Lucene search
+L
RedhatRecent

131189 matches found

RedHat Linux
RedHat Linux
•added 2026/09/08 12:01 p.m.•18 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.37 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.37 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

8.1CVSS6.1AI score0.00735EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/09/08 11:26 a.m.•13 views

kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership()

A flaw was found in the Linux kernel's iouring/poll component. A logic error exists in the iopollgetownership function due to an incorrect signed comparison. This flaw prevents the necessary slowpath from being triggered when the IOPOLLCANCELFLAG is set, potentially leading to unexpected behavior...

7.8CVSS5.6AI score0.00176EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/08 11:26 a.m.•21 views

kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()

A flaw was found in the Linux kernel's Server Message Block SMB client. A missing lock around the tccount increment in the smb2findsmbsesstconunlocked function creates a race condition. This vulnerability, caused by an incomplete refactoring of locking mechanisms, could lead to unexpected behavio...

9.8CVSS5.6AI score0.00671EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/08 11:26 a.m.•11 views

kernel: nvmet-auth: validate reply message payload bounds against transfer length

A flaw was found in the Linux kernel's nvmet-auth component. A remote attacker, by sending a specially crafted NVMe-oF NVMe over Fabrics authentication reply message, can cause an out-of-bounds read in the kernel's memory. This vulnerability, exploitable pre-authentication, can lead to the...

9.1CVSS5.7AI score0.00524EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/08 11:26 a.m.•12 views

kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

A flaw was found in the Linux kernel's nvmet subsystem. An unauthenticated remote attacker could exploit an out-of-bounds heap read vulnerability in the Discovery Get Log Page function. By sending a specially crafted request with a manipulated offset, an attacker could read sensitive kernel memor...

9.1CVSS5.8AI score0.00748EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/08 11:26 a.m.•12 views

kernel: netfilter: nat: use kfree_rcu to release ops

A flaw was found in the Linux kernel's netfilter component, specifically within the Network Address Translation NAT subsystem. This vulnerability involves improper memory management when releasing network filter operation structures. This could potentially allow an attacker to cause a system cras...

7.8CVSS6.9AI score0.00191EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/08 11:26 a.m.•17 views

kernel: can: bcm: add locking for bcm_op runtime updates

A flaw was found in the Linux kernel's Controller Area Network CAN broadcast manager BCM. Improper locking during runtime updates of internal counters in the bcmcantx function allows a local attacker to trigger a slab-out-of-bounds read access. This vulnerability can lead to information disclosur...

7.3CVSS6.5AI score0.00242EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/08 11:26 a.m.•12 views

kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU

A flaw was found in the Kernel-based Virtual Machine KVM component of the Linux kernel on ARM64 systems. A highly privileged local attacker could exploit a vulnerability where the system fails to properly restrict memory access during a specific virtual machine operation. This could allow the...

8.2CVSS5.7AI score0.00175EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/08 11:26 a.m.•13 views

kernel: smb: client: fix change notify replay double-free

A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability occurs due to a double-free error when handling change notify replies. If a response attempt returns a replayable error and frees its buffer, and then SMB2notifyinit fails, the same buffer can be freed agai...

9.8CVSS6.2AI score0.00457EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/08 11:26 a.m.•12 views

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

9.8CVSS6.7AI score0.00748EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2026/09/08 11:15 a.m.•9 views

gpsd: gpsd: Arbitrary OS command execution via code injection in gpsprof utility

A flaw was found in gpsd. This code injection vulnerability in the gpsprof utility allows an attacker to execute arbitrary operating system OS commands. By controlling GPS input data, an attacker can inject malicious content into the SKY.satellites.used field. This unsanitized input is then...

8.5CVSS6.3AI score0.00265EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/09/08 11:15 a.m.•13 views

Important: Red Hat Security Advisory: gpsd security update

An update for gpsd is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

8.5CVSS5.9AI score0.00265EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/09/08 11:14 a.m.•14 views

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS5.8AI score0.00868EPSS
SaveExploits0References11
RedHat Linux
RedHat Linux
•added 2026/09/08 11:14 a.m.•11 views

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

6.1CVSS5.9AI score0.0031EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:14 a.m.•9 views

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

5.9CVSS5.7AI score0.0055EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:14 a.m.•9 views

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

7.5CVSS5.8AI score0.00568EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:14 a.m.•10 views

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

7.5CVSS5.9AI score0.00568EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:14 a.m.•13 views

github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending oversized or invalid baggage headers. The Parse function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when...

5.3CVSS5.9AI score0.00336EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/08 11:14 a.m.•10 views

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

7.5CVSS5.8AI score0.00568EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:14 a.m.•9 views

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...

7.5CVSS5.8AI score0.00868EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:14 a.m.•10 views

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

7.5CVSS5.8AI score0.00798EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:14 a.m.•10 views

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

7.5CVSS5.8AI score0.0056EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:14 a.m.•13 views

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

7.5CVSS5.8AI score0.00568EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:07 a.m.•15 views

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

7.5CVSS5.8AI score0.00568EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:07 a.m.•7 views

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

7.5CVSS5.8AI score0.00798EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:07 a.m.•11 views

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

7.5CVSS5.8AI score0.00568EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:07 a.m.•10 views

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

6.1CVSS5.9AI score0.0031EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:07 a.m.•9 views

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...

7.5CVSS5.8AI score0.00868EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:07 a.m.•8 views

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

7.5CVSS5.9AI score0.00568EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:07 a.m.•8 views

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

7.5CVSS5.8AI score0.00568EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 11:07 a.m.•21 views

Important: Red Hat Security Advisory: ignition security update

An update for ignition is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

7.5CVSS5.8AI score0.00868EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2026/09/08 11:07 a.m.•10 views

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

5.9CVSS5.7AI score0.0055EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/08 10:43 a.m.•31 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.37 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.37 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

9.3CVSS5.8AI score0.00781EPSS
SaveExploits2References8
RedHat Linux
RedHat Linux
•added 2026/09/08 10:30 a.m.•13 views

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.0 release

Red Hat OpenShift distributed tracing platform Tempo 3.11.0 has been released This release of the Red Hat OpenShift distributed tracing platform Tempo provides new features, security improvements, and bug fixes. Breaking changes: High availability defaults for TempoStack deployment sizes: Before...

8.7CVSS5.7AI score0.0103EPSS
SaveExploits0References14
RedHat Linux
RedHat Linux
•added 2026/09/08 10:23 a.m.•17 views

Important: Red Hat Security Advisory: redis security, bug fix, and enhancement update

An update for redis is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

7.5CVSS7.6AI score0.00872EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/09/08 10:23 a.m.•12 views

redis: Redis: Remote Code Execution via specially crafted RESTORE payload

A flaw was found in Redis. An authenticated attacker, in an unusual configuration where they can execute the RESTORE command, could exploit a double free vulnerability. This occurs when a specially crafted RESTORE payload references the same NACK pending entry by multiple consumers, and both...

7.5CVSS7.7AI score0.00872EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2026/09/08 10:23 a.m.•12 views

redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free

A flaw was found in Redis. This vulnerability, a use-after-free, exists within the tlsProcessPendingData function, which manages the Transport Layer Security TLS pending-data list when Redis is configured with TLS support. A remote, unauthenticated attacker could exploit this to execute...

7.5CVSS6AI score0.00479EPSS
SaveExploits0References11
RedHat Linux
RedHat Linux
•added 2026/09/08 10:16 a.m.•6 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

9.8CVSS6.3AI score0.00715EPSS
SaveExploits4References22
RedHat Linux
RedHat Linux
•added 2026/09/08 10:16 a.m.•6 views

firefox: thunderbird: Information disclosure in the Graphics: Text component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics: Text component...

6.5CVSS5.8AI score0.00441EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/08 10:16 a.m.•7 views

firefox: thunderbird: Privilege escalation in the Networking: Cookies component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Networking: Cookies component...

8.8CVSS5.8AI score0.00444EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/08 10:16 a.m.•7 views

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...

9.8CVSS6.4AI score0.00715EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/08 10:16 a.m.•7 views

firefox: thunderbird: Mitigation bypass in the Storage: Cache API component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Storage: Cache API component...

9.1CVSS5.8AI score0.00479EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/08 10:16 a.m.•9 views

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...

9.8CVSS6.4AI score0.00715EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/08 10:16 a.m.•7 views

firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics: CanvasWebGL component...

7.5CVSS5.8AI score0.00212EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/08 10:16 a.m.•8 views

firefox: thunderbird: Privilege escalation in the DOM: Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Networking component...

8.8CVSS5.8AI score0.00454EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/08 10:16 a.m.•7 views

firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: WebAssembly component...

9.8CVSS5.8AI score0.00592EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2026/09/08 10:16 a.m.•7 views

firefox: thunderbird: Privilege escalation in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component...

8.8CVSS5.8AI score0.00454EPSS
SaveExploits3References6
RedHat Linux
RedHat Linux
•added 2026/09/08 10:16 a.m.•7 views

firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...

4.3CVSS5.7AI score0.00346EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/08 10:16 a.m.•7 views

firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Graphics: ImageLib component...

5.4CVSS5.8AI score0.00169EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/09/08 10:16 a.m.•6 views

firefox: Privilege escalation in the Remote Settings Client component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Remote Settings Client component...

8.8CVSS5.7AI score0.00454EPSS
SaveExploits0References6
Total number of security vulnerabilities131189