agentprime: red-hat-enterprise-linux-8-2-advanced-update-support

agentprime: red-hat-enterprise-linux-8-2-advanced-update-supportEvery new CVE for red-hat-enterprise-linux-8-2-advanced-update-support.https://agentprime.io/CVE-2026-5201: Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg imagehttps://agentprime.io/advisories/CVE-2026-5201/https://agentprime.io/advisories/CVE-2026-5201/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Mar 2026 08:32:58 GMTCVECVE-2026-5121: Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processinghttps://agentprime.io/advisories/CVE-2026-5121/https://agentprime.io/advisories/CVE-2026-5121/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Mar 2026 07:47:28 GMTCVECVE-2026-4424: Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processinghttps://agentprime.io/advisories/CVE-2026-4424/https://agentprime.io/advisories/CVE-2026-4424/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Mar 2026 13:50:27 GMTCVECVE-2025-14905: 389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflowhttps://agentprime.io/advisories/CVE-2025-14905/https://agentprime.io/advisories/CVE-2025-14905/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Feb 2026 15:41:47 GMTCVECVE-2026-1761: Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http responsehttps://agentprime.io/advisories/CVE-2026-1761/https://agentprime.io/advisories/CVE-2026-1761/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Feb 2026 14:01:03 GMTCVECVE-2025-14242: Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsinghttps://agentprime.io/advisories/CVE-2025-14242/https://agentprime.io/advisories/CVE-2025-14242/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Jan 2026 15:23:03 GMTCVECVE-2026-0719: Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authenticationhttps://agentprime.io/advisories/CVE-2026-0719/https://agentprime.io/advisories/CVE-2026-0719/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Jan 2026 12:38:30 GMTCVECVE-2025-14523: Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)https://agentprime.io/advisories/CVE-2025-14523/https://agentprime.io/advisories/CVE-2025-14523/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Dec 2025 12:30:59 GMTCVECVE-2025-66287: Webkitgtk: processing maliciously crafted web content may lead to an unexpected process crashhttps://agentprime.io/advisories/CVE-2025-66287/https://agentprime.io/advisories/CVE-2025-66287/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Dec 2025 16:48:31 GMTCVECVE-2025-13947: Webkit: webkitgtk: remote user-assisted information disclosure via file drag-and-drophttps://agentprime.io/advisories/CVE-2025-13947/https://agentprime.io/advisories/CVE-2025-13947/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Dec 2025 09:45:59 GMTCVECVE-2025-13601: Glib: integer overflow in in g_escape_uri_string()https://agentprime.io/advisories/CVE-2025-13601/https://agentprime.io/advisories/CVE-2025-13601/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Nov 2025 14:44:22 GMTCVECVE-2025-13502: Webkit: webkitgtk / wpe webkit: out-of-bounds read and integer underflow vulnerability leading to doshttps://agentprime.io/advisories/CVE-2025-13502/https://agentprime.io/advisories/CVE-2025-13502/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Nov 2025 08:02:26 GMTCVECVE-2025-61662: Grub2: missing unregister call for gettext command may lead to use-after-freehttps://agentprime.io/advisories/CVE-2025-61662/https://agentprime.io/advisories/CVE-2025-61662/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Nov 2025 18:20:48 GMTCVECVE-2025-59089: Python-kdcproxy: remote dos via unbounded tcp upstream bufferinghttps://agentprime.io/advisories/CVE-2025-59089/https://agentprime.io/advisories/CVE-2025-59089/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Nov 2025 16:40:50 GMTCVECVE-2025-59088: Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srvhttps://agentprime.io/advisories/CVE-2025-59088/https://agentprime.io/advisories/CVE-2025-59088/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Nov 2025 16:35:27 GMTCVECVE-2025-62229: Xorg: xmayland: use-after-free in xpresentnotify structure creationhttps://agentprime.io/advisories/CVE-2025-62229/https://agentprime.io/advisories/CVE-2025-62229/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Oct 2025 05:28:48 GMTCVECVE-2025-62230: Xorg: xwayland: use-after-free in xkb client resource removalhttps://agentprime.io/advisories/CVE-2025-62230/https://agentprime.io/advisories/CVE-2025-62230/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Oct 2025 05:19:40 GMTCVECVE-2025-62231: Xorg: xmayland: value overflow in xkbsetcompatmap()https://agentprime.io/advisories/CVE-2025-62231/https://agentprime.io/advisories/CVE-2025-62231/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Oct 2025 05:08:32 GMTCVECVE-2025-11561: Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systemshttps://agentprime.io/advisories/CVE-2025-11561/https://agentprime.io/advisories/CVE-2025-11561/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Oct 2025 13:37:53 GMTCVECVE-2025-7493: Freeipa: idm: privilege escalation from host to domain admin in freeipahttps://agentprime.io/advisories/CVE-2025-7493/https://agentprime.io/advisories/CVE-2025-7493/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Sep 2025 15:06:46 GMTCVEcriticalCVE-2025-11021: Libsoup: out-of-bounds read in cookie date handling of libsoup http libraryhttps://agentprime.io/advisories/CVE-2025-11021/https://agentprime.io/advisories/CVE-2025-11021/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Sep 2025 08:36:19 GMTCVECVE-2025-9900: Libtiff: libtiff write-what-wherehttps://agentprime.io/advisories/CVE-2025-9900/https://agentprime.io/advisories/CVE-2025-9900/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Sep 2025 16:26:22 GMTCVECVE-2025-8067: Udisks: out-of-bounds read in udisks daemonhttps://agentprime.io/advisories/CVE-2025-8067/https://agentprime.io/advisories/CVE-2025-8067/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Aug 2025 14:47:08 GMTCVECVE-2025-8941: Linux-pam: incomplete fix for cve-2025-6020https://agentprime.io/advisories/CVE-2025-8941/https://agentprime.io/advisories/CVE-2025-8941/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Aug 2025 14:42:37 GMTCVECVE-2025-7425: Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptrhttps://agentprime.io/advisories/CVE-2025-7425/https://agentprime.io/advisories/CVE-2025-7425/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 13:53:37 GMTCVECVE-2025-7345: Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbufhttps://agentprime.io/advisories/CVE-2025-7345/https://agentprime.io/advisories/CVE-2025-7345/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 13:39:07 GMTCVECVE-2025-5318: Libssh: out-of-bounds read in sftp_handle()https://agentprime.io/advisories/CVE-2025-5318/https://agentprime.io/advisories/CVE-2025-5318/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Jun 2025 14:10:07 GMTCVECVE-2025-6019: Libblockdev: lpe from allow_active to root in libblockdev via udiskshttps://agentprime.io/advisories/CVE-2025-6019/https://agentprime.io/advisories/CVE-2025-6019/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Jun 2025 11:55:57 GMTCVECVE-2025-49180: Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extensionhttps://agentprime.io/advisories/CVE-2025-49180/https://agentprime.io/advisories/CVE-2025-49180/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jun 2025 15:00:18 GMTCVECVE-2025-49179: Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extensionhttps://agentprime.io/advisories/CVE-2025-49179/https://agentprime.io/advisories/CVE-2025-49179/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jun 2025 14:54:49 GMTCVECVE-2025-49178: Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignorehttps://agentprime.io/advisories/CVE-2025-49178/https://agentprime.io/advisories/CVE-2025-49178/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jun 2025 14:54:42 GMTCVECVE-2025-49176: Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extensionhttps://agentprime.io/advisories/CVE-2025-49176/https://agentprime.io/advisories/CVE-2025-49176/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jun 2025 14:49:49 GMTCVECVE-2025-49175: Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursorshttps://agentprime.io/advisories/CVE-2025-49175/https://agentprime.io/advisories/CVE-2025-49175/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jun 2025 14:39:39 GMTCVECVE-2025-4404: Freeipa: idm: privilege escalation from host to domain admin in freeipahttps://agentprime.io/advisories/CVE-2025-4404/https://agentprime.io/advisories/CVE-2025-4404/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jun 2025 13:39:17 GMTCVEcriticalCVE-2025-6020: Linux-pam: linux-pam directory traversalhttps://agentprime.io/advisories/CVE-2025-6020/https://agentprime.io/advisories/CVE-2025-6020/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jun 2025 12:44:08 GMTCVECVE-2025-49794: Libxml: heap use after free (uaf) leads to denial of service (dos)https://agentprime.io/advisories/CVE-2025-49794/https://agentprime.io/advisories/CVE-2025-49794/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Jun 2025 15:24:31 GMTCVEcriticalCVE-2025-49796: Libxml: type confusion leads to denial of service (dos)https://agentprime.io/advisories/CVE-2025-49796/https://agentprime.io/advisories/CVE-2025-49796/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Jun 2025 15:14:28 GMTCVEcriticalCVE-2025-6021: Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2https://agentprime.io/advisories/CVE-2025-6021/https://agentprime.io/advisories/CVE-2025-6021/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Jun 2025 12:49:16 GMTCVECVE-2025-5914: Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.chttps://agentprime.io/advisories/CVE-2025-5914/https://agentprime.io/advisories/CVE-2025-5914/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Jun 2025 19:53:48 GMTCVECVE-2025-48798: Gimp: multiple use after free in xcf parserhttps://agentprime.io/advisories/CVE-2025-48798/https://agentprime.io/advisories/CVE-2025-48798/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 May 2025 14:05:12 GMTCVECVE-2025-48797: Gimp: multiple heap buffer overflows in tga parserhttps://agentprime.io/advisories/CVE-2025-48797/https://agentprime.io/advisories/CVE-2025-48797/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 May 2025 14:04:57 GMTCVECVE-2025-5024: Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdushttps://agentprime.io/advisories/CVE-2025-5024/https://agentprime.io/advisories/CVE-2025-5024/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 May 2025 14:51:01 GMTCVECVE-2025-4945: Libsoup: integer overflow in cookie expiration date handling in libsouphttps://agentprime.io/advisories/CVE-2025-4945/https://agentprime.io/advisories/CVE-2025-4945/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 May 2025 17:03:09 GMTCVECVE-2025-4948: Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsouphttps://agentprime.io/advisories/CVE-2025-4948/https://agentprime.io/advisories/CVE-2025-4948/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 May 2025 15:55:46 GMTCVECVE-2025-4373: Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unicharhttps://agentprime.io/advisories/CVE-2025-4373/https://agentprime.io/advisories/CVE-2025-4373/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 May 2025 14:48:39 GMTCVECVE-2025-3891: Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabledhttps://agentprime.io/advisories/CVE-2025-3891/https://agentprime.io/advisories/CVE-2025-3891/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Apr 2025 11:56:50 GMTCVECVE-2025-46421: Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a serverhttps://agentprime.io/advisories/CVE-2025-46421/https://agentprime.io/advisories/CVE-2025-46421/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Apr 2025 13:01:24 GMTCVECVE-2025-46420: Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.chttps://agentprime.io/advisories/CVE-2025-46420/https://agentprime.io/advisories/CVE-2025-46420/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Apr 2025 12:58:01 GMTCVECVE-2025-32911: Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valuehttps://agentprime.io/advisories/CVE-2025-32911/https://agentprime.io/advisories/CVE-2025-32911/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Apr 2025 15:39:34 GMTCVEcriticalCVE-2025-3576: Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisionshttps://agentprime.io/advisories/CVE-2025-3576/https://agentprime.io/advisories/CVE-2025-3576/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Apr 2025 05:55:26 GMTCVE