Lucene search
+L
RedhatRecent

122960 matches found

RedHat Linux
RedHat Linux
•added 2 days ago•6 views

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

7.5CVSS5.8AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•5 views

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

7.5CVSS5.8AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•5 views

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

7.5CVSS5.4AI score0.00583EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•9 views

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.8CVSS5.8AI score0.00205EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2 days ago•4 views

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...

7.8CVSS6.4AI score0.00205EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2 days ago•7 views

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•6 views

389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...

7.5CVSS5.4AI score0.00687EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2 days ago•6 views

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

7.5CVSS5.4AI score0.00583EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•6 views

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•12 views

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•13 views

389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...

7.5CVSS5.4AI score0.00687EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2 days ago•6 views

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•7 views

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

7.5CVSS5.4AI score0.00583EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•4 views

389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...

7.5CVSS5.4AI score0.00687EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2 days ago•5 views

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

7.5CVSS5.4AI score0.00583EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•5 views

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•5 views

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•5 views

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•11 views

389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...

7.5CVSS5.4AI score0.00687EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2 days ago•6 views

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2 days ago•10 views

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

7.5CVSS5.4AI score0.00583EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 3 days ago•3 views

.NET: .NET Denial of Service Vulnerability

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

7.5CVSS5.3AI score0.01057EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 3 days ago•3 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet8.0: aspnetcore-runtime-8.0-8.0.30-0.1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-8.0-8.0.30-0.1.hum1 aarch64, x8664 aspnetcore-targeting-pack-8.0-8.0.30-0.1.hum1 aarch64, x8664...

7.8CVSS5.2AI score0.01057EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 3 days ago•2 views

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

7.8CVSS5.2AI score0.00288EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 3 days ago•3 views

.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

5.9CVSS5.1AI score0.00546EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 3 days ago•4 views

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

5.9CVSS5.3AI score0.00706EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 4 days ago•12 views

.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

5.9CVSS5.1AI score0.00546EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 4 days ago•8 views

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

7.8CVSS5.2AI score0.00288EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 4 days ago•8 views

.NET: .NET Denial of Service Vulnerability

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

7.5CVSS5.3AI score0.01057EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 4 days ago•10 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet10.0: aspnetcore-runtime-10.0-10.0.11-1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-10.0-10.0.11-1.hum1 aarch64, x8664 aspnetcore-targeting-pack-10.0-10.0.11-1.hum1 aarch64, x8664...

7.8CVSS5.2AI score0.01057EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 4 days ago•9 views

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

5.9CVSS5.3AI score0.00706EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 5 days ago•13 views

expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling

A flaw in libexpat's toUtf16 functions mishandles Unicode low surrogates by treating them as high surrogates. An attacker can exploit the resulting out-of-bounds read to trigger an infinite loop, causing a denial of service DoS...

6.2CVSS5.3AI score0.00176EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 5 days ago•11 views

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: expat: expat-2.8.3-0.1.hum1 aarch64, x8664 expat-devel-2.8.3-0.1.hum1 aarch64, x8664 expat-static-2.8.3-0.1.hum1 aarch64, x8664 expat-2.8.3-0.1.hum1.src src Security Fixes: expat: CVE-2026-72522...

6.2CVSS5.2AI score0.00176EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 5 days ago•5 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.25: golang1.25-1.25.13-0.1.hum1 aarch64, x8664 golang1.25-bin-1.25.13-0.1.hum1 aarch64, x8664 golang1.25-docs-1.25.13-0.1.hum1 noarch golang1.25-misc-1.25.13-0.1.hum1 noarch...

7.5CVSS5.4AI score0.0059EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•5 views

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

7.5CVSS5.6AI score0.00483EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•5 views

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

5.9CVSS5.6AI score0.00441EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•4 views

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

7.5CVSS5.5AI score0.00465EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•5 views

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

7.5CVSS5.6AI score0.00483EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•4 views

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

6.1CVSS5.5AI score0.00263EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•5 views

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

7.5CVSS5.6AI score0.0059EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•4 views

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

6.1CVSS5.6AI score0.00263EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•8 views

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

7.5CVSS5.7AI score0.00483EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•4 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.26: golang1.26-1.26.6-0.1.hum1 aarch64, x8664 golang1.26-bin-1.26.6-0.1.hum1 aarch64, x8664 golang1.26-docs-1.26.6-0.1.hum1 noarch golang1.26-misc-1.26.6-0.1.hum1 noarch...

7.5CVSS5.3AI score0.0059EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•5 views

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

7.5CVSS5.6AI score0.00483EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•5 views

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

7.5CVSS5.7AI score0.0059EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•4 views

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

5.9CVSS5.6AI score0.00441EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•5 views

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

7.5CVSS5.6AI score0.00465EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 5 days ago•7 views

gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback

A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an...

7.5CVSS7.5AI score0.00577EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 5 days ago•6 views

gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit...

7.1CVSS7.6AI score0.00326EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 5 days ago•8 views

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

7.5CVSS7.6AI score0.00577EPSS
SaveExploits0References3
Total number of security vulnerabilities122960