agentprime: red-hat-enterprise-linux-9-2-extended-update-support

agentprime: red-hat-enterprise-linux-9-2-extended-update-supportEvery new CVE for red-hat-enterprise-linux-9-2-extended-update-support.https://agentprime.io/CVE-2025-4948: Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsouphttps://agentprime.io/advisories/CVE-2025-4948/https://agentprime.io/advisories/CVE-2025-4948/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 May 2025 15:55:46 GMTCVECVE-2025-46421: Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a serverhttps://agentprime.io/advisories/CVE-2025-46421/https://agentprime.io/advisories/CVE-2025-46421/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Apr 2025 13:01:24 GMTCVECVE-2025-46420: Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.chttps://agentprime.io/advisories/CVE-2025-46420/https://agentprime.io/advisories/CVE-2025-46420/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Apr 2025 12:58:01 GMTCVECVE-2025-32911: Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valuehttps://agentprime.io/advisories/CVE-2025-32911/https://agentprime.io/advisories/CVE-2025-32911/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Apr 2025 15:39:34 GMTCVEcriticalCVE-2025-32914: Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of processhttps://agentprime.io/advisories/CVE-2025-32914/https://agentprime.io/advisories/CVE-2025-32914/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Apr 2025 14:45:46 GMTCVECVE-2025-32907: Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range headerhttps://agentprime.io/advisories/CVE-2025-32907/https://agentprime.io/advisories/CVE-2025-32907/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Apr 2025 14:00:09 GMTCVECVE-2025-32906: Libsoup: out of bounds reads in soup_headers_parse_request()https://agentprime.io/advisories/CVE-2025-32906/https://agentprime.io/advisories/CVE-2025-32906/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Apr 2025 13:58:39 GMTCVECVE-2025-32913: Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition headerhttps://agentprime.io/advisories/CVE-2025-32913/https://agentprime.io/advisories/CVE-2025-32913/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Apr 2025 13:37:36 GMTCVECVE-2025-32053: Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()https://agentprime.io/advisories/CVE-2025-32053/https://agentprime.io/advisories/CVE-2025-32053/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Apr 2025 13:37:39 GMTCVECVE-2025-32052: Libsoup: heap buffer overflow in sniff_unknown()https://agentprime.io/advisories/CVE-2025-32052/https://agentprime.io/advisories/CVE-2025-32052/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Apr 2025 13:37:23 GMTCVECVE-2025-32050: Libsoup: integer overflow in append_param_quotedhttps://agentprime.io/advisories/CVE-2025-32050/https://agentprime.io/advisories/CVE-2025-32050/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Apr 2025 13:36:29 GMTCVECVE-2025-32049: Libsoup: denial of service attack to websocket serverhttps://agentprime.io/advisories/CVE-2025-32049/https://agentprime.io/advisories/CVE-2025-32049/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Apr 2025 13:36:13 GMTCVECVE-2025-3155: Yelp: arbitrary file readhttps://agentprime.io/advisories/CVE-2025-3155/https://agentprime.io/advisories/CVE-2025-3155/CVSS 7.4 (High). Critical: CVSS score 7.4 (7.0 or more) and EPSS 0.13 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Apr 2025 13:34:18 GMTCVEcriticalCVE-2025-2784: Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing contenthttps://agentprime.io/advisories/CVE-2025-2784/https://agentprime.io/advisories/CVE-2025-2784/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Apr 2025 01:40:12 GMTCVECVE-2025-26601: Xorg: xwayland: use-after-free in syncinittrigger()https://agentprime.io/advisories/CVE-2025-26601/https://agentprime.io/advisories/CVE-2025-26601/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:55:36 GMTCVECVE-2025-26600: Xorg: xwayland: use-after-free in playreleasedevents()https://agentprime.io/advisories/CVE-2025-26600/https://agentprime.io/advisories/CVE-2025-26600/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:55:20 GMTCVECVE-2025-26599: Xorg: xwayland: use of uninitialized pointer in compredirectwindow()https://agentprime.io/advisories/CVE-2025-26599/https://agentprime.io/advisories/CVE-2025-26599/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:55:02 GMTCVECVE-2025-26598: Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()https://agentprime.io/advisories/CVE-2025-26598/https://agentprime.io/advisories/CVE-2025-26598/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:54:57 GMTCVECVE-2025-26597: Xorg: xwayland: buffer overflow in xkbchangetypesofkey()https://agentprime.io/advisories/CVE-2025-26597/https://agentprime.io/advisories/CVE-2025-26597/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:54:48 GMTCVECVE-2025-26596: Xorg: xwayland: heap overflow in xkbwritekeysyms()https://agentprime.io/advisories/CVE-2025-26596/https://agentprime.io/advisories/CVE-2025-26596/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:54:23 GMTCVECVE-2025-26595: Xorg: xwayland: buffer overflow in xkbvmodmasktext()https://agentprime.io/advisories/CVE-2025-26595/https://agentprime.io/advisories/CVE-2025-26595/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:54:06 GMTCVECVE-2025-26594: X.org: xwayland: use-after-free of the root cursorhttps://agentprime.io/advisories/CVE-2025-26594/https://agentprime.io/advisories/CVE-2025-26594/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:53:51 GMTCVECVE-2025-0624: Grub2: net: out-of-bounds write in grub_net_search_config_file()https://agentprime.io/advisories/CVE-2025-0624/https://agentprime.io/advisories/CVE-2025-0624/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 18:23:21 GMTCVECVE-2025-1244: Emacs: shell injection vulnerability in gnu emacs via custom "man" uri schemehttps://agentprime.io/advisories/CVE-2025-1244/https://agentprime.io/advisories/CVE-2025-1244/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Feb 2025 14:27:45 GMTCVECVE-2024-12085: Rsync: info leak via uninitialized stack contentshttps://agentprime.io/advisories/CVE-2024-12085/https://agentprime.io/advisories/CVE-2024-12085/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jan 2025 17:37:16 GMTCVECVE-2024-11614: Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost libraryhttps://agentprime.io/advisories/CVE-2024-11614/https://agentprime.io/advisories/CVE-2024-11614/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Dec 2024 08:30:49 GMTCVECVE-2024-52337: Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` methodhttps://agentprime.io/advisories/CVE-2024-52337/https://agentprime.io/advisories/CVE-2024-52337/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Nov 2024 15:21:17 GMTCVECVE-2024-9632: Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerabilityhttps://agentprime.io/advisories/CVE-2024-9632/https://agentprime.io/advisories/CVE-2024-9632/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Oct 2024 07:42:35 GMTCVECVE-2024-9050: Networkmanager-libreswan: local privilege escalation via leftupdownhttps://agentprime.io/advisories/CVE-2024-9050/https://agentprime.io/advisories/CVE-2024-9050/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Oct 2024 12:14:31 GMTCVECVE-2024-45770: Pcp: pmpost symlink attack allows escalating pcp to root userhttps://agentprime.io/advisories/CVE-2024-45770/https://agentprime.io/advisories/CVE-2024-45770/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Sep 2024 08:45:37 GMTCVECVE-2024-45769: Pcp: pmcd heap corruption through metric pmstore operationshttps://agentprime.io/advisories/CVE-2024-45769/https://agentprime.io/advisories/CVE-2024-45769/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Sep 2024 08:45:06 GMTCVECVE-2024-7006: Libtiff: null pointer dereference in tif_dirinfo.chttps://agentprime.io/advisories/CVE-2024-7006/https://agentprime.io/advisories/CVE-2024-7006/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Aug 2024 20:49:45 GMTCVECVE-2024-7409: Qemu: denial of service via improper synchronization in qemu nbd server during socket closurehttps://agentprime.io/advisories/CVE-2024-7409/https://agentprime.io/advisories/CVE-2024-7409/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Aug 2024 13:19:27 GMTCVECVE-2024-6409: Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9https://agentprime.io/advisories/CVE-2024-6409/https://agentprime.io/advisories/CVE-2024-6409/CVSS 7.0 (High). Critical: CVSS score 7.0 (7.0 or more) and EPSS 0.28 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jul 2024 17:57:10 GMTCVEcriticalCVE-2024-4467: Qemu-kvm: 'qemu-img info' leads to host file read/writehttps://agentprime.io/advisories/CVE-2024-4467/https://agentprime.io/advisories/CVE-2024-4467/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jul 2024 15:57:23 GMTCVECVE-2024-6387: Openssh: regresshion - race condition in ssh allows rce/doshttps://agentprime.io/advisories/CVE-2024-6387/https://agentprime.io/advisories/CVE-2024-6387/CVSS 8.1 (High). Critical: CVSS score 8.1 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jul 2024 12:37:25 GMTCVEcriticalCVE-2024-5953: 389-ds-base: malformed userpassword hash may cause denial of servicehttps://agentprime.io/advisories/CVE-2024-5953/https://agentprime.io/advisories/CVE-2024-5953/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Jun 2024 10:01:56 GMTCVECVE-2024-3183: Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute forcehttps://agentprime.io/advisories/CVE-2024-3183/https://agentprime.io/advisories/CVE-2024-3183/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jun 2024 08:18:51 GMTCVECVE-2024-2698: Freeipa: delegation rules allow a proxy service to impersonate any user to access another target servicehttps://agentprime.io/advisories/CVE-2024-2698/https://agentprime.io/advisories/CVE-2024-2698/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jun 2024 08:03:49 GMTCVECVE-2023-4727: Ca: token authentication bypass vulnerabilityhttps://agentprime.io/advisories/CVE-2023-4727/https://agentprime.io/advisories/CVE-2023-4727/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Jun 2024 19:30:25 GMTCVECVE-2024-3049: Booth: specially crafted hash can lead to invalid hmac being accepted by booth serverhttps://agentprime.io/advisories/CVE-2024-3049/https://agentprime.io/advisories/CVE-2024-3049/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 05:30:04 GMTCVECVE-2024-5564: Libndp: buffer overflow in route information length fieldhttps://agentprime.io/advisories/CVE-2024-5564/https://agentprime.io/advisories/CVE-2024-5564/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 May 2024 18:31:47 GMTCVECVE-2024-3657: 389-ds-base: potential denial of service via specially crafted kerberos as-req requesthttps://agentprime.io/advisories/CVE-2024-3657/https://agentprime.io/advisories/CVE-2024-3657/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 May 2024 12:53:03 GMTCVECVE-2024-2199: 389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.chttps://agentprime.io/advisories/CVE-2024-2199/https://agentprime.io/advisories/CVE-2024-2199/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 May 2024 12:04:07 GMTCVECVE-2024-4418: Libvirt: stack use-after-free in virnetclientioeventloop()https://agentprime.io/advisories/CVE-2024-4418/https://agentprime.io/advisories/CVE-2024-4418/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 May 2024 03:03:05 GMTCVECVE-2024-2905: Rpm-ostree: world-readable /etc/shadow filehttps://agentprime.io/advisories/CVE-2024-2905/https://agentprime.io/advisories/CVE-2024-2905/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Apr 2024 17:44:15 GMTCVECVE-2023-3758: Sssd: race condition during authorization leads to gpo policies functioning inconsistentlyhttps://agentprime.io/advisories/CVE-2023-3758/https://agentprime.io/advisories/CVE-2023-3758/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Apr 2024 19:06:44 GMTCVECVE-2024-31083: Xorg-x11-server: use-after-free in procrenderaddglyphshttps://agentprime.io/advisories/CVE-2024-31083/https://agentprime.io/advisories/CVE-2024-31083/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Apr 2024 12:04:49 GMTCVECVE-2024-31081: Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicehttps://agentprime.io/advisories/CVE-2024-31081/https://agentprime.io/advisories/CVE-2024-31081/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 13:48:12 GMTCVECVE-2024-31080: Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventshttps://agentprime.io/advisories/CVE-2024-31080/https://agentprime.io/advisories/CVE-2024-31080/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 13:47:33 GMTCVE