Insights Proxy (Redhat) - vulnerabilities (CVEs)

44 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-06-30. Vendor: Redhat.

CVEs of Insights Proxy

CVE-2026-58016 - CVSS 9.1 (critical), 2026-06-30: A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed…
CVE-2026-13757 - CVSS 6.2 (medium), 2026-06-29: A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form…
CVE-2026-54369 - CVSS 8.4 (high), 2026-06-29: acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(),…
CVE-2026-42530 - CVSS 9.2 (critical), 2026-06-17: NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote…
CVE-2026-47162 - CVSS 8.8 (high), 2026-06-11: Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the…
CVE-2026-45447 - CVSS 8.8 (high), 2026-06-09: Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A…
CVE-2026-9698 - CVSS 9.8 (critical), 2026-06-09: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were…
CVE-2026-44185 - CVSS 7.3 (high), 2026-06-08: Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server:…
CVE-2026-42536 - CVSS 7.5 (high), 2026-06-08: Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server:…
CVE-2026-34355 - CVSS 7.5 (high), 2026-06-08: A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to…
CVE-2026-48864 - CVSS 7.8 (high), 2026-05-26: A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to…
CVE-2026-9256 - CVSS 9.2 (critical), 2026-05-22: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex…
CVE-2026-42945 - CVSS 9.2 (critical), 2026-05-13: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed…
CVE-2026-4878 - CVSS 7 (high), 2026-04-09: A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function.…
CVE-2026-34982 - CVSS 8.2 (high), 2026-04-06: Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user…
CVE-2026-5121 - CVSS 9.8 (critical), 2026-03-30: A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker…
CVE-2026-2100 - CVSS 7.5 (high), 2026-03-26: A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber…
CVE-2026-33412 - CVSS 7.3 (high), 2026-03-24: Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like…
CVE-2026-32647 - CVSS 8.5 (high), 2026-03-24: NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or…
CVE-2026-4424 - CVSS 7.5 (high), 2026-03-19: A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS…
CVE-2026-27135 - CVSS 7.5 (high), 2026-03-18: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data…
CVE-2026-4111 - CVSS 7.5 (high), 2026-03-13: A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a…
CVE-2025-14831 - CVSS 5.3 (medium), 2026-02-09: A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via…
CVE-2025-15467 - CVSS 9.8 (critical), 2026-01-27: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact…
CVE-2025-9820 - CVSS 4 (medium), 2026-01-26: A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label…
CVE-2025-14512 - CVSS 6.5 (medium), 2025-12-11: A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib…
CVE-2025-14087 - CVSS 9.8 (critical), 2025-12-10: A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code…
CVE-2025-14104 - CVSS 6.1 (medium), 2025-12-05: A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()`…
CVE-2025-13601 - CVSS 7.7 (high), 2025-11-26: A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to…
CVE-2025-8941 - CVSS 7.8 (high), 2025-08-13: A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race…
CVE-2025-6395 - CVSS 6.5 (medium), 2025-07-10: A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().
CVE-2025-7425 - CVSS 7.8 (high), 2025-07-10: A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such…
CVE-2025-32990 - CVSS 8.2 (high), 2025-07-10: A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain…
CVE-2025-32989 - CVSS 5.3 (medium), 2025-07-10: A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension…
CVE-2025-32988 - CVSS 8.2 (high), 2025-07-10: A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name…
CVE-2025-6020 - CVSS 7.8 (high), 2025-06-17: A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their…
CVE-2025-6170 - CVSS 2.5 (low), 2025-06-16: A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program…
CVE-2025-49796 - CVSS 9.1 (critical), 2025-06-16: A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an…
CVE-2025-49794 - CVSS 9.1 (critical), 2025-06-16: A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the…
CVE-2025-6021 - CVSS 7.5 (high), 2025-06-12: A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This…
CVE-2025-5914 - CVSS 7.8 (high), 2025-06-09: A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an…
CVE-2025-4598 - CVSS 4.7 (medium), 2025-05-30: A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access…
CVE-2025-5278 - CVSS 4.4 (medium), 2025-05-27: A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the…
CVE-2025-4373 - CVSS 4.8 (medium), 2025-05-06: A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the…