Codeready Linux Builder For Arm64 (Redhat) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2025-11-26. Vendor: Redhat.
CVEs of Codeready Linux Builder For Arm64
- CVE-2025-13601 - CVSS 7.7 (high), 2025-11-26: A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to…
- CVE-2025-3155 - CVSS 7.4 (high), 2025-04-03: A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to…
- CVE-2025-2784 - CVSS 7 (high), 2025-04-03: A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup…
- CVE-2023-3758 - CVSS 7.1 (high), 2024-04-18: A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization…
- CVE-2024-1488 - CVSS 8 (high), 2024-02-15: A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime…
- CVE-2023-6915 - CVSS 6.2 (medium), 2024-01-15: A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a…
- CVE-2023-4641 - CVSS 5.5 (medium), 2023-12-27: A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt,…
- CVE-2023-5633 - CVSS 7.8 (high), 2023-10-23: The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled…
- CVE-2023-4911 - CVSS 7.8 (high), 2023-10-03: A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow…
- CVE-2023-4732 - CVSS 4.7 (medium), 2023-10-03: A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause…
- CVE-2023-4806 - CVSS 5.9 (medium), 2023-09-18: A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an…
- CVE-2023-4527 - CVSS 6.5 (medium), 2023-09-18: A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via…
- CVE-2023-4042 - CVSS 5.5 (medium), 2023-08-23: A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue…