Advisories · Technology
Red Hat Enterprise Linux 10.
Every CVE that names Red Hat Enterprise Linux 10 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Pcp: exposure of the redis server backend allows remote command execution via pmproxy
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.2 Advanced Update Support
- Information disclosure
- CVSS 7.3 High
Cockpit: command injection when deleting a sosreport with a crafted name
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Command injection
- CVSS 5.3 Medium
Gnutls: vulnerable to minerva side-channel information leak
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Weak cryptography or TLS
- CVSS 5.0 Medium
Gnutls: potential crash during chain building/verification
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.2 Extended Update Support
- CWE-248
- CVSS 5.9 Medium
Libgcrypt: vulnerable to marvin attack
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.2 Extended Update Support
- CWE-385
- CVSS 8.0 High
Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.2 Advanced Update Support
- Broken access control
- CVSS 7.5 High
Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.5 High
Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass
- Red Hat Enterprise Linux 3
- Red Hat Enterprise Linux 4
- Weak cryptography or TLS