Vulnérabilités connues pour Red Hat Hardened Images

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-3184	A flaw was found in util-linux	3.7 Faible	3 avr. 2026
CVE-2026-2625	Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification	4.0 Moyenne	3 avr. 2026
CVE-2026-5121	Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing	7.5 Élevée	30 mars 2026
CVE-2026-0965	A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing	3.3 Faible	26 mars 2026
CVE-2026-0967	A flaw was found in libssh	2.2 Faible	26 mars 2026
CVE-2026-0968	A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a…	3.1 Faible	26 mars 2026
CVE-2026-0964	Libssh: improper sanitation of paths received from scp servers	5.0 Moyenne	26 mars 2026
CVE-2026-0966	Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()	6.5 Moyenne	26 mars 2026
CVE-2026-2100	P11-kit: null dereference via c_derivekey with specific null parameters	5.3 Moyenne	26 mars 2026
CVE-2026-32285	The Delete function fails to properly validate offsets when processing malformed JSON input	7.5 Élevée	26 mars 2026
CVE-2026-32286	The DataRow.Decode function fails to properly validate field lengths	7.5 Élevée	26 mars 2026
CVE-2026-4897	Polkit: polkit: denial of service via unbounded input processing through standard input	5.5 Moyenne	26 mars 2026
CVE-2026-3104	A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain	7.5 Élevée	25 mars 2026
CVE-2026-1519	If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume…	7.5 Élevée	25 mars 2026
CVE-2026-4775	Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing	7.8 Élevée	24 mars 2026
CVE-2026-27651	When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can…	7.5 Élevée	24 mars 2026
CVE-2026-27654	NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attacker…	8.2 Élevée	24 mars 2026
CVE-2026-27784	The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might…	7.8 Élevée	24 mars 2026
CVE-2026-32647	NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker…	7.8 Élevée	24 mars 2026
CVE-2026-4647	Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library	6.1 Moyenne	23 mars 2026
CVE-2026-33210	Ruby JSON is a JSON implementation for Ruby	8.3 Élevée	20 mars 2026
CVE-2026-4519	The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for…	7.0 Élevée	20 mars 2026
CVE-2026-4426	Libarchive: libarchive: denial of service via malformed iso file processing	6.5 Moyenne	19 mars 2026
CVE-2026-4424	Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing	7.5 Élevée	19 mars 2026
CVE-2026-27135	nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C	7.5 Élevée	18 mars 2026

Autres produits Red Hat