Advisories · Technology
Red Hat Insights proxy 1.5.
Every CVE that names Red Hat Insights proxy 1.5 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
- GNOME GLib
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 6.2 Medium
P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Denial of service
- CVSS 5.3 Medium
P11-kit: null dereference via c_derivekey with specific null parameters
- p11-glue p11-kit
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 7.5 High
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Denial of service
- CVSS 4.0 Medium
Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 6.1 Medium
Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames
- util-linux
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 7.8 High
Linux-pam: incomplete fix for cve-2025-6020
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- Path traversal
- CVSS 6.5 Medium
Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 6.5 Medium
Gnutls: vulnerability in gnutls certtool template parsing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 5.3 Medium
Gnutls: vulnerability in gnutls sct extension parsing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Weak cryptography or TLS
- CVSS 6.5 Medium
Gnutls: vulnerability in gnutls othername san export
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 4.7 Medium
Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- CWE-364
- CVSS 4.4 Medium
Coreutils: heap buffer under-read in gnu coreutils sort via key specification
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 4.8 Medium
Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption