Vulnérabilités connues pour Red Hat Hardened Images

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-9256	NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module	8.1 Élevée	22 mai 2026
CVE-2026-42508	Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation	9.1 Critique	22 mai 2026
CVE-2026-46595	Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of…	10.0 Critique	22 mai 2026
CVE-2026-39835	SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be…	5.3 Moyenne	22 mai 2026
CVE-2026-9149	Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file	6.5 Moyenne	20 mai 2026
CVE-2026-9150	Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums	6.5 Moyenne	20 mai 2026
CVE-2026-5947	Undefined behavior may result due to a race condition leading to a use-after-free violation	7.5 Élevée	20 mai 2026
CVE-2026-5946	Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet…	7.5 Élevée	20 mai 2026
CVE-2026-3593	A use-after-free vulnerability exists within the DNS-over-HTTPS implementation	7.4 Élevée	20 mai 2026
CVE-2026-3039	BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive…	7.5 Élevée	20 mai 2026
CVE-2026-44390	NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets…	6.9 Moyenne	20 mai 2026
CVE-2026-42959	NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that…	8.7 Élevée	20 mai 2026
CVE-2026-42944	NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when…	8.7 Élevée	20 mai 2026
CVE-2026-42534	NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its…	6.9 Moyenne	20 mai 2026
CVE-2026-41292	NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to…	6.6 Moyenne	20 mai 2026
CVE-2026-33278	NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables…	9.1 Critique	20 mai 2026
CVE-2026-47783	In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because…	8.1 Élevée	20 mai 2026
CVE-2026-25244	WebdriverIO is a test automation framework for unit, e2e and component testing using WebDriver, WebDriver BiDi and…	9.8 Critique	18 mai 2026
CVE-2026-42009	Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	7.5 Élevée	18 mai 2026
CVE-2026-45736	ws is an open source WebSocket client and server for Node.js	4.4 Moyenne	15 mai 2026
CVE-2026-44216	Wasmtime is a runtime for WebAssembly	5.9 Moyenne	14 mai 2026
CVE-2026-6478	Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover…	6.5 Moyenne	14 mai 2026
CVE-2026-6477	Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(),…	8.8 Élevée	14 mai 2026
CVE-2026-6473	Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to…	8.8 Élevée	14 mai 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 Élevée	13 mai 2026

Autres produits Red Hat