Advisories · Technology
Cert Manager support for Red Hat OpenShift release 1.20.
Every CVE that names Cert Manager support for Red Hat OpenShift release 1.20 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
Libxml2: double-free/uaf in libxml2 python bindings
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 5.3 Medium
Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Denial of service
- CVSS 7.1 High
Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
- xdgmime
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 7.5 High
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
- GNOME GLib
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 6.5 Medium
Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
- GNOME GLib
- Red Hat Enterprise Linux 10
- CWE-126
- CVSS 6.5 Medium
Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
- GNOME GLib
- Red Hat Enterprise Linux 10
- CWE-126
- CVSS 6.5 Medium
Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
- GNOME GLib
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 6.5 Medium
Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
- GNOME GLib
- Red Hat Enterprise Linux 10
- CWE-126
- CVSS 7.5 High
Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 6.2 Medium
P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Denial of service
- CVSS 6.6 Medium
Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 3.7 Low
Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-208
- CVSS 5.3 Medium
Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-193
- CVSS 3.7 Low
Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-179
- CVSS 5.3 Medium
P11-kit: null dereference via c_derivekey with specific null parameters
- p11-glue p11-kit
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 6.5 Medium
Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
- GNOME glib
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.6 Medium
Glib: glib: buffer underflow in gvariant parser leads to heap corruption
- GNOME glib
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 2.5 Low
Libxml2: stack buffer overflow in xmllint interactive shell command handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 4.4 Medium
Coreutils: heap buffer under-read in gnu coreutils sort via key specification
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption