Red Hat vulnerabilities
264 vulnerabilities
Known vulnerabilities in Red Hat products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 749 products.
Products
49 of 749- Ansible29 vulnerabilities
- Keycloak22 vulnerabilities
- Glusterfs12 vulnerabilities
- Kernel10 vulnerabilities
- Newlib8 vulnerabilities
- Openshift7 vulnerabilities
- Undertow7 vulnerabilities
- Samba6 vulnerabilities
- Cfme5 vulnerabilities
- Cloudforms5 vulnerabilities
- IPA5 vulnerabilities
- Wildfly5 vulnerabilities
- Ansible Tower4 vulnerabilities
- 389 Ds Base3 vulnerabilities
- Atomic Openshift3 vulnerabilities
- Business Central3 vulnerabilities
- Infinispan3 vulnerabilities
- Tower3 vulnerabilities
- Wildfly Core3 vulnerabilities
- Ceph2 vulnerabilities
- Jackson Databind2 vulnerabilities
- Jboss EAP2 vulnerabilities
- Jboss Enterprise Application Platform2 vulnerabilities
- Jboss Portal2 vulnerabilities
- Libssh2 vulnerabilities
- Libyang2 vulnerabilities
- Openshift Enterprise2 vulnerabilities
- Openshift Ansible2 vulnerabilities
- Openstack Tripleo Common2 vulnerabilities
- Ovirt Engine2 vulnerabilities
- Picketlink2 vulnerabilities
- Quay2 vulnerabilities
- Red Hat Satellite2 vulnerabilities
- Satellite2 vulnerabilities
- Spice2 vulnerabilities
- 389 Directory Server1 vulnerabilities
- Activemq Artemis1 vulnerabilities
- Ansible Tower1 vulnerabilities
- BIND1 vulnerabilities
- Bootstrap3 Typeahead.Js1 vulnerabilities
- BPMS1 vulnerabilities
- BRMS1 vulnerabilities
- Buildah1 vulnerabilities
- Candlepin1 vulnerabilities
- Ceph Storage1 vulnerabilities
- Certificate System1 vulnerabilities
- Containernetworking/Plugins1 vulnerabilities
- Cpio1 vulnerabilities
- Dhcp1 vulnerabilities
CVE-2026-52903manageiqmanageiq+1
EPSS score0.45%
A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides YAML.safe_load to silently fall back to YAML.unsafe_load in production when a Psych::DisallowedClass error occurs. An authenticated attacker with dialog import access can exploit this to achieve remote code execution by uploading a crafted YAML payload that triggers the fallback and deserializes arbitrary Ruby objects.
Red Hat CloudForms, which was based on ManageIQ, has reached End of Life and is no longer supported. No errata or patches will be issued. This CVE is being assigned for the benefit of the ManageIQ community and downstream consumers.CVE-2018-16859alpineansible+5EPSS score0.54%
Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable.CVE-2018-16871debianlinux+38EPSS score2.70%
A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.CVE-2018-16876alpineansible+17EPSS score2.48%
ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.CVE-2018-1114debianundertow+6EPSS score2.33%
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.CVE-2018-1127red hatred hat gluster storage+14EPSS score1.26%
Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. Session tokens remain active for a few minutes allowing attackers to replay tokens acquired via sniffing/MITM attacks and authenticate as the target user.CVE-2018-1111fedoradhcp+14EPSS score97.86%
DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.CVE-2018-14642debianundertow+5EPSS score2.11%
An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests.CVE-2018-14632ubuntugolang-github-evanphx-json-patch+22EPSS score2.23%
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.CVE-2018-14655org.keycloakkeycloak-parent+3EPSS score1.19%
A flaw was found in Keycloak 3.4.3.Final, 4.0.0.Beta2, 4.3.0.Final. When using 'response_mode=form_post' it is possible to inject arbitrary Javascript-Code via the 'state'-parameter in the authentication URL. This allows an XSS-Attack upon succesfully login.CVE-2018-14658org.keycloakkeycloak-core+2EPSS score1.10%
A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils before the redirect url is verified. This can lead to an Open Redirection attackCVE-2018-14620red hatopenstack-rabbitmq-container+1EPSS score0.60%
The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially allow an attacker to serve malicious code to the image builder and install in the resultant container image. Version of openstack-rabbitmq-container and openstack-containers as shipped with Red Hat Openstack 12, 13, 14 are believed to be vulnerable.CVE-2018-14657org.keycloakkeycloak-parent+3EPSS score1.16%
A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.CVE-2018-10927debianglusterfs+7EPSS score2.77%
A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this flaw to leak information and execute remote denial of service by crashing gluster brick process.CVE-2018-10884red hatansible-tower+1EPSS score0.90%
Ansible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF) in awx/api/authentication.py. An attacker could exploit this by tricking already authenticated users into visiting a malicious site and hijacking the authtoken cookie.CVE-2018-10894org.keycloakkeycloak-saml-adapter-core+4EPSS score0.35%
It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks.CVE-2018-10930debianglusterfs+9EPSS score2.11%
A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated attacker could use this flaw to write to a destination outside the gluster volume.CVE-2018-10937red hatopenshift container platform+1EPSS score1.08%
A cross site scripting flaw exists in the tetonic-console component of Openshift Container Platform 3.11. An attacker with the ability to create pods can use this flaw to perform actions on the K8s API as the victim.CVE-2018-10913debianglusterfs+7EPSS score2.09%
An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via glusterfs FUSE to determine the existence of any file.CVE-2018-10923debianglusterfs+7EPSS score1.67%
It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node. An authenticated attacker could use this to create an arbitrary device and read data from any device attached to the glusterfs server node.