Vulnérabilités connues pour Red Hat Hardened Images

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-88840	BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message	5.3 Moyenne	23 sept. 2026
CVE-2026-88839	BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of…	6.7 Moyenne	23 sept. 2026
CVE-2026-88837	BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the…	6.5 Moyenne	23 sept. 2026
CVE-2026-88835	BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds…	6.1 Moyenne	23 sept. 2026
CVE-2026-88831	BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the…	5.3 Moyenne	23 sept. 2026
CVE-2026-88832	BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow…	7.3 Élevée	23 sept. 2026
CVE-2026-88830	A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer…	7.5 Élevée	23 sept. 2026
CVE-2026-96512	A flaw was found in sudo	7.8 Élevée	23 sept. 2026
CVE-2026-95619	Gcc: libstdc++ integer overflow in `new` operator	7.7 Élevée	22 sept. 2026
CVE-2026-95511	A privilege escalation vulnerability was found in CUPS when used with the cups-filters serial backend	8.2 Élevée	22 sept. 2026
CVE-2026-93653	Poppler: poppler: unbounded cpu loop in splashoutputdev::tilingpatternfill via unvalidated tiling-pattern repeat count (denial of service)	5.5 Moyenne	18 sept. 2026
CVE-2026-76781	Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute	5.5 Moyenne	17 sept. 2026
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 Élevée	17 sept. 2026
CVE-2026-42784	Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion	7.4 Élevée	16 sept. 2026
CVE-2025-11395	Podman: arbitrary file write when importing oci archive	5.5 Moyenne	15 sept. 2026
CVE-2026-85234	Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine	7.5 Élevée	15 sept. 2026
CVE-2026-79699	Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory	4.4 Moyenne	15 sept. 2026
CVE-2026-79705	Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers	4.5 Moyenne	15 sept. 2026
CVE-2026-85013	Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters	7.3 Élevée	15 sept. 2026
CVE-2026-18495	Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough	6.1 Moyenne	11 sept. 2026
CVE-2026-88265	Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown	5.6 Moyenne	10 sept. 2026
CVE-2026-88264	Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs	5.6 Moyenne	10 sept. 2026
CVE-2026-84042	Crun: crun: rootful krun with passt executes container payload as host root	7.8 Élevée	10 sept. 2026
CVE-2026-87876	Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)	3.0 Faible	9 sept. 2026
CVE-2026-87875	Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound	4.3 Moyenne	9 sept. 2026

Autres produits Red Hat