Aller au contenu

Vulnérabilités de Red Hat Red Hat In-Vehicle Operating System 1

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-32910 Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with digest authentication 6.5 Moyenne 14 avr. 2025
CVE-2025-32909 Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c 5.3 Moyenne 14 avr. 2025
CVE-2025-32908 Libsoup: denial of service on libsoup through http/2 server 7.5 Élevée 14 avr. 2025
CVE-2025-32907 Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header 5.3 Moyenne 14 avr. 2025
CVE-2025-32906 Libsoup: out of bounds reads in soup_headers_parse_request() 7.5 Élevée 14 avr. 2025
CVE-2025-32913 Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header 7.5 Élevée 14 avr. 2025
CVE-2025-3416 A flaw was found in OpenSSL's handling of the properties argument in certain functions 3.7 Faible 8 avr. 2025
CVE-2025-3360 A flaw was found in GLib 3.7 Faible 7 avr. 2025
CVE-2025-32053 Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() 6.5 Moyenne 3 avr. 2025
CVE-2025-32052 Libsoup: heap buffer overflow in sniff_unknown() 6.5 Moyenne 3 avr. 2025
CVE-2025-32051 Libsoup: segmentation fault when parsing malformed data uri 5.9 Moyenne 3 avr. 2025
CVE-2025-32050 Libsoup: integer overflow in append_param_quoted 5.9 Moyenne 3 avr. 2025
CVE-2025-32049 Libsoup: denial of service attack to websocket server 7.5 Élevée 3 avr. 2025
CVE-2025-3155 Yelp: arbitrary file read 7.4 Élevée 3 avr. 2025
CVE-2025-2784 Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content 7.0 Élevée 3 avr. 2025
CVE-2025-2487 389-ds-base: null pointer dereference leads to denial of service 4.9 Moyenne 18 mars 2025
CVE-2025-1057 Keylime: keylime registrar dos due to incompatible database entry handling 4.3 Moyenne 15 mars 2025
CVE-2024-8176 Libexpat: expat: improper restriction of xml entity expansion depth in libexpat 7.5 Élevée 14 mars 2025
CVE-2025-0686 Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat 6.4 Moyenne 3 mars 2025
CVE-2025-0685 Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data 6.4 Moyenne 3 mars 2025
CVE-2025-0684 Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data 6.4 Moyenne 3 mars 2025
CVE-2025-0678 Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data 7.8 Élevée 3 mars 2025
CVE-2024-45782 Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382) 7.8 Élevée 3 mars 2025
CVE-2024-45778 Grub2: fs/bfs: integer overflow in the bfs parser. 4.1 Moyenne 3 mars 2025
CVE-2024-45779 Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser 6.0 Moyenne 3 mars 2025

Autres produits Red Hat