Developer Tools (Redhat) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-08-26. Vendor: Redhat.
CVEs of Developer Tools
- CVE-2021-3669 - CVSS 5.5 (medium), 2022-08-26: A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource…
- CVE-2021-3696 - CVSS 4.5 (medium), 2022-07-06: A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space.…
- CVE-2021-3695 - CVSS 4.5 (medium), 2022-07-06: A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption…
- CVE-2021-3697 - CVSS 7 (high), 2022-07-06: A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be…
- CVE-2022-1227 - CVSS 8.8 (high), 2022-04-29: A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded…
- CVE-2022-27649 - CVSS 7.5 (high), 2022-04-04: A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine),…
- CVE-2022-0330 - CVSS 7.8 (high), 2022-03-25: A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This…
- CVE-2022-1011 - CVSS 7.8 (high), 2022-03-18: A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized…
- CVE-2021-3744 - CVSS 5.5 (medium), 2022-03-04: A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a…
- CVE-2019-17596 - CVSS 7.5 (high), 2019-10-24: Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack…
- CVE-2019-16276 - CVSS 7.5 (high), 2019-09-30: Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.
- CVE-2019-9514 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an…
- CVE-2018-16871 - CVSS 7.5 (high), 2019-07-30: A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS…
- CVE-2019-9741 - CVSS 6.1 (medium), 2019-03-13: An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the second argument…
- CVE-2017-15041 - CVSS 9.8 (critical), 2017-10-05: Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom domains, it is possible to arrange things so that…
