Red Hat
Page 34 of 61 — Red Hat CVEs from a corpus of 6097, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-7749 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potentially exploitable crash. This vulnerabil… |
CVE-2017-5472 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no… |
CVE-2017-5470 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
CVE-2017-5469 | Critical | 9.8 | 2018-06-11 | Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45… |
CVE-2017-5467 | High | 7.5 | 2018-06-11 | A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thu… |
CVE-2017-5466 | Medium | 6.1 | 2018-06-11 | If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will run the reloaded "dat… |
CVE-2017-5465 | Critical | 9.1 | 2018-06-11 | An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied i… |
CVE-2017-5464 | Critical | 9.8 | 2018-06-11 | During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruptio… |
CVE-2017-5460 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potential… |
CVE-2017-5459 | Critical | 9.8 | 2018-06-11 | A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR… |
CVE-2017-5456 | Critical | 9.8 | 2018-06-11 | A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and… |
CVE-2017-5455 | High | 7.5 | 2018-06-11 | The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability… |
CVE-2017-5454 | High | 7.5 | 2018-06-11 | A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker thr… |
CVE-2017-5451 | Medium | 4.3 | 2018-06-11 | A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text dis… |
CVE-2017-5449 | High | 7.5 | 2018-06-11 | A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects… |
CVE-2017-5448 | High | 8.6 | 2018-06-11 | An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs within the Gecko Media… |
CVE-2017-5447 | Critical | 9.1 | 2018-06-11 | An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to… |
CVE-2017-5446 | Critical | 9.8 | 2018-06-11 | An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. Th… |
CVE-2017-5445 | High | 7.5 | 2018-06-11 | A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the readi… |
CVE-2017-5444 | High | 7.5 | 2018-06-11 | A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows fo… |
CVE-2017-5443 | Critical | 9.8 | 2018-06-11 | An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9… |
CVE-2017-5442 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affe… |
CVE-2017-5441 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thund… |
CVE-2017-5440 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objec… |
CVE-2017-5439 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulner… |
CVE-2017-5438 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially ex… |
CVE-2017-5436 | High | 8.8 | 2018-06-11 | An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issu… |
CVE-2017-5435 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable cr… |
CVE-2017-5434 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird… |
CVE-2017-5433 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller whi… |
CVE-2017-5432 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird… |
CVE-2017-5430 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that… |
CVE-2017-5429 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption a… |
CVE-2017-5428 | Critical | 9.8 | 2018-06-11 | An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to t… |
CVE-2017-5410 | Critical | 9.8 | 2018-06-11 | Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is managed for me… |
CVE-2017-5408 | Medium | 5.3 | 2018-06-11 | Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential informa… |
CVE-2017-5407 | Medium | 6.5 | 2018-06-11 | Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This c… |
CVE-2017-5405 | Medium | 5.3 | 2018-06-11 | Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. This vulnerability affects Firefox < 52, F… |
CVE-2017-5404 | Critical | 9.8 | 2018-06-11 | A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results i… |
CVE-2017-5402 | Critical | 9.8 | 2018-06-11 | A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. This result… |
CVE-2017-5401 | Critical | 9.8 | 2018-06-11 | A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vu… |
CVE-2017-5400 | Critical | 9.8 | 2018-06-11 | JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vuln… |
CVE-2017-5398 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some… |
CVE-2017-5396 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are freed from memory. Th… |
CVE-2017-5390 | Critical | 9.8 | 2018-06-11 | The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing JSON or HTTP headers data, allowing for… |
CVE-2017-5386 | High | 7.3 | 2018-06-11 | WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, leading to potential data disclosure or p… |
CVE-2017-5383 | Medium | 5.3 | 2018-06-11 | URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain name spoofing attacks i… |
CVE-2017-5380 | Critical | 9.8 | 2018-06-11 | A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and… |
CVE-2017-5378 | High | 7.5 | 2018-06-11 | Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered through hash codes, an… |
CVE-2017-5376 | Critical | 9.8 | 2018-06-11 | Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51. |
CVE-2017-5375 | Critical | 9.8 | 2018-06-11 | JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird <… |
CVE-2017-5373 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed evidence of memory corruption and we presume that with enough… |
CVE-2016-9905 | High | 8.8 | 2018-06-11 | A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR < 45.6 and Thunderbir… |
CVE-2016-9904 | High | 7.5 | 2018-06-11 | An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zone in specific contexts. This could be u… |
CVE-2016-9902 | High | 7.5 | 2018-06-11 | The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content… |
CVE-2016-9901 | Critical | 9.8 | 2018-06-11 | HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:pocket-saved" (unpr… |
CVE-2016-9900 | High | 7.5 | 2018-06-11 | External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This could allow for cros… |
CVE-2016-9899 | Critical | 9.8 | 2018-06-11 | Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox < 5… |
CVE-2016-9898 | Critical | 9.8 | 2018-06-11 | Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerability affects Firefox < 50.1, Firefox ESR… |
CVE-2016-9897 | High | 7.5 | 2018-06-11 | Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array within libGLES. This vuln… |
CVE-2016-9895 | Medium | 6.1 | 2018-06-11 | Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inline JavaScript. This vulnerability affects… |
CVE-2016-9893 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some… |
CVE-2016-9079 | High | 7.5 | 2018-06-11 | A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox a… |
CVE-2018-12020 | High | 7.5 | 2018-06-08 | mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output… |
CVE-2018-1000180 | High | 7.5 | 2018-06-05 | Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pai… |
CVE-2016-1000338 | High | 7.5 | 2018-06-01 | In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject ex… |
CVE-2018-11627 | Medium | 6.1 | 2018-05-31 | Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception. |
CVE-2018-11235 | High | 7.8 | 2018-05-30 | In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a craft… |
CVE-2018-1000301 | Critical | 9.1 | 2018-05-24 | curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tr… |
CVE-2018-1000199 | Medium | 5.5 | 2018-05-24 | The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption… |
CVE-2018-1126 | Medium | 4.8 | 2018-05-23 | procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. This flaw is related… |
CVE-2018-1124 | High | 7.8 | 2018-05-23 | procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escal… |
CVE-2016-8656 | High | 7.0 | 2018-05-22 | Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script which could result in local privilege e… |
CVE-2018-3639 | Medium | 5.5 | 2018-05-22 | Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are know… |
CVE-2018-1067 | Medium | 6.1 | 2018-05-21 | In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injecti… |
CVE-2018-4944 | Critical | 9.8 | 2018-05-19 | Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execu… |
CVE-2018-11237 | High | 7.8 | 2018-05-18 | An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer… |
CVE-2018-11236 | Critical | 9.8 | 2018-05-18 | stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could… |
CVE-2018-5256 | High | 7.5 | 2018-05-18 | CoreOS Tectonic 1.7.x before 1.7.9-tectonic.4 and 1.8.x before 1.8.4-tectonic.3 mounts a direct proxy to the kubernetes cluster at /api/kubernetes/ which is ac… |
CVE-2018-1111 | High | 7.5 | 2018-05-17 | DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script i… |
CVE-2018-11212 | Medium | 6.5 | 2018-05-16 | An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error… |
CVE-2018-1087 | High | 8.0 | 2018-05-15 | kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kern… |
CVE-2018-1131 | High | 8.8 | 2018-05-15 | Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated access… |
CVE-2018-10998 | Medium | 6.5 | 2018-05-12 | An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service (SIGABRT) by triggering an incorrect S… |
CVE-2018-1258 | High | 8.8 | 2018-05-11 | Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An un… |
CVE-2018-1257 | Medium | 6.5 | 2018-05-11 | Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSoc… |
CVE-2016-8627 | Medium | 4.3 | 2018-05-11 | admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that allows logs to be available via GET reques… |
CVE-2018-1118 | Low | 2.3 | 2018-05-10 | Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/v… |
CVE-2017-18267 | Medium | 5.5 | 2018-05-10 | The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infinite recursion) via… |
CVE-2018-1130 | Medium | 5.5 | 2018-05-10 | Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/dccp/output.c in that allows a local user… |
CVE-2018-1089 | High | 7.5 | 2018-05-09 | 389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needing escapes, possibly leading to buffer… |
CVE-2018-10683 | Critical | 9.8 | 2018-05-09 | An issue was discovered in WildFly 10.1.2.Final. In the case of a default installation without a security realm reference, an attacker can successfully access… |
CVE-2018-10184 | High | 7.5 | 2018-05-09 | An issue was discovered in HAProxy before 1.8.8. The incoming H2 frame length was checked against the max_frame_size setting instead of being checked against t… |
CVE-2018-8897 | High | 7.8 | 2018-05-08 | A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some… |
CVE-2017-2611 | Medium | 4.3 | 2018-05-08 | Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes (SECURITY-389). The URLs /workspaceCleanup and /f… |
CVE-2018-10768 | Medium | 6.5 | 2018-05-06 | There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to… |
CVE-2018-10767 | Medium | 6.5 | 2018-05-06 | There is a stack-based buffer over-read in calling GLib in the function gxps_images_guess_content_type of gxps-images.c in libgxps through 0.3.0 because it doe… |
CVE-2018-0494 | Medium | 6.5 | 2018-05-06 | GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line. |
CVE-2013-2233 | High | 7.4 | 2018-05-04 | Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys. |
CVE-2018-10733 | Medium | 6.5 | 2018-05-04 | There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial… |