Latest CVEs

Goroutine/file-descriptor leak in storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer on malformed layers

Red Hat · 1 advisory

Windows RD Gateway consent message heap out-of-bounds read

Red Hat · 1 advisory

use-after-free in drdynvc virtual channel PDU handling

Red Hat · 1 advisory

heap out-of-bounds read in WinPR clipboard PNG-to-CF_DIB synthesis

Red Hat · 1 advisory

Android client heap out-of-bounds read via graphics pipeline

Red Hat · 1 advisory

heap buffer overflow in server rdpsnd via crafted audio formats

Red Hat · 1 advisory

null pointer dereference in smartcard emulation via crafted reader name

Red Hat · 1 advisory

proxy improper TLS certificate validation allows target impersonation

Red Hat · 1 advisory

missing decompressed-size limit when parsing compressed YAML

Red Hat · 1 advisory

unbounded recursion when parsing nested xmd YAML

Red Hat · 1 advisory

out-of-bounds read when emitting rpm-map artifacts

Red Hat · 1 advisory

SSRF via job-spec model.url with bearer credential forwarding

Red Hat · 1 advisory

Apache bRPC: Missing Authentication for Streaming RPC Frames

Apache · 1 advisory

Apache bRPC: Out-of-bounds Read in Multi-stream RPC Response Handling

Apache · 1 advisory

Apache bRPC: Unbounded Memory Accumulation in Stream Message Reassembly

Apache · 1 advisory

Apache bRPC: Uncontrolled Resource Consumption via Excessive Streams in a Single RPC Request

Apache · 1 advisory

Apache bRPC: Denial of Service via Unbounded Redis Inline Command Allocation

Apache · 1 advisory

Apache bRPC: Memory Exhaustion Through Inconsistent Message Body Limits

Apache · 1 advisory

Apache bRPC: Out-of-bounds Read in URL and Header Lookup Tables on Unsigned-char Platforms

Apache · 1 advisory

Apache bRPC: TLS Client Accepts Certificates for Mismatched Peer Names

Apache · 1 advisory

Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service

Apache · 1 advisory

Apache bRPC: Stack Exhaustion via Unbounded Recursion in AMF Parser

Apache · 1 advisory

Apache bRPC: Integer Underflow and Out-of-Bounds Read in HTTP/2 DATA Frame Parser

Apache · 1 advisory

Apache bRPC: Remote Memory Exhaustion in RTMP AMF Parser

Apache · 1 advisory

Apache bRPC: Out-of-Bounds Write in Redis Command Parser

Apache · 1 advisory

Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requests

Apache · 1 advisory

Apache bRPC: Stack Exhaustion via Recursive HPACK Dynamic Table Size Update Decoding

Apache · 1 advisory

Apache bRPC: Stack Exhaustion via Unbounded Recursion in Redis Reply Parser

Apache · 1 advisory

Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC

Apache · 1 advisory

Apache IoTDB: Legacy Pipe Privilege Escalation

Apache · 1 advisory

authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11

Apache · 1 advisory

Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver

Apache · 1 advisory

A Kustomize Helm config home can run commands in the repo-server

Red Hat · 1 advisory

A Kustomize remote ref can run commands in the repo-server

Red Hat · 1 advisory

A Jsonnet import can read files from the repo-server

Red Hat · 1 advisory

legitimate CA certificates incorrectly rejected causing denial of service

Red Hat · 1 advisory

certificates with invalid extensions incorrectly accepted

Red Hat · 1 advisory

legitimate user certificates incorrectly rejected causing denial of service

Red Hat · 1 advisory

Rate limit bypass via race condition in SessionManager

Red Hat · 1 advisory

.NET Information Disclosure Vulnerability

Red Hat · 1 advisory

Denial of Service via specially crafted web requests

Red Hat · 1 advisory

GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull Refspec

Red Hat · 1 advisory

Denial of Service via compression bomb

Red Hat · 1 advisory

fix out-of-bounds reads on short RX/TX frames and control fallthrough

Red Hat · 1 advisory

replace bind when learning local endpoint

Red Hat · 1 advisory

fix object leak in virtio_gpu_resource_create_ioctl

Red Hat · 1 advisory

fix TE GPIO lifetime for host attach

Red Hat · 1 advisory

fix object leak when drm_gem_handle_create fails

Red Hat · 1 advisory

fix object leaks in virtio_gpu_resource_create_blob_ioctl

Red Hat · 1 advisory

release the GEM object on virtio_gpu_vram_create errors

Red Hat · 1 advisory

validate device-supplied DMA indices

Red Hat · 1 advisory

skip expired catchall elements on insert and delete

Red Hat · 1 advisory

fix soft lockup on out-of-range cmb_tpd_next_to_clean read

Red Hat · 1 advisory

drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc

Red Hat · 1 advisory

Keep internal commands dispatchable during error handling

Red Hat · 1 advisory

fix use-after-free in nfc_get_local_general_bytes

Red Hat · 1 advisory

fix dma_alloc_coherent leak on macb_alloc error paths

Red Hat · 1 advisory

fix soft lockup on out-of-range hw_next_to_clean read

Red Hat · 1 advisory

fix swapped IPv6 IPsec policy masks

Red Hat · 1 advisory

bound DHCP option construction

Red Hat · 1 advisory

fix OOB read in wacom_wac_pen_serial_enforce

Red Hat · 1 advisory

Check the data direction of a Data-In PDU

Red Hat · 1 advisory

terminate device name before lookup

Red Hat · 1 advisory

fix helper UAF due to extensions realloc

Red Hat · 1 advisory

fix zero-address non-strict match out-of-bounds read

Red Hat · 1 advisory

reject frames whose declared length exceeds the received data

Red Hat · 1 advisory

use cancel_delayed_work_sync in remove

Red Hat · 1 advisory

restart port group walk after deletion

Red Hat · 1 advisory

power down on startup RX gain failure

Red Hat · 1 advisory

cancel wdt_work after releasing the WDT IRQ

Red Hat · 1 advisory

avoid modifying shared unconfirmed ct entry

Red Hat · 1 advisory

fix MMIO read buffer leak on probe failure

Red Hat · 1 advisory

Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get

Red Hat · 1 advisory

Denial of Service via infinite loop during PDF page rewriting

Red Hat · 1 advisory

Denial of Service via large GIF comments

Red Hat · 1 advisory

Arbitrary code execution via insecure rule loading

Red Hat · 1 advisory

Man-in-the-middle attacks via untrusted intermediate certificates

Red Hat · 1 advisory

Denial of Service via improper memory tracking in XML_ParserReset

Red Hat · 1 advisory

Arbitrary code execution via insecure draft deserialization

Red Hat · 1 advisory

Streams for Apache Kafka Cruise Control: authentication bypass via extra path segment allows unauthenticated access to all admin endpoints

Red Hat · 1 advisory

kroxylicious-kms-provider-azure-key-vault-kms: Streams for Apache Kafka Kroxylicious: Azure Key Vault SSRF exfiltrates bearer token via untrusted EDEK vaultName

Red Hat · 1 advisory

Streams for Apache Kafka Console: cross-namespace KafkaUser Secret exfiltration via confused deputy

Red Hat · 1 advisory

Streams for Apache Kafka Console: tenant-controlled container image on ClusterRole-bound pod enables namespace-to-cluster privilege escalation

Red Hat · 1 advisory

Website spoofing via failure to block compromised intermediate certificates

Red Hat · 1 advisory

Information disclosure via Block Storage API message listing

Red Hat · 1 advisory

Mutual exclusion bypass via improper stale lock removal

Red Hat · 1 advisory

arbitrary file truncation via lock path replacement

Red Hat · 1 advisory

Lock bypass via pre-created shared protocol directory

Red Hat · 1 advisory

Information disclosure via symbolic link following in SoftFileLock

Red Hat · 1 advisory

Unauthorized file exposure via symbolic link manipulation in SoftFileLock

Red Hat · 1 advisory

Denial of Service via insecure holder record refresh

Red Hat · 1 advisory

Unauthorized concurrent access via stale lock cleanup race condition

Red Hat · 1 advisory

Lock redirection and mutual exclusion bypass via symbolic links

Red Hat · 1 advisory

Unauthorized lock acquisition via forged process identifier in SoftFileLock

Red Hat · 1 advisory

Arbitrary file overwrite via insecure database file reopening

Red Hat · 1 advisory

Unauthorized file write via lock directory replacement

Red Hat · 1 advisory

Command injection via improper file path validation

Red Hat · 1 advisory

Arbitrary code execution via improper argument escaping on Windows

Red Hat · 1 advisory

Arbitrary command execution via improper filename handling

Red Hat · 1 advisory

Arbitrary script execution via improper URL handling during HTML transformation

Red Hat · 1 advisory

Information disclosure via improper module path handling

Red Hat · 1 advisory

Information disclosure via crafted WebAssembly query parameter

Red Hat · 1 advisory

Information disclosure via improper file access restrictions

Red Hat · 1 advisory

Cross-site scripting via unescaped mock module URL

Red Hat · 1 advisory

arbitrary code execution via heap-based buffer overflow in language tag handling

Red Hat · 1 advisory

Input validation bypass via substitute character in strict mode

Red Hat · 1 advisory

Out-of-bounds write via crafted font in WebAssembly shaper

Red Hat · 1 advisory

Denial of Service via crafted font in WebAssembly shaper

Red Hat · 1 advisory

Denial of Service via unbounded recursion in iframe tag processing

Red Hat · 1 advisory

HTML sanitization bypass via improper noscript tag handling

Red Hat · 1 advisory

arbitrary script execution via namespace-prefixed SVG animation elements

Red Hat · 1 advisory

Unauthorized cross-organization user management via the SCIM API

Red Hat · 1 advisory

Cross-site scripting via unsafe meta refresh content attributes

Red Hat · 1 advisory

Information disclosure via array-formatted headers during cross-origin redirects

Red Hat · 1 advisory

Arbitrary code execution via insecure temporary cache symlinks

Red Hat · 1 advisory

Unverified package installation via premature cache storage

Red Hat · 1 advisory

Information disclosure via unencrypted AutoDiscover lookup

Red Hat · 1 advisory

information disclosure via malformed authentication challenge

Red Hat · 1 advisory

Use-after-free via S/MIME decryption password prompt

Red Hat · 1 advisory

Unauthorized actions via XMPP stanza injection

Red Hat · 1 advisory

Unauthorized file write via symlink following

Red Hat · 1 advisory

Integrity verification bypass via pip seeder download option

Red Hat · 1 advisory

arbitrary code execution via improper quoting in xonsh activation scripts

Red Hat · 1 advisory

Arbitrary file deletion via path traversal in package metadata

Red Hat · 1 advisory

Environment isolation bypass via crafted destination path

Red Hat · 1 advisory

Arbitrary code execution via insecure cached file permissions

Red Hat · 1 advisory

Arbitrary file overwrite via insecure symlink handling

Red Hat · 1 advisory

arbitrary code execution via improperly quoted interpreter paths in script launchers

Red Hat · 1 advisory

Arbitrary code execution via malicious prompt text

Red Hat · 1 advisory

Insecure file permission modification via symlink following

Red Hat · 1 advisory

arbitrary code execution via crafted environment name

Red Hat · 1 advisory

Arbitrary code execution via use-after-free in SVG

Red Hat · 1 advisory

Information disclosure in Bluetooth via crafted HTML page

Red Hat · 1 advisory

Arbitrary code execution inside sandbox via crafted HTML page

Red Hat · 1 advisory

Out of bounds read in HID

Red Hat · 1 advisory

Use after free in PerformanceAPIs

Red Hat · 1 advisory

arbitrary code execution inside sandbox via crafted HTML page

Red Hat · 1 advisory

Denial of Service via unclosed link reference definitions

Red Hat · 1 advisory

arbitrary code execution inside sandbox via crafted HTML page

Red Hat · 1 advisory

arbitrary code execution via use-after-free in CSS

Red Hat · 1 advisory

Use after free in Media

Red Hat · 1 advisory

unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell commands as the CouchDB operating system user

Apache · 1 advisory

unlimited gzip decompression routine in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any remote client to cause a denial of service via memory exhaustion

Apache · 1 advisory

missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of service via creating an infinite HTTP redirect loop

Apache · 1 advisory

Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to cause a denial of service via memory exhaustion

Apache · 1 advisory

Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the full contents of a prefixed _user or _replicator database via an unauthorised API endpoint

Apache · 1 advisory

Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to read replication credentials of other users’ replications, not just their own

Apache · 1 advisory

Information disclosure via buffer under-read during non-blocking writes

Apache, Red Hat · 2 advisories

Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat

Apache, Red Hat · 2 advisories

Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)

Apache, Red Hat · 2 advisories

Unauthorized socket access via TOCTOU race condition

Apache, Red Hat · 2 advisories

Information disclosure via incomplete HTTP trailer cleanup

Apache, Red Hat · 2 advisories

Possible TLS 1.3 connection failures

Apache, Red Hat · 2 advisories

missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password

Apache, Red Hat · 2 advisories

Information disclosure via incorrect object recycling in HTTP/2 processing

Apache, Red Hat · 2 advisories

Fix NULL pointer dereference in debug_info_copy

Red Hat · 1 advisory

stop Tx NAPI before disabling the queues

Red Hat · 1 advisory

fix UAF on lgr list traversal in smcr_port_err

Red Hat · 1 advisory

hold asoc or transport before mod_timer in timer handlers

Red Hat · 1 advisory

reject an out of range traffic class

Red Hat · 1 advisory

use d_instantiate_new in ntfs_create_inode and murder syzbot's "WARNING in do_new_mount" saga

Red Hat · 1 advisory

bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc

Red Hat · 1 advisory

Fix a refcount leak in attach_perf_ctx_data

Red Hat · 1 advisory

hold IPsec RX state under the XArray lock

Red Hat · 1 advisory

Reject short EA=0 frames in rfcomm_recv_frame

Red Hat · 1 advisory

Fix bpf_sock context code generation

Red Hat · 1 advisory

fix header length used by gve_can_send_tso for UDP GSO

Red Hat · 1 advisory

fix sbi->pipe file reference leak in autofs_kill_sb

Red Hat · 1 advisory

record the PHY only once bringup cannot fail

Red Hat · 1 advisory

validate helper command length before pull

Red Hat · 1 advisory

use one headroom snapshot for neighbour replies

Red Hat · 1 advisory

prevent collapsing skbs across boundary in rtx queue

Red Hat · 1 advisory

Avoid rounding zero ring sizes

Red Hat · 1 advisory

fix races in Tx timestamp handling

Red Hat · 1 advisory

keep room for the mac header in dst_dev_overhead

Red Hat · 1 advisory

leave the MDIO IRQ mappings to regmap-irq

Red Hat · 1 advisory

Disable trapping of PMZR_EL0 writes to EL2

Red Hat · 1 advisory

Reject pkt arguments in mutating subprogs

Red Hat · 1 advisory

clear TX descriptor on fragment mapping failure

Red Hat · 1 advisory

Fix dst leak for uncached routes

Red Hat · 1 advisory

fix slab-out-of-bounds reads when logging service names

Red Hat · 1 advisory

fix back-transition for iso_resource_auto client resource

Red Hat · 1 advisory

fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap

Red Hat · 1 advisory

Fill branch entries with a single assignment

Red Hat · 1 advisory

Fix immediate JMP JEQ/JNE on MIPS32

Red Hat · 1 advisory

discard the rest of the packet on a stale-cookie error

Red Hat · 1 advisory

Reject non-negative offsets in stack_slot_obj_get_spi

Red Hat · 1 advisory

fix NULL dereference on unbind of MT7531 and MT7621

Red Hat · 1 advisory

remove a disconnected socket from the 4-tuple hash table

Red Hat · 1 advisory

Terminate the fgraph_data list when the reservation is not filled

Red Hat · 1 advisory

fix potential stack infoleak in em_text_dump

Red Hat · 1 advisory

prevent IOC timer rearm during teardown

Red Hat · 1 advisory

flush skb_defer_nodes in dev_cpu_dead

Red Hat · 1 advisory

Prevent rt6_insert_exception for dying fib6_info

Red Hat · 1 advisory

include receive overhead in the length check

Red Hat · 1 advisory

clamp freelist reconstruction requests

Red Hat · 1 advisory

ensure sufficient headroom in vlan_dev_hard_header

Red Hat · 1 advisory

fix pull-bound underflow in skb_checksum_setup_ipv6

Red Hat · 1 advisory

reject TSO packets with an out of range MSS

Red Hat · 1 advisory

don't assume the inode is locked in path_unlink/path_rmdir

Red Hat · 1 advisory