Known vulnerabilities in Red Hat In-Vehicle Operating System 1

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-12084	Rsync: heap buffer overflow in rsync due to improper checksum length handling	9.8 Critical	Jan 15, 2025
CVE-2024-12087	A path traversal vulnerability exists in rsync	6.5 Medium	Jan 14, 2025
CVE-2024-12747	Rsync: race condition in rsync handling symbolic links	5.6 Medium	Jan 14, 2025
CVE-2024-12088	Rsync: --safe-links option bypass leads to path traversal	6.5 Medium	Jan 14, 2025
CVE-2024-12086	Rsync: rsync server leaks arbitrary client files	6.1 Medium	Jan 14, 2025
CVE-2024-12085	A flaw was found in rsync which could be triggered when rsync compares file checksums	7.5 High	Jan 14, 2025
CVE-2025-0306	Ruby: openssl: ruby marvin attack	7.4 High	Jan 9, 2025
CVE-2024-52616	Avahi: avahi wide-area dns predictable transaction ids	5.3 Medium	Nov 21, 2024
CVE-2024-52615	Avahi: avahi wide-area dns uses constant source port	5.3 Medium	Nov 21, 2024
CVE-2024-11079	Ansible-core: unsafe tagging bypass via hostvars object in ansible-core	5.5 Medium	Nov 11, 2024
CVE-2024-10041	Pam: libpam: libpam vulnerable to read hashed password	4.7 Medium	Oct 23, 2024
CVE-2024-9675	Buildah: buildah allows arbitrary directory mount	7.8 High	Oct 9, 2024
CVE-2024-8443	Libopensc: heap buffer overflow in openpgp driver when generating key	2.9 Low	Sep 10, 2024
CVE-2024-8418	Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service	7.5 High	Sep 4, 2024
CVE-2024-45620	Libopensc: incorrect handling of the length of buffers or files in pkcs15init	3.9 Low	Sep 3, 2024
CVE-2024-45619	Libopensc: incorrect handling length of buffers or files in libopensc	4.3 Medium	Sep 3, 2024
CVE-2024-45618	Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init	3.9 Low	Sep 3, 2024
CVE-2024-45617	Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc	3.9 Low	Sep 3, 2024
CVE-2024-45616	Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc	3.9 Low	Sep 3, 2024
CVE-2024-45615	Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init	3.9 Low	Sep 3, 2024
CVE-2024-21626	runc is a CLI tool for spawning and running containers on Linux according to the OCI specification	8.6 High	Jan 31, 2024

Other Red Hat products