Aller au contenu

Vulnérabilités de Red Hat Red Hat Service Interconnect 1

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critique 22 mai 2026
CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… 7.5 Élevée 7 mai 2026
CVE-2026-39820 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion… 7.5 Élevée 7 mai 2026
CVE-2026-42499 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322 7.5 Élevée 7 mai 2026
CVE-2026-32280 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate… 7.5 Élevée 8 avr. 2026
CVE-2026-32283 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection… 7.5 Élevée 8 avr. 2026
CVE-2026-33810 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to… 7.5 Élevée 8 avr. 2026
CVE-2026-33186 gRPC-Go is the Go language implementation of gRPC 9.1 Critique 20 mars 2026
CVE-2026-25679 url.Parse insufficiently validated the host/authority component and accepted some invalid URLs 7.5 Élevée 6 mars 2026
CVE-2026-27137 When verifying a certificate chain which contains a certificate containing multiple email address constraints which… 7.5 Élevée 6 mars 2026
CVE-2025-61726 The net/url package does not set a limit on the number of query parameters in a query 7.5 Élevée 28 janv. 2026
CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Non notée 27 janv. 2026
CVE-2024-12582 A flaw was found in the skupper console, a read-only interface that renders cluster network, traffic details, and… 7.1 Élevée 24 déc. 2024
CVE-2024-9355 Golang-fips: golang fips zeroed buffer 6.5 Moyenne 1 oct. 2024
CVE-2024-6535 A flaw was found in Skupper 5.3 Moyenne 17 juil. 2024
CVE-2024-1394 Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads 7.5 Élevée 21 mars 2024

Autres produits Red Hat