Vulnérabilités connues pour Red Hat Enterprise Linux 8.8 Extended Update Support

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2024-11218	Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile	8.6 Élevée	22 janv. 2025
CVE-2024-12085	A flaw was found in rsync which could be triggered when rsync compares file checksums	7.5 Élevée	14 janv. 2025
CVE-2024-11614	An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature	7.4 Élevée	18 déc. 2024
CVE-2024-52337	Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method	5.5 Moyenne	26 nov. 2024
CVE-2024-9632	Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability	7.8 Élevée	30 oct. 2024
CVE-2024-9050	Networkmanager-libreswan: local privilege escalation via leftupdown	7.8 Élevée	22 oct. 2024
CVE-2024-9675	Buildah: buildah allows arbitrary directory mount	7.8 Élevée	9 oct. 2024
CVE-2024-45770	Pcp: pmpost symlink attack allows escalating pcp to root user	4.4 Moyenne	19 sept. 2024
CVE-2024-45769	Pcp: pmcd heap corruption through metric pmstore operations	5.5 Moyenne	19 sept. 2024
CVE-2024-4467	Qemu-kvm: 'qemu-img info' leads to host file read/write	7.8 Élevée	2 juil. 2024
CVE-2024-5953	389-ds-base: malformed userpassword hash may cause denial of service	5.7 Moyenne	18 juin 2024
CVE-2024-3183	Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force	8.1 Élevée	12 juin 2024
CVE-2024-2698	Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service	8.8 Élevée	12 juin 2024
CVE-2023-4727	Ca: token authentication bypass vulnerability	7.5 Élevée	11 juin 2024
CVE-2024-3049	Booth: specially crafted hash can lead to invalid hmac being accepted by booth server	5.9 Moyenne	6 juin 2024
CVE-2024-5564	Libndp: buffer overflow in route information length field	8.1 Élevée	31 mai 2024
CVE-2024-3657	389-ds-base: potential denial of service via specially crafted kerberos as-req request	7.5 Élevée	28 mai 2024
CVE-2024-2199	389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c	5.7 Moyenne	28 mai 2024
CVE-2023-3758	Sssd: race condition during authorization leads to gpo policies functioning inconsistently	7.1 Élevée	18 avr. 2024
CVE-2024-31083	Xorg-x11-server: use-after-free in procrenderaddglyphs	7.8 Élevée	5 avr. 2024
CVE-2024-31081	Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice	7.3 Élevée	4 avr. 2024
CVE-2024-31080	Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents	7.3 Élevée	4 avr. 2024
CVE-2024-3019	Pcp: exposure of the redis server backend allows remote command execution via pmproxy	8.8 Élevée	28 mars 2024
CVE-2024-28834	Gnutls: vulnerable to minerva side-channel information leak	5.3 Moyenne	21 mars 2024
CVE-2024-1753	Buildah: buildah: container escape via improper bind mount validation	8.6 Élevée	18 mars 2024

Autres produits Red Hat