Vulnérabilités de Red Hat Red Hat Hardened Images

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-27459	pyOpenSSL is a Python wrapper around the OpenSSL library	7.2 Élevée	17 mars 2026
CVE-2026-3441	Binutils: gnu binutils: information disclosure via specially crafted xcoff object file	6.1 Moyenne	15 mars 2026
CVE-2026-3442	Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker	6.1 Moyenne	15 mars 2026
CVE-2026-4111	Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive	7.5 Élevée	13 mars 2026
CVE-2026-4105	Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method	6.7 Moyenne	13 mars 2026
CVE-2026-3497	Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions	2.7 Faible	12 mars 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 Élevée	6 mars 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 Élevée	6 mars 2026
CVE-2026-28364	In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables…	7.9 Élevée	27 févr. 2026
CVE-2026-21863	Valkey is a distributed key-value database	7.5 Élevée	23 févr. 2026
CVE-2026-24734	Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat	Non notée	17 févr. 2026
CVE-2026-2007	Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string	8.2 Élevée	12 févr. 2026
CVE-2026-2006	Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted…	8.8 Élevée	12 févr. 2026
CVE-2026-2005	Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating…	8.8 Élevée	12 févr. 2026
CVE-2026-2004	Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object…	8.8 Élevée	12 févr. 2026
CVE-2026-26157	Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization	7.0 Élevée	11 févr. 2026
CVE-2026-26158	Busybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entries	7.0 Élevée	11 févr. 2026
CVE-2026-26007	cryptography is a package designed to expose cryptographic primitives and recipes to Python developers	8.2 Élevée	10 févr. 2026
CVE-2026-25646	LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network…	8.3 Élevée	10 févr. 2026
CVE-2025-14831	Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification	5.3 Moyenne	9 févr. 2026
CVE-2025-61732	A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary	8.6 Élevée	5 févr. 2026
CVE-2026-1757	Libxml2: memory leak leading to local denial of service in xmllint interactive shell	6.2 Moyenne	2 févr. 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 Élevée	28 janv. 2026
CVE-2025-61731	Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of…	7.8 Élevée	28 janv. 2026
CVE-2026-24842	node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink…	8.2 Élevée	28 janv. 2026

Autres produits Red Hat