Vulnérabilités de Red Hat Red Hat Hardened Images
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2026-110926 | A flaw was found in OpenSSH | 5.3 Moyenne | 15 oct. 2026 |
| CVE-2026-110925 | A flaw was found in OpenSSH | 5.4 Moyenne | 15 oct. 2026 |
| CVE-2026-110923 | A flaw was found in OpenSSH | 6.5 Moyenne | 15 oct. 2026 |
| CVE-2026-88842 | A flaw was found in BusyBox dpkg | 3.3 Faible | 14 oct. 2026 |
| CVE-2026-88829 | A flaw was found in BusyBox httpd's reverse proxy feature | 7.2 Élevée | 14 oct. 2026 |
| CVE-2026-90954 | A flaw was found in BusyBox's dpkg-deb archive extraction | 7.8 Élevée | 14 oct. 2026 |
| CVE-2026-88834 | A flaw was found in BusyBox's httpd web server | 3.7 Faible | 13 oct. 2026 |
| CVE-2026-88838 | A flaw was found in BusyBox's mount utility | 5.5 Moyenne | 13 oct. 2026 |
| CVE-2026-88833 | A flaw was found in BusyBox's udhcpc DHCP client | 6.5 Moyenne | 13 oct. 2026 |
| CVE-2026-108119 | Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix | 6.3 Moyenne | 9 oct. 2026 |
| CVE-2026-107935 | Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose | 9.3 Critique | 9 oct. 2026 |
| CVE-2026-107655 | Cups: null pointer dereference via embedded job ticket comments allows remote denial of service | 4.0 Moyenne | 9 oct. 2026 |
| CVE-2026-107445 | A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when… | 5.4 Moyenne | 8 oct. 2026 |
| CVE-2026-107444 | A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when… | 4.3 Moyenne | 8 oct. 2026 |
| CVE-2026-107161 | Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients | 7.5 Élevée | 7 oct. 2026 |
| CVE-2026-106033 | Ansible: ansible-ui: ansible ui dom xss in /redirect next parameter | 5.4 Moyenne | 6 oct. 2026 |
| CVE-2026-105326 | An argument injection flaw was found in CUPS | 2.5 Faible | 5 oct. 2026 |
| CVE-2026-95512 | Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader | 5.5 Moyenne | 2 oct. 2026 |
| CVE-2026-103242 | Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag | 7.1 Élevée | 30 sept. 2026 |
| CVE-2026-95520 | Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages | 7.1 Élevée | 29 sept. 2026 |
| CVE-2026-102010 | Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if | 7.0 Élevée | 28 sept. 2026 |
| CVE-2026-95521 | Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm | 7.8 Élevée | 24 sept. 2026 |
| CVE-2026-95519 | Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows) | 7.8 Élevée | 24 sept. 2026 |
| CVE-2026-88840 | BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message | 5.3 Moyenne | 23 sept. 2026 |
| CVE-2026-88839 | BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of… | 6.7 Moyenne | 23 sept. 2026 |
Autres produits Red Hat
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433