Redhat

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.

A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.

A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/t

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift

A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers respons

A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug i

A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe h

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, r

A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy confi

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy config

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buff

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attack

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a s

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in

A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute c

A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger a

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This

A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a lo

A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local

A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows

A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filt

A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field

A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt

A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass Op

IBM Robotic Process Automation 23.0.9 is vulnerable to privilege escalation that affects ownership of projects. IBM X-F

A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may g

A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be asso

A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote

LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (applicatio

A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow

A content spoofing flaw was found in OpenShift's OAuth endpoint. This flaw allows a remote, unauthenticated attacker to

A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image fil

An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, th

A flaw was found in the Ansible Automation Platform. When creating a new keypair, the ec2_key module prints out the priv

An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture c

An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant

A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as

A flaw was found in Open Virtual Network where the service monitor MAC does not properly rate limit. This issue could al

A flaw was found in JSS. A memory leak in JSS requires non-standard configuration but is a low-effort DoS vector if conf

A vulnerability was found in the Hot Rod client. This security issue occurs as the Hot Rod client does not enable hostna

A flaw was found in Keycloak. A Keycloak server configured to support mTLS authentication for OAuth/OpenID clients does

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environ

A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo

A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-

A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SW