Red Hat
Page 10 of 19 — Red Hat CVEs from a corpus of 1811, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-32052 | Medium | 6.5 | 2025-04-03 | A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read. |
CVE-2025-32051 | Medium | 5.9 | 2025-04-03 | A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows an attacker to caus… |
CVE-2025-32050 | Medium | 5.9 | 2025-04-03 | A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read. |
CVE-2025-32049 | High | 7.5 | 2025-04-03 | A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial… |
CVE-2025-2784 | High | 7.0 | 2025-04-03 | A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup cli… |
CVE-2025-2842 | Medium | 4.3 | 2025-04-02 | A flaw was found in the Tempo Operator. When the Jaeger UI Monitor Tab functionality is enabled in a Tempo instance managed by the Tempo Operator, the Operator… |
CVE-2025-2786 | Medium | 4.3 | 2025-04-02 | A flaw was found in Tempo Operator, where it creates a ServiceAccount, ClusterRole, and ClusterRoleBinding when a user deploys a TempoStack or TempoMonolithic… |
CVE-2025-2586 | High | 7.5 | 2025-03-31 | A flaw was found in the OpenShift Lightspeed Service, which is vulnerable to unauthenticated API request flooding. Repeated queries to non-existent endpoints i… |
CVE-2024-6875 | Medium | 6.5 | 2025-03-28 | A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur wh… |
CVE-2025-2877 | Medium | 6.5 | 2025-03-28 | A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are expose… |
CVE-2025-31181 | Medium | 6.2 | 2025-03-27 | A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash. |
CVE-2025-31180 | Medium | 6.2 | 2025-03-27 | A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash. |
CVE-2025-31179 | Medium | 6.2 | 2025-03-27 | A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash. |
CVE-2025-31178 | Medium | 6.2 | 2025-03-27 | A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash. |
CVE-2025-31176 | Medium | 6.2 | 2025-03-27 | A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash. |
CVE-2025-2559 | Medium | 4.9 | 2025-03-25 | A flaw was found in Keycloak. When the configuration uses JWT tokens for authentication, the tokens are cached until expiration. If a client uses JWT tokens wi… |
CVE-2024-7631 | Medium | 4.3 | 2025-03-19 | A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and n… |
CVE-2025-2487 | Medium | 4.9 | 2025-03-18 | A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return… |
CVE-2025-2241 | High | 8.2 | 2025-03-17 | A flaw was found in Hive, a component of Multicluster Engine (MCE) and Advanced Cluster Management (ACM). This vulnerability causes VCenter credentials to be e… |
CVE-2025-1057 | Medium | 4.3 | 2025-03-15 | A flaw was found in Keylime, a remote attestation solution, where strict type checking introduced in version 7.12.0 prevents the registrar from reading databas… |
CVE-2025-2157 | Low | 3.3 | 2025-03-15 | A flaw was found in Foreman/Red Hat Satellite. Improper file permissions allow low-privileged OS users to monitor and access temporary files under /var/tmp, ex… |
CVE-2024-8176 | High | 7.5 | 2025-03-14 | A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML docume… |
CVE-2025-2240 | High | 7.5 | 2025-03-12 | A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory (OOM) issue. This vulnerability is externally triggered when cal… |
CVE-2025-23368 | High | 8.1 | 2025-03-04 | A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within… |
CVE-2025-0686 | Medium | 6.4 | 2025-03-03 | A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters from the fi… |
CVE-2025-0685 | Medium | 6.4 | 2025-03-03 | A flaw was found in grub2. When reading data from a jfs filesystem, grub's jfs filesystem module uses user-controlled parameters from the filesystem geometry t… |
CVE-2025-0684 | Medium | 6.4 | 2025-03-03 | A flaw was found in grub2. When performing a symlink lookup from a reiserfs filesystem, grub's reiserfs fs module uses user-controlled parameters from the file… |
CVE-2025-0678 | High | 7.8 | 2025-03-03 | A flaw was found in grub2. When reading data from a squash4 filesystem, grub's squash4 fs module uses user-controlled parameters from the filesystem geometry t… |
CVE-2024-45782 | High | 7.8 | 2025-03-03 | A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-prov… |
CVE-2024-45778 | Medium | 4.1 | 2025-03-03 | A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash. |
CVE-2025-1801 | High | 8.1 | 2025-03-03 | A flaw was found in the Ansible aap-gateway. Concurrent requests handled by the gateway grpc service can result in concurrency issues due to race condition req… |
CVE-2025-1125 | High | 7.8 | 2025-03-03 | When reading data from a hfs filesystem, grub's hfs filesystem module uses user-controlled parameters from the filesystem metadata to calculate the internal bu… |
CVE-2025-0689 | High | 7.8 | 2025-03-03 | When reading data from disk, the grub's UDF filesystem module utilizes the user controlled data length metadata to allocate its internal buffers. In certain sc… |
CVE-2024-45780 | Medium | 6.7 | 2025-03-03 | A flaw was found in grub2. When reading tar files, grub2 allocates an internal buffer for the file name. However, it fails to properly verify the allocation ag… |
CVE-2024-45779 | Medium | 6.0 | 2025-03-03 | An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate the number… |
CVE-2025-26466 | Medium | 5.9 | 2025-02-28 | A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of p… |
CVE-2025-1634 | High | 7.5 | 2025-02-26 | A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a… |
CVE-2025-26601 | High | 7.8 | 2025-02-25 | A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the tr… |
CVE-2025-26600 | High | 7.8 | 2025-02-25 | A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device i… |
CVE-2025-26599 | High | 7.8 | 2025-02-25 | An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap… |
CVE-2025-26598 | High | 7.8 | 2025-02-25 | An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its device ID and returns… |
CVE-2025-26597 | High | 7.8 | 2025-02-25 | A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols table to 0 but leave… |
CVE-2025-26596 | High | 7.8 | 2025-02-25 | A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbWriteKeySyms(), whic… |
CVE-2025-26595 | High | 7.8 | 2025-02-25 | A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies the names of the v… |
CVE-2025-26594 | High | 7.8 | 2025-02-25 | A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, t… |
CVE-2025-0690 | Medium | 6.1 | 2025-02-24 | The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to rea… |
CVE-2025-0677 | Medium | 6.4 | 2025-02-19 | A flaw was found in grub2. When performing a symlink lookup, the grub's UFS module checks the inode's data size to allocate the internal buffer to read the fil… |
CVE-2025-0624 | High | 7.6 | 2025-02-19 | A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environme… |
CVE-2025-1118 | Medium | 4.4 | 2025-02-19 | A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attac… |
CVE-2024-45777 | Medium | 6.7 | 2025-02-19 | A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overflow, lead… |
CVE-2025-0622 | Medium | 6.4 | 2025-02-18 | A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is unloaded. This flaw allows an at… |
CVE-2024-45783 | Medium | 4.4 | 2025-02-18 | A flaw was found in grub2. When failing to mount an HFS+ grub, the hfsplus filesystem driver doesn't properly set an ERRNO value. This issue may lead to a NULL… |
CVE-2024-45781 | Medium | 6.7 | 2025-02-18 | A flaw was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. The lack of… |
CVE-2024-45776 | Medium | 6.7 | 2025-02-18 | When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when allocating its internal buffer. A crafted .mo file may… |
CVE-2024-45775 | Medium | 5.2 | 2025-02-18 | A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument list. However, it… |
CVE-2025-26465 | Medium | 6.8 | 2025-02-18 | A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impers… |
CVE-2024-45774 | Medium | 6.7 | 2025-02-18 | A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of its internal buffers, resulting… |
CVE-2024-4028 | Low | 3.8 | 2025-02-18 | A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items (Resource a… |
CVE-2025-1391 | Medium | 5.4 | 2025-02-17 | A flaw was found in the Keycloak organization feature, which allows the incorrect assignment of an organization to a user if their username or email matches th… |
CVE-2025-1247 | High | 8.3 | 2025-02-13 | A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This… |
CVE-2025-1244 | High | 8.8 | 2025-02-12 | A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnera… |
CVE-2024-12243 | Medium | 5.3 | 2025-02-10 | A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certi… |
CVE-2024-12133 | Medium | 5.3 | 2025-02-10 | A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much l… |
CVE-2024-11831 | Medium | 5.4 | 2025-02-10 | A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such… |
CVE-2025-23367 | Medium | 6.5 | 2025-01-30 | A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role… |
CVE-2024-13484 | High | 8.2 | 2025-01-28 | A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instan… |
CVE-2025-0754 | Medium | 4.3 | 2025-01-28 | The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to improper sanitization of HTTP headers by Envoy, particularly th… |
CVE-2025-0752 | High | 7.1 | 2025-01-28 | A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be… |
CVE-2025-0750 | Medium | 6.6 | 2025-01-28 | A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with pe… |
CVE-2025-0736 | Medium | 5.5 | 2025-01-28 | A flaw was found in Infinispan, when using JGroups with JDBC_PING. This issue occurs when an application inadvertently exposes sensitive information, such as c… |
CVE-2022-4975 | High | 8.9 | 2025-01-27 | A flaw was found in the Red Hat Advanced Cluster Security (RHACS) portal. When rendering a table view in the portal, for example, on any of the /main/configman… |
CVE-2025-0650 | High | 8.1 | 2025-01-23 | A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured… |
CVE-2025-0604 | Medium | 5.4 | 2025-01-22 | A flaw was found in Keycloak. When an Active Directory user resets their password, the system updates it without performing an LDAP bind to validate the new cr… |
CVE-2024-11218 | High | 8.6 | 2025-01-22 | A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a mal… |
CVE-2024-12084 | Critical | 9.8 | 2025-01-15 | A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in t… |
CVE-2024-11029 | Medium | 5.5 | 2025-01-15 | A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation proce… |
CVE-2025-23366 | Medium | 6.5 | 2025-01-14 | A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed… |
CVE-2024-12747 | Medium | 5.6 | 2025-01-14 | A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encounterin… |
CVE-2024-12088 | Medium | 6.5 | 2025-01-14 | A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server… |
CVE-2024-12087 | Medium | 6.5 | 2025-01-14 | A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client option… |
CVE-2024-12086 | Medium | 6.1 | 2025-01-14 | A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are b… |
CVE-2024-12085 | High | 7.5 | 2025-01-14 | A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length… |
CVE-2024-11736 | Medium | 4.9 | 2025-01-14 | A vulnerability was found in Keycloak. Admin users may have to access sensitive server environment variables and system properties through user-configurable UR… |
CVE-2024-11734 | Medium | 6.5 | 2025-01-14 | A denial of service vulnerability was found in Keycloak that could allow an administrative user with the right to change realm settings to disrupt the service… |
CVE-2025-0306 | High | 7.4 | 2025-01-09 | A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted mes… |
CVE-2024-56827 | Medium | 5.6 | 2025-01-09 | A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress u… |
CVE-2024-56826 | Medium | 5.6 | 2025-01-09 | A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress u… |
CVE-2024-8447 | Medium | 5.9 | 2025-01-02 | A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs… |
CVE-2024-45497 | High | 7.6 | 2024-12-31 | A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kube… |
CVE-2024-12582 | High | 7.1 | 2024-12-24 | A flaw was found in the skupper console, a read-only interface that renders cluster network, traffic details, and metrics for a network application that a use… |
CVE-2024-11614 | High | 7.4 | 2024-12-18 | An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash t… |
CVE-2024-12698 | Medium | 6.5 | 2024-12-18 | An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability (CVE-2023-39325/CVE-2023-44487) where only unauthenticated stream… |
CVE-2024-9779 | High | 7.5 | 2024-12-17 | A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The c… |
CVE-2024-10973 | Medium | 5.7 | 2024-12-17 | A vulnerability was found in Keycloak. The environment option `KC_CACHE_EMBEDDED_MTLS_ENABLED` does not work and the JGroups replication configuration is alway… |
CVE-2024-12401 | Medium | 4.4 | 2024-12-12 | A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resour… |
CVE-2024-12397 | High | 7.4 | 2024-12-12 | A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an att… |
CVE-2024-12369 | Medium | 4.2 | 2024-12-09 | A vulnerability was found in OIDC-Client. When using the RH SSO OIDC adapter with EAP 7.x or when using the elytron-oidc-client subsystem with EAP 8.x, authori… |
CVE-2024-11738 | Medium | 5.3 | 2024-12-06 | A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service (panic) via a fragmented TLS ClientHello message. |
CVE-2024-8676 | High | 7.4 | 2024-11-26 | A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it. When it does that r… |
CVE-2024-52337 | Medium | 5.5 | 2024-11-26 | A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequen… |