Redhat : Security Vulnerabilities (CVSS score >= 9)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2022-0435	787	Overflow	2022-03-25	2023-01-19	9.0	None	Remote	Low	???	Complete	Complete	Complete
A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.
2	CVE-2021-44142	125	Exec Code	2022-02-21	2022-02-23	9.0	None	Remote	Low	???	Complete	Complete	Complete
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.
3	CVE-2021-20325	119	Overflow	2022-02-18	2022-03-08	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5.0, causes a security regression compared to the versions shipped in Red Hat Enterprise Linux 8.4. A user who installs or updates to Red Hat Enterprise Linux 8.5.0 would be vulnerable to the mentioned CVEs, even if they were properly fixed in Red Hat Enterprise Linux 8.4. CVE-2021-20325 was assigned to that Red Hat specific security regression and it does not affect the upstream versions of httpd.
4	CVE-2021-3621	78		2021-12-23	2022-10-24	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
5	CVE-2021-3584	78	Exec Code	2021-12-23	2022-01-05	9.0	None	Remote	Low	???	Complete	Complete	Complete
A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Sendmail configuration options to overwrite the defaults and perform command injection. The highest threat from this vulnerability is to confidentiality, integrity and availability of system. Fixed releases are 2.4.1, 2.5.1, 3.0.0.
6	CVE-2021-3466	120	Overflow	2021-03-25	2021-12-15	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Only version 0.9.70 is vulnerable.
7	CVE-2020-27846	115	Bypass	2020-12-21	2021-03-31	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
8	CVE-2020-25719	362		2022-02-18	2022-10-21	9.0	None	Remote	Low	???	Complete	Complete	Complete
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.
9	CVE-2020-10696	22	Dir. Trav.	2020-03-31	2020-04-01	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write files to the user's system anywhere that the user has permissions.
10	CVE-2020-3757	843	Exec Code	2020-02-13	2021-09-16	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
11	CVE-2020-0603	119	Exec Code Overflow	2020-01-14	2021-07-21	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'.
12	CVE-2019-14896	787	DoS Exec Code Overflow	2019-11-27	2023-01-19	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.
13	CVE-2019-14894	78	Exec Code	2020-06-22	2021-10-29	9.0	None	Remote	Low	???	Complete	Complete	Complete
A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution through NFS schedule backup. An attacker logged into the management console could use this flaw to execute arbitrary shell commands on the CloudForms server as root.
14	CVE-2019-14287	755	Bypass	2019-10-17	2022-04-18	9.0	None	Remote	Low	???	Complete	Complete	Complete
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.
15	CVE-2019-10200	284		2021-03-19	2021-03-26	9.0	None	Remote	Low	???	Complete	Complete	Complete
A flaw was discovered in OpenShift Container Platform 4 where, by default, users with access to create pods also have the ability to schedule workloads on master nodes. Pods with permission to access the host network, running on master nodes, can retrieve security credentials for the master AWS IAM role, allowing management access to AWS resources. With access to the security credentials, the user then has access to the entire infrastructure. Impact to data and system availability is high.
16	CVE-2019-10196	665	DoS	2021-03-19	2021-03-25	9.0	None	Remote	Low	Not required	Partial	Partial	Complete
A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resources and data exposure through an uninitialized memory leak in setups where an attacker could submit typed input to the auth parameter.
17	CVE-2019-10164	787	Exec Code Overflow	2019-06-26	2020-10-02	9.0	None	Remote	Low	???	Complete	Complete	Complete
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.
18	CVE-2019-8846	416	Exec Code	2020-10-27	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.
19	CVE-2019-8844	787	Exec Code Mem. Corr.	2020-10-27	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watchOS 6.1.1, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.
20	CVE-2019-8835	787	Exec Code Mem. Corr.	2020-10-27	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.
21	CVE-2019-8816	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
22	CVE-2019-8815	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
23	CVE-2019-8814	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
24	CVE-2019-8689	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
25	CVE-2019-8688	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
26	CVE-2019-8684	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
27	CVE-2019-8676	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
28	CVE-2019-8672	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
29	CVE-2019-8669	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
30	CVE-2019-8544	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
31	CVE-2019-8536	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
32	CVE-2019-8535	787	Exec Code Mem. Corr.	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
33	CVE-2019-8506	843	Exec Code	2019-12-18	2021-05-18	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
34	CVE-2019-7837	416	Exec Code	2019-05-22	2019-05-23	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
35	CVE-2019-7609	94	Exec Code	2019-03-25	2020-10-19	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
36	CVE-2019-5736	78	Exec Code	2019-02-11	2021-12-16	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.
37	CVE-2019-3855	787	Exec Code Overflow	2019-03-21	2020-10-15	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
38	CVE-2019-3831		Exec Code	2019-03-25	2020-10-19	9.0	None	Remote	Low	???	Complete	Complete	Complete
A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.
39	CVE-2019-0204		Exec Code	2019-03-25	2022-01-01	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and/or the command executor in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.2, 1.6.0 to 1.6.1, and 1.7.0 to 1.7.1. A malicious actor can therefore gain root-level code execution on the host.
40	CVE-2018-1000861	502	Exec Code	2018-12-10	2022-06-13	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.
41	CVE-2018-16863	78	Exec Code Bypass	2018-12-03	2019-10-09	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7.
42	CVE-2018-16509		Exec Code	2018-09-05	2019-10-03	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction.
43	CVE-2018-15982	416	Exec Code	2019-01-18	2019-01-29	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
44	CVE-2018-15981	704	Exec Code	2018-11-29	2018-12-28	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
45	CVE-2018-14649		Exec Code	2018-10-09	2019-10-09	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode. This is done by setting debug=True in file /usr/bin/rbd-target-api provided by ceph-isci-cli package. This allows unauthenticated attackers to access this debug shell and escalate privileges. Once an attacker has successfully connected to this debug shell they will be able to execute arbitrary commands remotely. These commands will run with the same privileges as of user executing the application which is using python-werkzeug with debug shell mode enabled. In - Red Hat Ceph Storage 2 and 3, ceph-isci-cli package runs python-werkzeug library with root level permissions.
46	CVE-2018-14618	190	Overflow	2018-09-05	2019-04-22	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31 bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is almost identical to CVE-2017-8816.)
47	CVE-2018-10897	22	Dir. Trav.	2018-08-01	2021-09-09	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files. Version 1.1.31 and older are believed to be affected.
48	CVE-2018-10843	732		2018-07-02	2019-10-09	9.0	None	Remote	Low	???	Complete	Complete	Complete
source-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53, atomic-openshift 3.9.31 is vulnerable to a privilege escalation which allows the assemble script to run as the root user in a non-privileged container. An attacker can use this flaw to open network connections, and possibly other actions, on the host which are normally only available to a root user.
49	CVE-2018-6140	20	Exec Code	2019-01-09	2019-01-16	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.
50	CVE-2018-5002	787	Exec Code Overflow	2018-07-09	2020-08-24	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Total number of vulnerabilities : 356 Page : 1 (This Page)2 3 4 5 6 7 8