Hardened Images (Redhat) - vulnerabilities (CVEs)

50 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-14. Vendor: Redhat.

CVEs of Hardened Images

CVE-2026-19617 - CVSS 5.5 (medium), 2026-08-14: A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager (LVM) metadata configuration with deeply nested structures. This…
CVE-2026-19548 - CVSS 5.5 (medium), 2026-08-12: Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils. The…
CVE-2026-71227 - CVSS 5.1 (medium), 2026-08-05: A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled…
CVE-2026-71226 - CVSS 7.3 (high), 2026-08-05: Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing…
CVE-2026-71225 - CVSS 6.5 (medium), 2026-08-05: A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in stateful modes such as Counter (CTR) or…
CVE-2026-59851 - CVSS 8.8 (high), 2026-07-21: A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is…
CVE-2026-59850 - CVSS 7.5 (high), 2026-07-21: A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has…
CVE-2026-59849 - CVSS 7.5 (high), 2026-07-21: A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when…
CVE-2026-59848 - CVSS 5.3 (medium), 2026-07-21: A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded…
CVE-2026-59847 - CVSS 7.5 (high), 2026-07-21: A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an…
CVE-2026-59846 - CVSS 3.9 (low), 2026-07-21: A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables…
CVE-2026-59844 - CVSS 6.5 (medium), 2026-07-21: A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to…
CVE-2026-59845 - CVSS 5.9 (medium), 2026-07-21: A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent…
CVE-2026-59843 - CVSS 6.5 (medium), 2026-07-21: A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop…
CVE-2026-59842 - CVSS 5.3 (medium), 2026-07-21: A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without…
CVE-2026-15370 - CVSS 7.3 (high), 2026-07-21: A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer.…
CVE-2026-13757 - CVSS 6.2 (medium), 2026-06-29: A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form…
CVE-2026-13595 - CVSS 6.8 (medium), 2026-06-29: A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a…
CVE-2026-55654 - CVSS 3.7 (low), 2026-06-23: A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application…
CVE-2026-55653 - CVSS 6.5 (medium), 2026-06-23: A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This…
CVE-2026-42055 - CVSS 9.2 (critical), 2026-06-17: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the…
CVE-2026-48864 - CVSS 7.8 (high), 2026-05-26: A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to…
CVE-2026-9256 - CVSS 9.2 (critical), 2026-05-22: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex…
CVE-2026-9149 - CVSS 6.5 (medium), 2026-05-21: A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size…
CVE-2026-9150 - CVSS 6.5 (medium), 2026-05-20: A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted…
CVE-2026-42009 - CVSS 7.5 (high), 2026-05-18: A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator…
CVE-2026-42010 - CVSS 9.8 (critical), 2026-05-07: A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character…
CVE-2026-3832 - CVSS 3.7 (low), 2026-04-30: A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP)…
CVE-2026-3833 - CVSS 7.4 (high), 2026-04-30: A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for…
CVE-2026-6732 - CVSS 7.5 (high), 2026-04-23: A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that…
CVE-2026-6845 - CVSS 5 (medium), 2026-04-22: A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by…
CVE-2026-6844 - CVSS 5.5 (medium), 2026-04-22: A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a…
CVE-2026-6846 - CVSS 7.8 (high), 2026-04-22: A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format)…
CVE-2026-39979 - CVSS 8.2 (high), 2026-04-13: jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jv_parse_sized() API in libjq accepts a counted buffer…
CVE-2026-1584 - CVSS 7.5 (high), 2026-04-09: A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an…
CVE-2025-14821 - CVSS 7.8 (high), 2026-04-07: A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH (Secure Shell) connections, and manipulation…
CVE-2026-5745 - CVSS 5.5 (medium), 2026-04-07: A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl()…
CVE-2026-5704 - CVSS 5.5 (medium), 2026-04-06: A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully…
CVE-2026-3184 - CVSS 5.3 (medium), 2026-04-03: A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied…
CVE-2026-2625 - CVSS 5.5 (medium), 2026-04-03: A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially crafted Red Hat Package Manager (RPM) file. During…
CVE-2026-5121 - CVSS 9.8 (critical), 2026-03-30: A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker…
CVE-2026-2100 - CVSS 7.5 (high), 2026-03-26: A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber…
CVE-2026-0966 - CVSS 8.2 (high), 2026-03-26: A flaw was found in libssh. The API function `ssh_get_hexa()` is vulnerable to a denial of service when processing zero-length input. This can be exploited…
CVE-2026-0964 - CVSS 6.3 (medium), 2026-03-26: A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be…
CVE-2026-4775 - CVSS 7.8 (high), 2026-03-24: A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by…
CVE-2026-4426 - CVSS 6.5 (medium), 2026-03-19: A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field…
CVE-2026-4424 - CVSS 7.5 (high), 2026-03-19: A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS…
CVE-2026-0992 - CVSS 2.9 (low), 2026-01-15: A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated…
CVE-2026-0990 - CVSS 5.9 (medium), 2026-01-15: A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML…
CVE-2026-0989 - CVSS 3.7 (low), 2026-01-15: A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion…