Aller au contenu

Vulnérabilités connues pour Red Hat Enterprise Linux 9

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-9979 Pyo3: risk of use-after-free in `borrowed` reads from python weak references 5.3 Moyenne 15 oct. 2024
CVE-2024-9675 Buildah: buildah allows arbitrary directory mount 7.8 Élevée 9 oct. 2024
CVE-2024-9407 Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction 4.7 Moyenne 1 oct. 2024
CVE-2024-9341 Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library 5.4 Moyenne 1 oct. 2024
CVE-2024-9355 Golang-fips: golang fips zeroed buffer 6.5 Moyenne 1 oct. 2024
CVE-2024-8612 Qemu-kvm: information leak in virtio devices 3.8 Faible 20 sept. 2024
CVE-2024-8354 Qemu-kvm: usb: assertion failure in usb_ep_get() 5.5 Moyenne 19 sept. 2024
CVE-2024-45770 Pcp: pmpost symlink attack allows escalating pcp to root user 4.4 Moyenne 19 sept. 2024
CVE-2024-45769 Pcp: pmcd heap corruption through metric pmstore operations 5.5 Moyenne 19 sept. 2024
CVE-2024-8775 Ansible-core: exposure of sensitive information in ansible vault files due to improper logging 5.5 Moyenne 14 sept. 2024
CVE-2024-8443 Libopensc: heap buffer overflow in openpgp driver when generating key 2.9 Faible 10 sept. 2024
CVE-2024-8445 389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199) 5.7 Moyenne 5 sept. 2024
CVE-2024-8418 Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service 7.5 Élevée 4 sept. 2024
CVE-2024-45620 Libopensc: incorrect handling of the length of buffers or files in pkcs15init 3.9 Faible 3 sept. 2024
CVE-2024-45619 Libopensc: incorrect handling length of buffers or files in libopensc 4.3 Moyenne 3 sept. 2024
CVE-2024-45618 Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init 3.9 Faible 3 sept. 2024
CVE-2024-45617 Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc 3.9 Faible 3 sept. 2024
CVE-2024-45616 Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc 3.9 Faible 3 sept. 2024
CVE-2024-45615 Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init 3.9 Faible 3 sept. 2024
CVE-2024-5148 Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate 7.5 Élevée 2 sept. 2024
CVE-2024-8235 Libvirt: crash of virtinterfaced via virconnectlistinterfaces() 6.2 Moyenne 30 août 2024
CVE-2024-7006 Libtiff: null pointer dereference in tif_dirinfo.c 7.5 Élevée 8 août 2024
CVE-2024-43168 DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software… 4.8 Moyenne 8 août 2024
CVE-2024-43167 DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software… 2.8 Faible 8 août 2024
CVE-2024-7409 Qemu: denial of service via improper synchronization in qemu nbd server during socket closure 7.5 Élevée 5 août 2024

Autres produits Red Hat