Vulnerabilities > Redhat

DATE CVE VULNERABILITY TITLE RISK
2021-04-29 CVE-2021-20228 Insufficiently Protected Credentials vulnerability in Redhat products
A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module.
network
low complexity
redhat CWE-522
5.0
2021-04-19 CVE-2021-20208 Incorrect Privilege Assignment vulnerability in multiple products
A flaw was found in cifs-utils in versions before 6.13.
network
samba redhat CWE-266
4.9
2021-04-19 CVE-2021-3505 Insufficient Entropy vulnerability in multiple products
A flaw was found in libtpms in versions before 0.8.0.
local
low complexity
libtpms-project redhat CWE-331
2.1
2021-04-19 CVE-2021-3498 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files.
6.8
2021-04-19 CVE-2021-3497 USE After Free vulnerability in multiple products
GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files.
6.8
2021-04-15 CVE-2021-20288 Improper Authentication vulnerability in multiple products
An authentication flaw was found in ceph in versions before 14.2.20.
network
low complexity
linuxfoundation redhat fedoraproject CWE-287
6.5
2021-04-15 CVE-2021-3487 Resource Exhaustion vulnerability in multiple products
There's a flaw in the BFD library of binutils in versions before 2.36.
7.1
2021-04-08 CVE-2021-3482 Improper Input Validation vulnerability in multiple products
A flaw was found in Exiv2 in versions before and including 0.27.4-RC1.
network
low complexity
exiv2 redhat CWE-20
6.4
2021-04-08 CVE-2021-3448 Improperly Implemented Security Check for Standard vulnerability in multiple products
A flaw was found in dnsmasq in versions before 2.85.
4.3
2021-04-08 CVE-2021-3413 Information Exposure vulnerability in multiple products
A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0.
network
low complexity
theforeman redhat CWE-200
6.5