 9 oct. 2025
CVE-2025-11234 Qemu-kvm: vnc websocket handshake use-after-free 7.5 Élevée 3 oct. 2025
CVE-2025-7493 A privilege escalation flaw from host to domain administrator was found in FreeIPA 9.1 Critique 30 sept. 2025
CVE-2025-11021 Libsoup: out-of-bounds read in cookie date handling of libsoup http library 7.5 Élevée 26 sept. 2025
CVE-2025-60019 Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based() 3.7 Faible 25 sept. 2025
CVE-2025-60018 Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()" 4.8 Moyenne 25 sept. 2025
CVE-2025-10911 Libxslt: use-after-free with key data stored cross-rvt 5.5 Moyenne 25 sept. 2025
CVE-2025-9900 Libtiff: libtiff write-what-where 8.8 Élevée 23 sept. 2025
CVE-2025-5962 A flaw was found in the Lightspeed history service 7.7 Élevée 22 sept. 2025
CVE-2025-4953 Podman: build context bind mount 7.4 Élevée 16 sept. 2025
CVE-2025-8277 Libssh: memory exhaustion via repeated key exchange in libssh 3.1 Faible 9 sept. 2025
CVE-2025-9566 There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the… 8.1 Élevée 5 sept. 2025
CVE-2025-9901 Libsoup: improper handling of http vary header in libsoup caching 5.9 Moyenne 3 sept. 2025
CVE-2025-7039 A flaw was found in glib 3.7 Faible 3 sept. 2025
CVE-2025-9784 Undertow: undertow madeyoureset http/2 ddos vulnerability 7.5 Élevée 2 sept. 2025
CVE-2025-8067 Udisks: out-of-bounds read in udisks daemon 8.5 Élevée 28 août 2025
CVE-2025-4877 Libssh: write beyond bounds in binary to base64 conversion functions 4.5 Moyenne 20 août 2025

Autres produits Red Hat