Red Hat
Page 9 of 19 — Red Hat CVEs from a corpus of 1811, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-7365 | High | 7.1 | 2025-07-10 | A flaw was found in Keycloak. When an authenticated attacker attempts to merge accounts with another existing account during an identity provider (IdP) login… |
CVE-2025-7425 | High | 7.8 | 2025-07-10 | A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as… |
CVE-2025-7424 | High | 7.5 | 2025-07-10 | A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML t… |
CVE-2025-32990 | Medium | 6.5 | 2025-07-10 | A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain sett… |
CVE-2025-32989 | Medium | 5.3 | 2025-07-10 | A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension durin… |
CVE-2025-32988 | Medium | 6.5 | 2025-07-10 | A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (S… |
CVE-2025-7345 | High | 7.5 | 2025-07-08 | A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When pro… |
CVE-2025-5987 | High | 8.1 | 2025-07-07 | A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detecte… |
CVE-2025-5351 | Medium | 6.5 | 2025-07-04 | A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serial… |
CVE-2024-9453 | Medium | 6.5 | 2025-07-04 | A vulnerability was found in Red Hat OpenShift Jenkins. The bearer token is not obfuscated in the logs and potentially carries a high risk if those logs are ce… |
CVE-2025-5372 | Medium | 5.0 | 2025-07-04 | A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to i… |
CVE-2025-6017 | Medium | 5.5 | 2025-07-02 | A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability… |
CVE-2025-6920 | Medium | 5.3 | 2025-07-01 | A flaw was found in the authentication enforcement mechanism of a model inference API in ai-inference-server. All /v1/* endpoints are expected to enforce API k… |
CVE-2025-49521 | High | 8.8 | 2025-06-30 | A flaw was found in the EDA component of the Ansible Automation Platform, where user-supplied Git branch or refspec values are evaluated as Jinja2 templates. T… |
CVE-2025-49520 | High | 8.8 | 2025-06-30 | A flaw was found in Ansible Automation Platform’s EDA component where user-supplied Git URLs are passed unsanitized to the git ls-remote command. This vulnerab… |
CVE-2025-5731 | Medium | 5.5 | 2025-06-26 | A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command… |
CVE-2025-6032 | High | 8.3 | 2025-06-24 | A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue… |
CVE-2025-5318 | Medium | 5.4 | 2025-06-24 | A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect com… |
CVE-2025-6193 | Medium | 5.9 | 2025-06-20 | A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in certain fields of a LMEValJob custom reso… |
CVE-2025-5416 | Low | 2.7 | 2025-06-20 | A vulnerability has been identified in Keycloak that could lead to unauthorized information disclosure. While it requires an already authenticated user, the /a… |
CVE-2025-6019 | High | 7.0 | 2025-06-19 | A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to… |
CVE-2025-6199 | Low | 3.3 | 2025-06-17 | A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output… |
CVE-2025-6196 | Medium | 5.5 | 2025-06-17 | A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when opening specially crafted EPUB files, lead… |
CVE-2025-49180 | High | 7.8 | 2025-06-17 | A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow… |
CVE-2025-49179 | High | 7.3 | 2025-06-17 | A flaw was found in the X Record extension. The RecordSanityCheckRegisterClients function does not check for an integer overflow when computing request length… |
CVE-2025-49178 | Medium | 5.5 | 2025-06-17 | A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's… |
CVE-2025-49177 | Medium | 6.1 | 2025-06-17 | A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended… |
CVE-2025-49176 | High | 7.3 | 2025-06-17 | A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an… |
CVE-2025-49175 | Medium | 6.1 | 2025-06-17 | A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, lead… |
CVE-2025-4404 | Critical | 9.1 | 2025-06-17 | A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the `krbCano… |
CVE-2025-6020 | High | 7.8 | 2025-06-17 | A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their p… |
CVE-2025-6170 | Low | 2.5 | 2025-06-16 | A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program… |
CVE-2025-49796 | Critical | 9.1 | 2025-06-16 | A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an a… |
CVE-2025-49795 | High | 7.5 | 2025-06-16 | A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML inpu… |
CVE-2025-49794 | Critical | 9.1 | 2025-06-16 | A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the… |
CVE-2025-6052 | Low | 3.7 | 2025-06-13 | A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a… |
CVE-2025-6035 | Medium | 6.1 | 2025-06-13 | A flaw was found in GIMP. An integer overflow vulnerability exists in the GIMP "Despeckle" plug-in. The issue occurs due to unchecked multiplication of image… |
CVE-2025-6021 | High | 7.5 | 2025-06-12 | A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue… |
CVE-2025-5918 | Low | 3.9 | 2025-06-09 | A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for rea… |
CVE-2025-5917 | Low | 2.8 | 2025-06-09 | A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file n… |
CVE-2025-5916 | Low | 3.9 | 2025-06-09 | A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC… |
CVE-2025-5915 | Medium | 6.6 | 2025-06-09 | A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exce… |
CVE-2025-5914 | High | 7.8 | 2025-06-09 | A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an inte… |
CVE-2025-47712 | Medium | 6.5 | 2025-06-09 | A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for… |
CVE-2025-47711 | Medium | 6.5 | 2025-06-09 | There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a ve… |
CVE-2025-25209 | Medium | 5.7 | 2025-06-09 | The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-sy… |
CVE-2025-25208 | Medium | 5.7 | 2025-06-09 | A Developer persona can bring down the Authorino service, preventing the evaluation of all AuthPolicies on the cluster |
CVE-2025-25207 | Medium | 5.7 | 2025-06-09 | The Authorino service in the Red Hat Connectivity Link is the authorization service for zero trust API security. Authorino allows the users with developer pers… |
CVE-2025-5791 | High | 7.1 | 2025-06-06 | A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than… |
CVE-2025-0620 | Medium | 4.9 | 2025-06-06 | A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expo… |
CVE-2025-4598 | Medium | 4.7 | 2025-05-30 | A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access th… |
CVE-2025-5278 | Medium | 4.4 | 2025-05-27 | A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the… |
CVE-2025-5222 | High | 7.0 | 2025-05-27 | A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot… |
CVE-2025-5198 | Medium | 5.0 | 2025-05-27 | A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a small subset of table cells. The only kn… |
CVE-2025-48798 | High | 7.3 | 2025-05-27 | A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be… |
CVE-2025-48797 | High | 7.3 | 2025-05-27 | A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP… |
CVE-2025-48796 | High | 7.3 | 2025-05-27 | A flaw was found in GIMP. The GIMP ani_load_image() function is vulnerable to a stack-based overflow. If a user opens.ANI files, GIMP may be used to store more… |
CVE-2025-4057 | Medium | 5.5 | 2025-05-26 | A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies. |
CVE-2025-5024 | High | 7.4 | 2025-05-22 | A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and r… |
CVE-2025-4969 | Medium | 6.5 | 2025-05-21 | A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. This can all… |
CVE-2025-4945 | Low | 3.7 | 2025-05-19 | A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processi… |
CVE-2025-4948 | High | 7.5 | 2025-05-19 | A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handl… |
CVE-2025-4476 | Medium | 4.3 | 2025-05-16 | A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 (Unau… |
CVE-2025-4478 | Medium | 6.5 | 2025-05-16 | A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a segmentation fault. This issue causes the… |
CVE-2025-3931 | High | 7.8 | 2025-05-14 | A flaw was found in Yggdrasil, which acts as a system broker, allowing the processes to communicate to other children's "worker" processes through the DBus com… |
CVE-2025-4574 | Medium | 6.5 | 2025-05-13 | In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free tha… |
CVE-2025-4432 | Medium | 5.3 | 2025-05-09 | A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to indu… |
CVE-2025-4382 | Medium | 5.9 | 2025-05-09 | A flaw was found in systems utilizing LUKS-encrypted disks with GRUB configured for TPM-based auto-decryption. When GRUB is set to automatically decrypt disks… |
CVE-2025-3528 | High | 8.2 | 2025-05-09 | A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. Thi… |
CVE-2025-31177 | Medium | 5.5 | 2025-05-07 | gnuplot is affected by a heap buffer overflow at function utf8_copy_one. |
CVE-2024-12225 | Critical | 9.1 | 2025-05-06 | A vulnerability was found in Quarkus in the quarkus-security-webauthn module. The Quarkus WebAuthn module publishes default REST endpoints for registering and… |
CVE-2025-4374 | Medium | 6.5 | 2025-05-06 | A flaw was found in Quay. When an organization acts as a proxy cache, and a user or robot pulls an image that hasn't been mirrored yet, they are granted "Admin… |
CVE-2025-4373 | Medium | 4.8 | 2025-05-06 | A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the charac… |
CVE-2025-3910 | Medium | 5.4 | 2025-04-29 | A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirem… |
CVE-2025-3501 | High | 8.2 | 2025-04-29 | A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended. |
CVE-2025-4035 | Medium | 4.3 | 2025-04-29 | A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at leas… |
CVE-2025-3891 | High | 7.5 | 2025-04-29 | A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending… |
CVE-2025-46421 | Medium | 6.8 | 2025-04-24 | A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redir… |
CVE-2025-46420 | Medium | 6.5 | 2025-04-24 | A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elemen… |
CVE-2025-46400 | Medium | 5.5 | 2025-04-23 | In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject functio… |
CVE-2025-46399 | Medium | 5.5 | 2025-04-23 | A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline function. |
CVE-2025-46398 | Medium | 5.5 | 2025-04-23 | In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function. |
CVE-2025-46397 | High | 7.8 | 2025-04-23 | A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function. |
CVE-2024-10306 | Medium | 5.4 | 2025-04-23 | A vulnerability was found in mod_proxy_cluster. The issue is that the <Directory> directive should be replaced by the <Location> directive as the former does n… |
CVE-2025-32911 | Critical | 9.0 | 2025-04-15 | A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP cli… |
CVE-2025-3576 | Medium | 5.9 | 2025-04-15 | A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum desi… |
CVE-2025-32914 | High | 7.4 | 2025-04-14 | A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP cli… |
CVE-2025-32912 | Medium | 6.5 | 2025-04-14 | A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash. |
CVE-2025-32910 | Medium | 6.5 | 2025-04-14 | A flaw was found in libsoup, where soup_auth_digest_authenticate() is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to cras… |
CVE-2025-32909 | Medium | 5.3 | 2025-04-14 | A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsou… |
CVE-2025-32913 | High | 7.5 | 2025-04-14 | A flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference. This flaw allows a… |
CVE-2025-32908 | High | 7.5 | 2025-04-14 | A flaw was found in libsoup. The HTTP/2 server in libsoup may not fully validate the values of pseudo-headers :scheme, :authority, and :path, which may allow a… |
CVE-2025-32907 | Medium | 5.3 | 2025-04-14 | A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to r… |
CVE-2025-32906 | High | 7.5 | 2025-04-14 | A flaw was found in libsoup, where the soup_headers_parse_request() function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to us… |
CVE-2025-3416 | Low | 3.7 | 2025-04-08 | A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may res… |
CVE-2025-2251 | Medium | 6.2 | 2025-04-07 | A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism. This vulne… |
CVE-2025-3360 | Low | 3.7 | 2025-04-07 | A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601(… |
CVE-2025-3359 | Medium | 6.2 | 2025-04-07 | A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment. |
CVE-2025-3155 | High | 7.4 | 2025-04-03 | A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to i… |
CVE-2025-32053 | Medium | 6.5 | 2025-04-03 | A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over-read. |