Advisories · Technology
Red Hat Discovery 2.
Every CVE that names Red Hat Discovery 2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution
- Red Hat Migration Toolkit for Applications 8
- Red Hat Migration Toolkit for Virtualization
- Path traversal
- CVSS 4.4 Medium
Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Race condition
- CVSS 4.4 Medium
Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Path traversal
- CVSS 7.5 High
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
- GNOME GLib
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 6.2 Medium
P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Denial of service
- CVSS 6.6 Medium
Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 3.7 Low
Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-208
- CVSS 5.3 Medium
Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-193
- CVSS 3.7 Low
Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-179
- CVSS 5.0 Medium
Tar: tar: hidden file injection via crafted archives
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Unrestricted file upload
- CVSS 7.5 High
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Denial of service
- CVSS 5.3 Medium
Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Denial of service
- CVSS 4.0 Medium
Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 5.5 Medium
Libxslt: use-after-free with key data stored cross-rvt
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 8.8 High
Libtiff: libtiff write-what-where
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- CWE-123
- CVSS 7.8 High
Linux-pam: incomplete fix for cve-2025-6020
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- Path traversal
- CVSS 6.5 Medium
Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 6.5 Medium
Gnutls: vulnerability in gnutls certtool template parsing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 5.3 Medium
Gnutls: vulnerability in gnutls sct extension parsing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Weak cryptography or TLS
- CVSS 6.5 Medium
Gnutls: vulnerability in gnutls othername san export
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 2.5 Low
Libxml2: stack buffer overflow in xmllint interactive shell command handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 4.7 Medium
Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- CWE-364
- CVSS 4.4 Medium
Coreutils: heap buffer under-read in gnu coreutils sort via key specification
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 5.9 Medium
Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Weak cryptography or TLS
- CVSS 6.1 Medium
Rsync: rsync server leaks arbitrary client files
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- CWE-390
- CVSS 7.5 High
Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.5 High
Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption