Vulnerabilidades em Red Hat

2.456 resultados
Análise Vexday

Com 1.477 CVEs catalogadas e 232 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Red Hat exige monitoramento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com apenas 1 CVE confirmada no CISA KEV — a CVE-2023-4911, que apresenta EPSS de 0,7861, indicando probabilidade elevada de exploração e merecendo atenção prioritária de equipes de resposta. Das 34 vulnerabilidades de severidade crítica, 18 contam com prova de conceito pública disponível, o que reduz a barreira técnica para exploração e aumenta o risco operacional. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites), padrão que frequentemente viabiliza vazamento de dados ou corrupção de memória e deve orientar revisões de hardening e priorização de patches.

CVE-2013-1840MEDIUMOpenstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image requestEPSS 1.7%CVE-2017-7530HIGHIn CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1, it was found that privilege check is missing when invoking arbitEPSS 1.7%CVE-2016-8609LOWIt was found that the keycloak before 2.3.0 did not implement authentication flow correctly. An attacker could use this flaw to construct a EPSS 1.7%CVE-2023-39417HIGHPostgresql: extension script @substitutions@ within quoting allow sql injectionEPSS 1.7%CVE-2017-3139—A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker could use this flaw to make named exit unexpEPSS 1.7%CVE-2012-0059MEDIUMSpacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messagesEPSS 1.7%CVE-2023-4527MEDIUMGlibc: stack read overflow in getaddrinfo in no-aaaa modeEPSS 1.7%CVE-2024-1023MEDIUMIo.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertxEPSS 1.7%CVE-2023-6121MEDIUMKernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_getEPSS 1.6%CVE-2023-5156HIGHGlibc: dos due to memory leak in getaddrinfo.cEPSS 1.6%CVE-2023-6478HIGHXorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderpropertyEPSS 1.6%CVE-2020-1757HIGHA flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to unEPSS 1.6%CVE-2024-0553HIGHGnutls: incomplete fix for cve-2023-5981EPSS 1.6%CVE-2019-3895MEDIUMAn access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An aEPSS 1.6%CVE-2023-4806MEDIUMGlibc: potential use-after-free in getaddrinfo()EPSS 1.6%CVE-2023-3354HIGHImproper i/o watch removal in tls handshake can lead to remote unauthenticated denial of serviceEPSS 1.6%CVE-2025-3891HIGHMod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabledEPSS 1.6%CVE-2026-12405HIGHRubygem-foreman_remote_execution: command injection in job invocations via effective_user parameterEPSS 1.6%CVE-2023-6377HIGHXorg-x11-server: out-of-bounds memory reads/writes in xkb button actionsEPSS 1.6%CVE-2016-7075HIGHIt was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fiEPSS 1.6%