Red Hat, Inc. vulnerabilities
73 vulnerabilities
Known vulnerabilities in Red Hat, Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 53 products.
Products
50 of 53- Keycloak6 vulnerabilities
- 389 Ds Base3 vulnerabilities
- Ceph3 vulnerabilities
- Gluster Storage For RHEL 63 vulnerabilities
- Postgresql3 vulnerabilities
- Resteasy3 vulnerabilities
- Ansible Tower2 vulnerabilities
- Etcd2 vulnerabilities
- Glusterfs2 vulnerabilities
- Moodle2 vulnerabilities
- Wildfly2 vulnerabilities
- Ansible1 vulnerabilities
- Atomic Openshift1 vulnerabilities
- Augeas1 vulnerabilities
- Cairo1 vulnerabilities
- Cloudforms1 vulnerabilities
- Curl1 vulnerabilities
- Cygwin1 vulnerabilities
- Dnsdist1 vulnerabilities
- DPDK1 vulnerabilities
- EAP 51 vulnerabilities
- Fedora Arm Installer1 vulnerabilities
- Hawtio1 vulnerabilities
- Hibernate Validator1 vulnerabilities
- Hornetq/Artemis1 vulnerabilities
- Infinispan1 vulnerabilities
- Instack Undercloud1 vulnerabilities
- Jboss1 vulnerabilities
- Jboss Enterprise Application Platform1 vulnerabilities
- Jboss Remoting1 vulnerabilities
- Jbossas1 vulnerabilities
- Keycloak Node.Js Adapter1 vulnerabilities
- Libexif1 vulnerabilities
- Libpam4J1 vulnerabilities
- Mod Cluster1 vulnerabilities
- Openshift1 vulnerabilities
- Openshift Enterprise1 vulnerabilities
- Packagekit1 vulnerabilities
- Poppler1 vulnerabilities
- Pure Ftpd1 vulnerabilities
- Red Hat Enterprise Linux1 vulnerabilities
- Red Hat Jboss Enterprise Application Platform1 vulnerabilities
- RHEL Shipped Xdg User Dirs And Gnome Session1 vulnerabilities
- Rhnsd1 vulnerabilities
- Rkhunter1 vulnerabilities
- Rpm1 vulnerabilities
- Rubygem Safemode1 vulnerabilities
- Satellite 61 vulnerabilities
- Spice1 vulnerabilities
- Spice Vdagent1 vulnerabilities
CVE-2018-1129cephceph+13
EPSS score1.90%
A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.CVE-2018-1104red hat, inc.ansible tower+2EPSS score2.47%
Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server.CVE-2018-1101red hat, inc.ansible tower+2EPSS score1.94%
Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization administrators access to the entire system.CVE-2018-1082ubuntumoodle+2EPSS score2.02%
A flaw was found in Moodle 3.4 to 3.4.1, and 3.3 to 3.3.4. If a user account using OAuth2 authentication method was once confirmed but later suspended, the user could still login to the site.CVE-2018-1054debian389-ds-base+7EPSS score4.56%
An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.CVE-2018-1099chainguarddgraph+16EPSS score0.50%
DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).CVE-2018-1088debianglusterfs+28EPSS score5.49%
A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.CVE-2018-1102red hat, inc.atomic-openshift+63EPSS score2.42%
A flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An improper path validation of tar files in ExtractTarStreamFromTarReader in tar/tar.go leads to privilege escalation.CVE-2018-1098debianetcd+5EPSS score1.22%
A cross-site request forgery flaw was found in etcd 3.3.1 and earlier. An attacker can set up a website that tries to send a POST request to the etcd server and modify a key. Adding a key is done with PUT so it is theoretically safe (can't PUT from an HTML form or such) but POST allows creating in-order keys that an attacker can send.CVE-2018-1128debianceph+13EPSS score1.39%
It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.CVE-2018-1106canonicalubuntu_linux+25EPSS score0.38%
An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system.CVE-2018-1047ubuntuundertow+4EPSS score0.51%
A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.CVE-2018-1041jbossjboss-remoting+2EPSS score15.53%
A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an empty buffer. An attacker could use this flaw to cause denial of service via high CPU caused by an infinite loop.CVE-2018-1069red hat, inc.openshift enterprise+1EPSS score0.58%
Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems. An attacker could override the UserId and GroupId for GlusterFS and NFS to read and write any data on the network filesystem.CVE-2018-1049canonicalubuntu_linux+25EPSS score7.44%
In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to denial of service, until mount points are unmounted.CVE-2018-1131infinispaninfinispan+3EPSS score1.21%
Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated access to the server could send a malicious object to a cache configured to accept certain types of objects, achieving code execution and possible further attacks. Versions 9.0.3.Final, 9.1.7.Final, 8.2.10.Final, 9.2.2.Final, 9.3.0.Alpha1 are believed to be affected.CVE-2018-1048debianundertow+4EPSS score1.59%
It was found that the AJP connector in undertow, as shipped in Jboss EAP 7.1.0.GA, does not use the ALLOW_ENCODED_SLASH option and thus allow the the slash / anti-slash characters encoded in the url which may lead to path traversal and result in the information disclosure of arbitrary local files.CVE-2018-1051ubunturesteasy+3EPSS score1.31%
It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()` in YamlProvider.CVE-2018-1059canonicalubuntu_linux+32EPSS score0.85%
The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.CVE-2018-1081ubuntumoodle+2EPSS score1.41%
A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was verified, otherwise admin email can be spammed.