Vulnerabilities > Redhat

DATE CVE VULNERABILITY TITLE RISK
2022-08-23 CVE-2021-3839 Out-of-bounds Write vulnerability in multiple products
A flaw was found in the vhost library in DPDK.
network
low complexity
dpdk fedoraproject redhat CWE-787
7.5
2022-08-23 CVE-2021-3905 Memory Leak vulnerability in multiple products
A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing.
7.5
2022-08-22 CVE-2020-27836 Incorrect Permission Assignment for Critical Resource vulnerability in Redhat Openshift Container Platform 4.6
A flaw was found in cluster-ingress-operator.
network
low complexity
redhat CWE-732
critical
9.8
2022-08-22 CVE-2021-3442 Unspecified vulnerability in Redhat Openshift API Management 2.9.1
A flaw was found in the Red Hat OpenShift API Management product.
network
low complexity
redhat
5.4
2022-08-22 CVE-2021-3513 Information Exposure Through an Error Message vulnerability in Redhat Keycloak
A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled.
network
low complexity
redhat CWE-209
7.5
2022-08-22 CVE-2021-3586 Insecure Default Initialization of Resource vulnerability in Redhat Openshift Service Mesh and Servicemesh-Operator
A flaw was found in servicemesh-operator.
network
low complexity
redhat CWE-1188
critical
9.8
2022-08-22 CVE-2021-3590 Cleartext Transmission of Sensitive Information vulnerability in multiple products
A flaw was found in Foreman project.
network
low complexity
theforeman redhat CWE-319
8.8
2022-08-22 CVE-2021-3659 NULL Pointer Dereference vulnerability in multiple products
A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection.
local
low complexity
linux fedoraproject redhat CWE-476
5.5
2022-08-22 CVE-2022-2873 Incorrect Calculation of Buffer Size vulnerability in multiple products
An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input data.
5.5
2022-08-18 CVE-2022-2568 Improper Privilege Management vulnerability in Redhat Ansible Automation Platform 2.0/2.1/2.2
A privilege escalation flaw was found in the Ansible Automation Platform.
network
low complexity
redhat CWE-269
6.5