Red Hat OpenShift Container Platform 4.

Libxml2: unbounded relaxng include recursion leading to stack overflow

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

• util-linux
• Red Hat Enterprise Linux 10
• Memory corruption

Grub2: use-after-free in net_set_vlan

• GNU grub2
• Red Hat Enterprise Linux 10
• Memory corruption

Grub2: missing unregister call for normal_exit command may lead to use-after-free

• GNU grub2
• Red Hat Enterprise Linux 10
• Memory corruption

Grub2: missing unregister call for normal commands may lead to use-after-free

• GNU grub2
• Red Hat Enterprise Linux 10
• Memory corruption

Grub2: grub2: out-of-bounds write via malicious usb device

• GNU grub2
• Red Hat Enterprise Linux 10
• Memory corruption

Grub2: use-after-free in grub_file_close()

• GNU grub2
• Red Hat Enterprise Linux 10
• Memory corruption

Samba: command injection in wins server hook script

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Command injection

Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Luksmeta: data corruption when handling luks1 partitions with luksmeta

• Latchset luksmeta
• Red Hat Enterprise Linux 10
• CWE-1284

Samba: vfs_streams_xattr uninitialized memory write possible

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libxslt: type confusion in exsltfuncresultcompfunction of libxslt

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libxslt: use-after-free with key data stored cross-rvt

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libssh: memory exhaustion via repeated key exchange in libssh

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Denial of service

Libssh: write beyond bounds in binary to base64 conversion functions

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libssh: null pointer dereference in libssh kex session id calculation

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Libssh: use of uninitialized variable in privatekey_from_file()

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

• GNOME libxslt
• Red Hat Enterprise Linux 10
• Memory corruption

Gnutls: vulnerability in gnutls certtool template parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Gnutls: vulnerability in gnutls sct extension parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Weak cryptography or TLS

Gnutls: vulnerability in gnutls othername san export

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Libssh: invalid return code for chacha20 poly1305 with openssl backend

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-393

Libssh: double free vulnerability in libssh key export functions

• libssh
• Red Hat Enterprise Linux 9
• Memory corruption

Libssh: incorrect return code handling in ssh_kdf() in libssh

• libssh
• Red Hat Enterprise Linux 8
• CWE-682

Libarchive: reading past eof may be triggered for piped file streams

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Information disclosure

Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• CWE-364

Coreutils: heap buffer under-read in gnu coreutils sort via key specification

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Icu: stack buffer overflow in the srbroot::addtag function

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Authentication bypass

Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Weak cryptography or TLS

Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• Memory corruption

Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: fs/bfs: integer overflow in the bfs parser.

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: fs/tar: integer overflow causes heap oob write

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Memory corruption

Openssh: denial-of-service in openssh

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Denial of service

Grub2: read: integer overflow may lead to out-of-bounds write

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-501

Grub2: grub-core/gettext: integer overflow leads to heap oob write.

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Memory corruption

Grub2: command/gpg: use-after-free due to hooks not being removed on module unload

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Grub2: fs/hfs+: refcount can be decremented twice

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• CWE-911

Grub2: fs/ufs: oob write in the heap

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Grub2: grub-core/gettext: integer overflow leads to heap oob write and read.

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Grub2: commands/extcmd: missing check for failed allocation

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• CWE-252

Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-390