Vulnérabilités connues pour Red Hat Hardened Images

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-49975	Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service…	Non notée	8 juin 2026
CVE-2026-42536	Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content…	Non notée	8 juin 2026
CVE-2026-44185	Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server…	Non notée	8 juin 2026
CVE-2026-34355	A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend	Non notée	8 juin 2026
CVE-2026-10732	All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when…	6.4 Moyenne	5 juin 2026
CVE-2026-41567	Moby is an open source container framework	7.2 Élevée	5 juin 2026
CVE-2026-10805	Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend	6.7 Moyenne	4 juin 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Moyenne	2 juin 2026
CVE-2026-34993	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	6.4 Moyenne	2 juin 2026
CVE-2026-5419	A flaw was found in gnutls	3.7 Faible	1 juin 2026
CVE-2026-10118	Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication	7.8 Élevée	1 juin 2026
CVE-2026-8643	pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved…	4.1 Moyenne	1 juin 2026
CVE-2026-46385	iskorotkov/avro is a fast Go Avro codec	8.7 Élevée	29 mai 2026
CVE-2026-46384	iskorotkov/avro is a fast Go Avro codec	8.7 Élevée	29 mai 2026
CVE-2026-48526	PyJWT is a JSON Web Token implementation in Python	7.4 Élevée	28 mai 2026
CVE-2026-44604	Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command	7.0 Élevée	28 mai 2026
CVE-2026-42790	Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS…	7.6 Élevée	27 mai 2026
CVE-2026-42789	Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module)…	7.0 Élevée	27 mai 2026
CVE-2026-42013	Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name	8.2 Élevée	26 mai 2026
CVE-2026-42015	Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling	5.3 Moyenne	26 mai 2026
CVE-2026-42012	A flaw was found in gnutls	7.1 Élevée	26 mai 2026
CVE-2026-5260	Gnutls: gnutls: information disclosure via heap overread in rsa key exchange	8.2 Élevée	26 mai 2026
CVE-2026-48864	Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data	7.8 Élevée	26 mai 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critique	22 mai 2026
CVE-2026-9256	NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module	8.1 Élevée	22 mai 2026

Autres produits Red Hat