Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
221 vulnérabilités publiées citent ce produit. Les 200 plus récentes sont listées.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-114406 | | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-102559 | corrigé en 0:2.62.3-2.el8_4.14 | Libsoup: libsoup: heap buffer overflow during websocket client-frame masking | HIGH 8.6 | 0.4 % | ||
| CVE-2026-102558 | corrigé en 0:2.62.3-2.el8_4.14 | Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth | HIGH 8.6 | 0.4 % | ||
| CVE-2026-102557 | corrigé en 0:2.62.3-2.el8_4.14 | Libsoup: libsoup: heap buffer overflow during websocket message reassembly | HIGH 8.6 | 0.3 % | ||
| CVE-2026-102556 | corrigé en 0:2.62.3-2.el8_4.14 | Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion | HIGH 8.6 | 0.3 % | ||
| CVE-2026-96889 | | Librsvg: use-after-free when xml includes have duplicated entities | HIGH 7.8 | 0.6 % | ||
| CVE-2026-96512 | corrigé en 0:1.8.29-7.el8_4.4 | Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization | HIGH 7.8 | 0.3 % | ||
| CVE-2026-86320 | corrigé en 0:1.0.9-4.el8_4 | Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`) | HIGH 7.8 | 0.3 % | ||
| CVE-2026-87766 | corrigé en 0:0.4.0-3.el8_4 | Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup | HIGH 8.8 | 0.2 % | ||
| CVE-2026-18922 | | 389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl aux… | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-18453 | | 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use_one_backend control in op_shared_search | HIGH 7.5 | 0.8 % | ||
| CVE-2026-18355 | | 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet() | HIGH 7.5 | 0.8 % | ||
| CVE-2026-76560 | | 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn | HIGH 7.5 | 0.6 % | ||
| CVE-2026-81665 | corrigé en 0:3.1.0-3.el8_4.3 | Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly | HIGH 7.5 | 0.4 % | ||
| CVE-2026-84268 | | Gvfs: sftp: heap-based buffer overflow in read_reply() | HIGH 8.8 | 0.6 % | ||
| CVE-2026-18917 | corrigé en 8040020260916092751.522a0ee4 | Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow | HIGH 7.8 | 0.2 % | ||
| CVE-2026-73433 | | Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write | MEDIUM 6.6 | 0.1 % | ||
| CVE-2026-73434 | | Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing | MEDIUM 6.1 | 0.1 % | ||
| CVE-2026-72694 | corrigé en 0:2.17.7-1.el8_4.1 | Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation | HIGH 7.1 | 0.1 % | ||
| CVE-2026-63622 | corrigé en 8040020260916092751.522a0ee4 | Libvirt: swtpm privilege escalation via symlink following | HIGH 7.8 | 0.1 % | ||
| CVE-2026-19387 | corrigé en 0:1.16.1-4.el8_4.5 | Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec ima/dvi adpcm decoder | HIGH 7.6 | 0.4 % | ||
| CVE-2026-15816 | | Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() | HIGH 7.5 | 0.4 % | ||
| CVE-2026-18649 | corrigé en 0:1.16.1-4.el8_4.2 | Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders | HIGH 7.5 | 1.0 % | ||
| CVE-2026-11770 | | 389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check | HIGH 7.5 | 0.5 % | ||
| CVE-2026-15722 | | 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing | HIGH 7.5 | 0.8 % | ||
| CVE-2026-16529 | corrigé en 0:5.2.5-8.el8_4.1 | Pcp: pcp: denial of service due to signed integer overflow | HIGH 7.5 | 0.5 % | ||
| CVE-2026-16527 | corrigé en 0:5.2.5-8.el8_4.1 | Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules | HIGH 7.3 | 0.6 % | ||
| CVE-2026-16526 | corrigé en 0:5.2.5-8.el8_4.1 | Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability | HIGH 8.8 | 0.6 % | ||
| CVE-2026-16524 | corrigé en 0:5.2.5-8.el8_4.1 | Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection | HIGH 7.8 | 0.7 % | ||
| CVE-2026-16313 | corrigé en 0:1.44-5.el8_4.1 | Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export | HIGH 7.6 | 0.3 % | ||
| CVE-2026-16445 | corrigé en 0:049-138.git20220131.el8_4.1 | Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module | HIGH 7.5 | 3.2 % | ||
| CVE-2026-15588 | corrigé en 0:2.56.4-10.el8_4.7 | Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering | MEDIUM 5.3 | 0.5 % | ||
| CVE-2026-15711 | corrigé en 0:2.62.3-2.el8_4.10 | Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation | HIGH 7.5 | 0.7 % | ||
| CVE-2026-15709 | corrigé en 0:2.62.3-2.el8_4.10 | Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service | HIGH 7.5 | 0.9 % | ||
| CVE-2026-59692 | corrigé en 0:1.16.1-4.el8_4.4 | Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callback | HIGH 7.5 | 0.6 % | ||
| CVE-2026-59691 | | Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer | HIGH 7.1 | 0.3 % | ||
| CVE-2026-11610 | | 389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind | HIGH 8.8 | 0.5 % | ||
| CVE-2026-14476 | | Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass | HIGH 8.0 | 0.7 % | ||
| CVE-2026-14474 | | Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation | HIGH 8.8 | 0.6 % | ||
| CVE-2026-58016 | | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" | CRITICAL 9.1 | 0.6 % | ||
| CVE-2026-58015 | | Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive | HIGH 7.5 | 0.8 % | ||
| CVE-2026-58014 | | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" | HIGH 8.6 | 0.6 % | ||
| CVE-2026-58013 | | Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" | HIGH 8.2 | 0.5 % | ||
| CVE-2026-58012 | | Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() | HIGH 8.2 | 0.5 % | ||
| CVE-2026-58011 | | Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime | HIGH 7.5 | 0.5 % | ||
| CVE-2026-58010 | | Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() | HIGH 8.2 | 0.5 % | ||
| CVE-2026-12912 | | Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image | HIGH 7.3 | 0.4 % | ||
| CVE-2026-13601 | corrigé en 2:3.28.1-3.el8_4.2 | Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications | HIGH 7.1 | 0.2 % | ||
| CVE-2026-56208 | corrigé en 0:140.13.0-1.el8_4 | Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode | HIGH 7.6 | 0.6 % | ||
| CVE-2026-10649 | corrigé en 0:2.0.5-9.el8_4.12 | Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression | HIGH 8.6 | 0.6 % | ||
| CVE-2026-42014 | | Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin | MEDIUM 6.6 | 0.1 % | ||
| CVE-2026-52722 | | Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling | HIGH 7.1 | 0.4 % | ||
| CVE-2026-52720 | | Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb | HIGH 8.8 | 0.6 % | ||
| CVE-2026-53705 | corrigé en 0:1.16.1-4.el8_4.1 | Gstreamer1-plugins-good: gstreamer: heap buffer overflow in wavpack decoder via integer overflow | HIGH 7.6 | 0.4 % | ||
| CVE-2026-54231 | corrigé en 0:2.10.9-25.el8_4.2 | Abrt: unsanitized systemd journal content written to dump directory files enables content injection | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-54230 | corrigé en 0:2.10.9-25.el8_4.2 | Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites | HIGH 7.8 | 0.2 % | ||
| CVE-2026-54229 | corrigé en 0:2.10.9-25.el8_4.1 | Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking | HIGH 7.0 | 0.1 % | ||
| CVE-2026-54228 | corrigé en 0:2.10.9-25.el8_4.1 | Abrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directories | HIGH 7.8 | 0.1 % | ||
| CVE-2026-11774 | | 389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow | HIGH 7.6 | 0.7 % | ||
| CVE-2026-6893 | | Dracut: dracut: root code execution via dhcp options command injection | HIGH 7.5 | 1.3 % | ||
| CVE-2026-11788 | | 389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser | HIGH 7.5 | 0.6 % | ||
| CVE-2026-50263 | | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-50262 | | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-50264 | | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat | HIGH 7.8 | 0.1 % | ||
| CVE-2026-50261 | | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50260 | | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50259 | | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50258 | | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels | HIGH 7.8 | 0.2 % | ||
| CVE-2026-50257 | | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() | HIGH 7.8 | 0.1 % | ||
| CVE-2026-50256 | | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length m… | HIGH 7.8 | 0.2 % | ||
| CVE-2026-10805 | corrigé en 1:1.30.0-19.el8_4.1 | Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend | MEDIUM 6.7 | 0.2 % | ||
| CVE-2026-10118 | | Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication | HIGH 7.8 | 0.3 % | ||
| CVE-2026-4408 | | Samba: remote code execution in samr | CRITICAL 9.8 | 2.5 % | ||
| CVE-2026-42015 | | Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling | MEDIUM 5.3 | 0.7 % | ||
| CVE-2026-42013 | | Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name | HIGH 8.2 | 0.4 % | ||
| CVE-2026-42012 | | Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans | HIGH 7.1 | 0.4 % | ||
| CVE-2026-5260 | | Gnutls: gnutls: information disclosure via heap overread in rsa key exchange | HIGH 8.2 | 0.8 % | ||
| CVE-2026-48864 | corrigé en 0:0.7.16-3.el8_4.1 | Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data | HIGH 7.8 | 0.2 % | ||
| CVE-2026-4480 | | Samba: samba: remote code execution in printing subsystem via unescaped job description | CRITICAL 9.8 | 14 % | ||
| CVE-2026-9064 | | 389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos) | HIGH 7.5 | 0.8 % | ||
| CVE-2026-42009 | | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability | HIGH 7.5 | 1.3 % | ||
| CVE-2026-42011 | | Gnutls: gnutls: security bypass due to incorrect name constraint handling | HIGH 7.4 | 0.5 % | ||
| CVE-2026-42010 | | Gnutls: gnutls: authentication bypass via nul character in username | CRITICAL 9.8 | 1.1 % | ||
| CVE-2026-34002 | corrigé en 0:1.20.10-4.el8_4 | Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-34000 | corrigé en 0:1.20.10-4.el8_4 | Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing. | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-33846 | | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly | HIGH 7.5 | 1.3 % | ||
| CVE-2026-33845 | | Gnutls: gnutls: denial of service via dtls zero-length fragment | CRITICAL 9.1 | 2.1 % | ||
| CVE-2026-3833 | | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison | HIGH 7.4 | 0.6 % | ||
| CVE-2026-34003 | | Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access | HIGH 7.8 | 0.3 % | ||
| CVE-2026-34001 | | Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption | HIGH 7.8 | 0.3 % | ||
| CVE-2026-33999 | | Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling | HIGH 7.8 | 0.4 % | ||
| CVE-2026-35092 | | Corosync: corosync: denial of service via integer overflow in join message validation | HIGH 7.5 | 1.0 % | ||
| CVE-2026-35091 | | Corosync: corosync: denial of service and information disclosure via crafted udp packet | HIGH 8.2 | 0.9 % | ||
| CVE-2026-5201 | | Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image | HIGH 7.5 | 1.1 % | ||
| CVE-2026-5121 | corrigé en 0:3.3.3-1.el8_4.2 | Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing | CRITICAL 9.8 | 1.1 % | ||
| CVE-2026-5119 | | Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment | HIGH 8.2 | 0.3 % | ||
| CVE-2026-4887 | corrigé en 8040020260520140422.70584597 | Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image | HIGH 7.1 | 0.6 % | ||
| CVE-2026-4775 | | Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing | HIGH 7.8 | 0.6 % | ||
| CVE-2026-4424 | | Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing | HIGH 7.5 | 1.3 % | ||
| CVE-2025-14905 | | 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow | HIGH 7.2 | 1.3 % | ||
| CVE-2025-14831 | | Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification | MEDIUM 5.3 | 0.7 % | ||
| CVE-2026-1761 | | Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response | HIGH 8.6 | 1.1 % | ||
| CVE-2025-14242 | corrigé en 0:3.0.3-33.el8_4.1 | Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing | MEDIUM 6.5 | 0.8 % | ||
| CVE-2026-0719 | | Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication | HIGH 8.6 | 0.6 % | ||
| CVE-2025-14523 | | Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) | HIGH 8.2 | 0.5 % | ||
| CVE-2025-14512 | | Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow | MEDIUM 6.5 | 0.6 % | ||
| CVE-2025-14087 | | Glib: glib: buffer underflow in gvariant parser leads to heap corruption | CRITICAL 9.8 | 0.8 % | ||
| CVE-2025-66287 | corrigé en 0:2.50.3-2.el8_4 | Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crash | HIGH 8.8 | 0.5 % | ||
| CVE-2025-13947 | corrigé en 0:2.50.3-2.el8_4 | Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drop | HIGH 7.4 | 0.3 % | ||
| CVE-2025-13601 | | Glib: integer overflow in in g_escape_uri_string() | HIGH 7.7 | 0.3 % | ||
| CVE-2025-13502 | corrigé en 0:2.50.3-2.el8_4 | Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to dos | HIGH 7.5 | 0.6 % | ||
| CVE-2025-61662 | | Grub2: missing unregister call for gettext command may lead to use-after-free | HIGH 7.8 | 0.2 % | ||
| CVE-2025-59089 | | Python-kdcproxy: remote dos via unbounded tcp upstream buffering | MEDIUM 5.9 | 0.6 % | ||
| CVE-2025-59088 | | Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv | HIGH 8.6 | 0.5 % | ||
| CVE-2025-62229 | | Xorg: xmayland: use-after-free in xpresentnotify structure creation | HIGH 7.3 | 0.5 % | ||
| CVE-2025-62230 | | Xorg: xwayland: use-after-free in xkb client resource removal | HIGH 7.3 | 0.3 % | ||
| CVE-2025-62231 | | Xorg: xmayland: value overflow in xkbsetcompatmap() | HIGH 7.3 | 0.3 % | ||
| CVE-2025-11561 | | Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems | HIGH 8.8 | 0.8 % | ||
| CVE-2025-11234 | corrigé en 8040020260916092751.522a0ee4 | Qemu-kvm: vnc websocket handshake use-after-free | HIGH 7.5 | 0.9 % | ||
| CVE-2025-7493 | | Freeipa: idm: privilege escalation from host to domain admin in freeipa | CRITICAL 9.1 | 0.6 % | ||
| CVE-2025-11021 | | Libsoup: out-of-bounds read in cookie date handling of libsoup http library | HIGH 7.5 | 0.6 % | ||
| CVE-2025-10911 | | Libxslt: use-after-free with key data stored cross-rvt | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-9900 | | Libtiff: libtiff write-what-where | HIGH 8.8 | 1.0 % | ||
| CVE-2025-8067 | | Udisks: out-of-bounds read in udisks daemon | HIGH 8.5 | 0.7 % | ||
| CVE-2025-8941 | corrigé en 0:1.3.1-14.el8_4.2 | Linux-pam: incomplete fix for cve-2025-6020 | HIGH 7.8 | 0.3 % | ||
| CVE-2025-7425 | | Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr | HIGH 7.8 | 0.4 % | ||
| CVE-2025-7345 | | Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf | HIGH 7.5 | 1.3 % | ||
| CVE-2025-5372 | corrigé en 0:0.9.4-2.el8_4.2 | Libssh: incorrect return code handling in ssh_kdf() in libssh | HIGH 8.8 | 0.5 % | ||
| CVE-2025-5318 | | Libssh: out-of-bounds read in sftp_handle() | HIGH 8.1 | 1.9 % | ||
| CVE-2025-6019 | | Libblockdev: lpe from allow_active to root in libblockdev via udisks | HIGH 7.0 | 0.5 % | ||
| CVE-2025-49180 | | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension | HIGH 7.8 | 0.3 % | ||
| CVE-2025-49179 | | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension | HIGH 7.3 | 0.3 % | ||
| CVE-2025-49178 | | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-49176 | | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension | HIGH 7.3 | 0.4 % | ||
| CVE-2025-49175 | | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors | MEDIUM 6.1 | 0.3 % | ||
| CVE-2025-4404 | | Freeipa: idm: privilege escalation from host to domain admin in freeipa | CRITICAL 9.1 | 2.0 % | ||
| CVE-2025-6020 | | Linux-pam: linux-pam directory traversal | HIGH 7.8 | 0.5 % | ||
| CVE-2025-49794 | | Libxml: heap use after free (uaf) leads to denial of service (dos) | CRITICAL 9.1 | 0.8 % | ||
| CVE-2025-49796 | | Libxml: type confusion leads to denial of service (dos) | CRITICAL 9.1 | 1.6 % | ||
| CVE-2025-6021 | | Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 | HIGH 7.5 | 1.4 % | ||
| CVE-2025-5914 | | Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c | HIGH 7.8 | 0.5 % | ||
| CVE-2025-48798 | corrigé en 8040020250618100956.70584597 | Gimp: multiple use after free in xcf parser | HIGH 7.3 | 0.2 % | ||
| CVE-2025-48797 | corrigé en 8040020250618100956.70584597 | Gimp: multiple heap buffer overflows in tga parser | HIGH 7.3 | 0.3 % | ||
| CVE-2025-5024 | corrigé en 0:0.1.8-4.el8_4 | Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus | HIGH 7.4 | 0.8 % | ||
| CVE-2025-4945 | | Libsoup: integer overflow in cookie expiration date handling in libsoup | LOW 3.7 | 0.7 % | ||
| CVE-2025-4948 | | Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup | HIGH 7.5 | 0.8 % | ||
| CVE-2025-4373 | corrigé en 0:2.56.4-10.el8_4.2 | Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar | MEDIUM 4.8 | 0.6 % | ||
| CVE-2025-3891 | corrigé en 8040020250618101351.522a0ee4 | Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled | HIGH 7.5 | 1.6 % | ||
| CVE-2025-46421 | | Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server | MEDIUM 6.8 | 0.6 % | ||
| CVE-2025-46420 | corrigé en 0:2.62.3-2.el8_4.4 | Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c | MEDIUM 6.5 | 0.6 % | ||
| CVE-2025-32911 | | Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value | CRITICAL 9.0 | 1.0 % | ||
| CVE-2025-3576 | corrigé en 0:1.18.2-9.el8_4.3 | Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions | MEDIUM 5.9 | 0.4 % | ||
| CVE-2025-32914 | | Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process | HIGH 7.4 | 0.8 % | ||
| CVE-2025-32906 | | Libsoup: out of bounds reads in soup_headers_parse_request() | HIGH 7.5 | 1.0 % | ||
| CVE-2025-32913 | | Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no valu… | HIGH 7.5 | 0.8 % | ||
| CVE-2025-32049 | | Libsoup: denial of service attack to websocket server | HIGH 7.5 | 0.9 % | ||
| CVE-2025-3155 | corrigé en 2:3.28.1-3.el8_4.1 | Yelp: arbitrary file read | HIGH 7.4 | 13 % | ||
| CVE-2025-2784 | | Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content | HIGH 7.0 | 0.9 % | ||
| CVE-2024-8176 | | Libexpat: expat: improper restriction of xml entity expansion depth in libexpat | HIGH 7.5 | 1.4 % | ||
| CVE-2025-26601 | | Xorg: xwayland: use-after-free in syncinittrigger() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26600 | | Xorg: xwayland: use-after-free in playreleasedevents() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26599 | | Xorg: xwayland: use of uninitialized pointer in compredirectwindow() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26598 | | Xorg: xwayland: out-of-bounds write in createpointerbarrierclient() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26597 | | Xorg: xwayland: buffer overflow in xkbchangetypesofkey() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26596 | | Xorg: xwayland: heap overflow in xkbwritekeysyms() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26595 | | Xorg: xwayland: buffer overflow in xkbvmodmasktext() | HIGH 7.8 | 0.4 % | ||
| CVE-2025-26594 | | X.org: xwayland: use-after-free of the root cursor | HIGH 7.8 | 0.4 % | ||
| CVE-2025-0624 | corrigé en 1:2.02-99.el8_4.12 | Grub2: net: out-of-bounds write in grub_net_search_config_file() | HIGH 7.6 | 1.4 % | ||
| CVE-2025-1244 | | Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme | HIGH 8.8 | 2.6 % | ||
| CVE-2024-12133 | corrigé en 0:3.6.14-10.el8_4.1 | Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos | MEDIUM 5.3 | 1.1 % | ||
| CVE-2024-12087 | | Rsync: path traversal vulnerability in rsync | HIGH 7.5 | 2.3 % | ||
| CVE-2024-12085 | | Rsync: info leak via uninitialized stack contents | HIGH 7.5 | 8.6 % | ||
| CVE-2024-52337 | | Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method | MEDIUM 5.5 | 0.3 % | ||
| CVE-2024-9632 | | Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability | HIGH 7.8 | 0.9 % | ||
| CVE-2024-9050 | | Networkmanager-libreswan: local privilege escalation via leftupdown | HIGH 7.8 | 0.5 % | ||
| CVE-2024-9355 | | Golang-fips: golang fips zeroed buffer | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-45770 | corrigé en 0:5.2.5-8.el8_4 | Pcp: pmpost symlink attack allows escalating pcp to root user | MEDIUM 4.4 | 0.3 % | ||
| CVE-2024-45769 | corrigé en 0:5.2.5-8.el8_4 | Pcp: pmcd heap corruption through metric pmstore operations | MEDIUM 5.5 | 0.3 % | ||
| CVE-2024-4467 | | Qemu-kvm: 'qemu-img info' leads to host file read/write | HIGH 7.8 | 0.3 % | ||
| CVE-2024-3183 | corrigé en 8040020240528055121.5b01ab7e | Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force | HIGH 8.1 | 2.1 % | ||
| CVE-2023-4727 | corrigé en 8040020240329193548.17df0a3f | Ca: token authentication bypass vulnerability | HIGH 7.5 | 0.7 % | ||
| CVE-2024-3049 | corrigé en 0:1.0-199.1.ac1d34c.git.el8_4.2 | Booth: specially crafted hash can lead to invalid hmac being accepted by booth server | MEDIUM 5.9 | 0.5 % | ||
| CVE-2024-5564 | | Libndp: buffer overflow in route information length field | HIGH 8.1 | 1.2 % | ||
| CVE-2024-31083 | | Xorg-x11-server: use-after-free in procrenderaddglyphs | HIGH 7.8 | 1.9 % | ||
| CVE-2024-31081 | | Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice | HIGH 7.3 | 0.5 % | ||
| CVE-2024-31080 | | Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents | HIGH 7.3 | 0.5 % | ||
| CVE-2024-3019 | corrigé en 0:5.2.5-7.el8_4 | Pcp: exposure of the redis server backend allows remote command execution via pmproxy | HIGH 8.8 | 1.1 % | ||
| CVE-2024-21886 | | Xorg-x11-server: heap buffer overflow in disabledevice | HIGH 7.8 | 1.4 % | ||
| CVE-2024-21885 | | Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent | HIGH 7.8 | 1.4 % | ||
| CVE-2024-1488 | | Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation | HIGH 8.0 | 0.3 % | ||
| CVE-2024-0229 | | Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access | HIGH 7.8 | 1.2 % | ||
| CVE-2023-40551 | | Shim: out of bounds read when parsing mz binaries | MEDIUM 5.1 | 0.4 % | ||
| CVE-2023-40549 | | Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file | MEDIUM 6.2 | 0.4 % | ||
| CVE-2023-40546 | | Shim: out-of-bounds read printing error messages | MEDIUM 6.2 | 0.4 % | ||
| CVE-2023-40550 | | Shim: out-of-bound read in verify_buffer_sbat() | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-40548 | | Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems | HIGH 7.4 | 0.4 % | ||
| CVE-2023-40547 | | Shim: rce in http boot support may lead to secure boot bypass | HIGH 8.3 | 5.4 % | ||
| CVE-2023-6816 | | Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer | CRITICAL 9.8 | 2.1 % | ||
| CVE-2024-0646 | | Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination | HIGH 7.8 | 0.3 % | ||
| CVE-2023-5455 | | Ipa: invalid csrf protection | MEDIUM 6.5 | 0.6 % |