Advisories · Technology
Red Hat OpenShift AI 3.0.
Every CVE that names Red Hat OpenShift AI 3.0 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Broken access control
- CVSS 8.5 High
Libxml2: double-free/uaf in libxml2 python bindings
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.1 High
Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
- xdgmime
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 7.3 High
Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 5.0 Medium
Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-923
- CVSS 4.3 Medium
Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 5.0 Medium
Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace
- Red Hat OpenShift AI 2.25
- Red Hat OpenShift AI 3.0
- Privilege escalation
- CVSS 7.5 High
Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption