Lucene search
+L
RedhatRecent

122940 matches found

RedHat Linux
RedHat Linux
•added 2 days ago•7 views

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•6 views

389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...

7.5CVSS5.4AI score0.00687EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2 days ago•6 views

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•6 views

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

7.5CVSS5.4AI score0.00583EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•12 views

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•13 views

389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...

7.5CVSS5.4AI score0.00687EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2 days ago•7 views

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

7.5CVSS5.4AI score0.00583EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•6 views

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•4 views

389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...

7.5CVSS5.4AI score0.00687EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2 days ago•5 views

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

7.5CVSS5.4AI score0.00583EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•5 views

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•5 views

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•5 views

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•6 views

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•11 views

389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...

7.5CVSS5.4AI score0.00687EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2 days ago•10 views

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

7.5CVSS5.4AI score0.00583EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 3 days ago•3 views

.NET: .NET Denial of Service Vulnerability

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

7.5CVSS5.3AI score0.01057EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 3 days ago•3 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet8.0: aspnetcore-runtime-8.0-8.0.30-0.1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-8.0-8.0.30-0.1.hum1 aarch64, x8664 aspnetcore-targeting-pack-8.0-8.0.30-0.1.hum1 aarch64, x8664...

7.8CVSS5.2AI score0.01057EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 3 days ago•2 views

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

7.8CVSS5.2AI score0.00288EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 3 days ago•3 views

.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

5.9CVSS5.1AI score0.00546EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 3 days ago•3 views

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

5.9CVSS5.3AI score0.00706EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 4 days ago•12 views

.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

5.9CVSS5.1AI score0.00546EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 4 days ago•8 views

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

7.8CVSS5.2AI score0.00288EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 4 days ago•8 views

.NET: .NET Denial of Service Vulnerability

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

7.5CVSS5.3AI score0.01057EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 4 days ago•10 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet10.0: aspnetcore-runtime-10.0-10.0.11-1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-10.0-10.0.11-1.hum1 aarch64, x8664 aspnetcore-targeting-pack-10.0-10.0.11-1.hum1 aarch64, x8664...

7.8CVSS5.2AI score0.01057EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 4 days ago•9 views

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

5.9CVSS5.3AI score0.00706EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 5 days ago•13 views

expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling

A flaw in libexpat's toUtf16 functions mishandles Unicode low surrogates by treating them as high surrogates. An attacker can exploit the resulting out-of-bounds read to trigger an infinite loop, causing a denial of service DoS...

6.2CVSS5.3AI score0.00176EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 5 days ago•11 views

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: expat: expat-2.8.3-0.1.hum1 aarch64, x8664 expat-devel-2.8.3-0.1.hum1 aarch64, x8664 expat-static-2.8.3-0.1.hum1 aarch64, x8664 expat-2.8.3-0.1.hum1.src src Security Fixes: expat: CVE-2026-72522...

6.2CVSS5.2AI score0.00176EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 5 days ago•5 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.25: golang1.25-1.25.13-0.1.hum1 aarch64, x8664 golang1.25-bin-1.25.13-0.1.hum1 aarch64, x8664 golang1.25-docs-1.25.13-0.1.hum1 noarch golang1.25-misc-1.25.13-0.1.hum1 noarch...

7.5CVSS5.4AI score0.0059EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•5 views

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

5.9CVSS5.6AI score0.00441EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•5 views

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

7.5CVSS5.6AI score0.00483EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•4 views

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

7.5CVSS5.5AI score0.00465EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•5 views

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

7.5CVSS5.6AI score0.00483EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•4 views

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

6.1CVSS5.5AI score0.00263EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•5 views

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

7.5CVSS5.6AI score0.0059EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•4 views

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

6.1CVSS5.6AI score0.00263EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•4 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.26: golang1.26-1.26.6-0.1.hum1 aarch64, x8664 golang1.26-bin-1.26.6-0.1.hum1 aarch64, x8664 golang1.26-docs-1.26.6-0.1.hum1 noarch golang1.26-misc-1.26.6-0.1.hum1 noarch...

7.5CVSS5.3AI score0.0059EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•8 views

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

7.5CVSS5.7AI score0.00483EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•5 views

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

7.5CVSS5.6AI score0.00483EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•4 views

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

7.5CVSS5.7AI score0.0059EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•4 views

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

5.9CVSS5.6AI score0.00441EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•5 views

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

7.5CVSS5.6AI score0.00465EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•7 views

gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback

A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an...

7.5CVSS7.5AI score0.00577EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 5 days ago•6 views

gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit...

7.1CVSS7.6AI score0.00326EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 5 days ago•8 views

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

7.5CVSS7.6AI score0.00577EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 6 days ago•6 views

crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

A flaw was found in the crypto/x509 package of golang. This vulnerability allows a remote attacker to cause a Denial of Service DoS by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name SAN entries. The certificate verification process, specifical...

7.5CVSS5.5AI score0.00591EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 6 days ago•6 views

oslo.messaging: openstack: OpenStack oslo.messaging: Man-in-the-middle attack via improper TLS hostname verification

A flaw was found in OpenStack oslo.messaging. The RabbitMQ driver does not properly verify the hostname of the message broker when establishing a TLS Transport Layer Security connection. An attacker capable of intercepting control-plane network traffic can exploit this vulnerability to impersonat...

7.4CVSS5.4AI score0.00172EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 6 days ago•6 views

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

8.8CVSS5.4AI score0.0034EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 6 days ago•9 views

crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...

7.5CVSS5.2AI score0.00355EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 6 days ago•8 views

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory

An update for Red Hat OpenStack Platform 16.2 Train is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

10CVSS5.2AI score0.01945EPSS
SaveExploits7References26
Total number of security vulnerabilities122940