Advisories · Technology
Red Hat Discovery 1.14.
Every CVE that names Red Hat Discovery 1.14 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Libexpat: expat: improper restriction of xml entity expansion depth in libexpat
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Denial of service
- CVSS 6.8 Medium
Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- CWE-390
- CVSS 5.3 Medium
Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Denial of service
- CVSS 5.3 Medium
Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
- Denial of service
- CVSS 6.5 Medium
Rsync: path traversal vulnerability in rsync
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Path traversal
- CVSS 5.6 Medium
Rsync: race condition in rsync handling symbolic links
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Race condition
- CVSS 6.5 Medium
Rsync: --safe-links option bypass leads to path traversal
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Path traversal