Vulnérabilités de Red Hat Red Hat Update Infrastructure 5

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-42011	Gnutls: gnutls: security bypass due to incorrect name constraint handling	7.4 Élevée	7 mai 2026
CVE-2026-42010	Gnutls: gnutls: authentication bypass via nul character in username	7.1 Élevée	7 mai 2026
CVE-2026-33846	Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly	7.5 Élevée	4 mai 2026
CVE-2026-33845	Gnutls: gnutls: denial of service via dtls zero-length fragment	7.5 Élevée	30 avr. 2026
CVE-2026-3832	A flaw was found in gnutls	3.7 Faible	30 avr. 2026
CVE-2026-3833	Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison	6.5 Moyenne	30 avr. 2026
CVE-2026-4786	Mitgation of CVE-2026-4519 was incomplete	7.0 Élevée	13 avr. 2026
CVE-2026-6100	Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…	9.1 Critique	13 avr. 2026
CVE-2026-4878	Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()	6.7 Moyenne	9 avr. 2026
CVE-2026-5704	Tar: tar: hidden file injection via crafted archives	5.0 Moyenne	6 avr. 2026
CVE-2026-34982	Vim is an open source, command line text editor	8.2 Élevée	6 avr. 2026
CVE-2026-35535	In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop…	7.4 Élevée	3 avr. 2026
CVE-2026-35385	In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users'…	7.5 Élevée	2 avr. 2026
CVE-2026-5121	Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing	7.5 Élevée	30 mars 2026
CVE-2026-2100	P11-kit: null dereference via c_derivekey with specific null parameters	5.3 Moyenne	26 mars 2026
CVE-2026-33412	Vim is an open source, command line text editor	5.6 Moyenne	24 mars 2026
CVE-2026-27651	When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can…	7.5 Élevée	24 mars 2026
CVE-2026-27654	NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attacker…	8.2 Élevée	24 mars 2026
CVE-2026-27784	The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might…	7.8 Élevée	24 mars 2026
CVE-2026-32647	NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker…	7.8 Élevée	24 mars 2026
CVE-2026-4519	The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for…	7.0 Élevée	20 mars 2026
CVE-2026-4424	Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing	7.5 Élevée	19 mars 2026
CVE-2026-27135	nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C	7.5 Élevée	18 mars 2026
CVE-2026-27459	pyOpenSSL is a Python wrapper around the OpenSSL library	7.2 Élevée	17 mars 2026
CVE-2026-4111	Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive	7.5 Élevée	13 mars 2026

Autres produits Red Hat