目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

Red Hat 厂商漏洞列表 / CVE 中文分析 975

Red Hat 厂商相关 975 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Red Hat 主要提供企业级 Linux 操作系统及中间件解决方案，其开源生态广泛支撑全球关键业务。历史漏洞多集中于远程代码执行、权限提升及信息泄露，部分源于底层组件集成缺陷。值得关注的是，其通过 Red Hat Security Response 团队提供长期安全支持，并集成 SELinux 强制访问控制机制以增强系统隔离性。尽管漏洞数量较多，但官方响应迅速，持续推动补丁更新以保障企业环境稳定性。

上位製品 Red Hat: Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8 Red Hat build of Keycloak 26.4 Red Hat Enterprise Linux 6 Red Hat Hardened Images Ansible Red Hat Build of Keycloak Red Hat Enterprise Linux 9 keycloak Red Hat Directory Server 11 Red Hat Ansible Automation Platform 2 Red Hat build of Keycloak 26.2 Red Hat Enterprise Linux 7 glusterfs Red Hat Ansible Automation Platform 2.5 for RHEL 8 Red Hat OpenShift Virtualization 4 kernel Red Hat Quay 3 newlib Red Hat Satellite 6.16 for RHEL 8 Red Hat OpenShift AI (RHOAI) Red Hat Single Sign-On 7 Red Hat OpenShift Container Platform 4 undertow OpenShift samba ipa Red Hat Advanced Cluster Security 4.2 cfme cloudforms
CVE IDタイトルCVSS深刻度公開日
CVE-2026-18107 Criu: criu: container escape via rseq critical section hijack during checkpoint/restore — Red Hat Enterprise Linux 10CWE-269 7.8 High2026-07-28
CVE-2026-16313 Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export — Red Hat Enterprise Linux 10CWE-93 7.6 High2026-07-28
CVE-2026-18047 Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash — Red Hat Certificate System 10CWE-288 6.5 Medium2026-07-28
CVE-2026-49332 Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams — Red Hat OpenShift Container Platform 4CWE-436 8.5 High2026-07-28
CVE-2026-17072 Gstreamer1-plugins-good: gst-plugins-good: 4-byte heap over-read in gst_matroska_parse_flac_stream_headers when parsing flac codec data in matroska containers — Red Hat Enterprise Linux 10CWE-125 3.3 Low2026-07-28
CVE-2026-12383 Eda-server: externaleventstreamviewset trusts subject header without validation and leaks expected dn — Red Hat Ansible Automation Platform 2CWE-345 7.5 High2026-07-27
CVE-2026-66759 Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images — Red Hat Enterprise Linux 6CWE-125 7.1 High2026-07-27
CVE-2026-66758 Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images — Red Hat Enterprise Linux 6CWE-190 7.8 High2026-07-27
CVE-2026-66757 Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images — Red Hat Enterprise Linux 6CWE-190 5.5 Medium2026-07-27
CVE-2026-15003 Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service — Red Hat Hardened ImagesCWE-125 5.6 Medium2026-07-27
CVE-2026-17527 Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone — Red Hat OpenShift Virtualization 4CWE-639 7.7 High2026-07-27
CVE-2026-17523 Kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges — Red Hat Enterprise Linux 10CWE-825 7.8 High2026-07-27
CVE-2026-66338 Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked() — Red Hat Enterprise Linux 10CWE-444 5.4 Medium2026-07-24
CVE-2026-66337 Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until() — Red Hat Enterprise Linux 10CWE-125 6.5 Medium2026-07-24
CVE-2026-66339 Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels — Red Hat Enterprise Linux 10CWE-201 6.5 Medium2026-07-24
CVE-2026-17107 Cluster-proxy: cluster-proxy: impersonation header injection in service-proxy grants cluster-admin on every managed cluster — multicluster engine for Kubernetes 2.10CWE-441 8.5 High2026-07-24
CVE-2026-17039 Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path — Red Hat Certificate System 10CWE-863 3.1 Low2026-07-24
CVE-2026-17059 Keycloak-services: keycloak-services: information disclosure via role-users endpoint bypasses per-user view filter — Red Hat Build of KeycloakCWE-639 6.5 Medium2026-07-24
CVE-2026-17048 Keycloak-services: keycloak-services: vault-resolved rotated client secrets leaked via admin rest api — Red Hat Build of KeycloakCWE-200 5.5 Medium2026-07-24
CVE-2026-16743 Accountsservice: accountsservice: arbitrary file read via seticonfile for systemd-homed users — Red Hat Enterprise Linux 10CWE-269 5.5 Medium2026-07-24
CVE-2026-16730 Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup — Red Hat Enterprise Linux 10CWE-755 5.5 Medium2026-07-24
CVE-2026-16910 Quay: ssrf in red hat quay notification webhooks (slack/generic) — Red Hat OpenShift Update ServiceCWE-918 5.5 Medium2026-07-24
CVE-2026-12353 Rhcs: memory leak during https connection leads to denial of service — Red Hat Certificate System 9CWE-772 5.3 Medium2026-07-23
CVE-2026-64611 Libcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee1284normalizemakemodel() — Red Hat Enterprise Linux 10CWE-835 7.5 High2026-07-23
CVE-2026-16745 Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation — Red Hat OpenShift AI (RHOAI)CWE-346 8.8 High2026-07-23
CVE-2026-6390 Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling. — Red Hat Enterprise Linux 10CWE-134 6.8 Medium2026-07-23
CVE-2026-16560 389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdn — Red Hat Directory Server 11CWE-1220 5.3 Medium2026-07-22
CVE-2026-44191 Ansible-lightspeed: visual studio code ansible lightspeed extension: remote code execution via command injection in configuration settings — Red Hat Ansible Automation Platform 2CWE-78 7.8 High2026-07-22
CVE-2026-44187 Ansible-lightspeed: ansible lightspeed extension for visual studio code: information disclosure of google gemini api key — Red Hat Ansible Automation Platform 2CWE-256 3.3 Low2026-07-22
CVE-2026-44192 Ansible-lightspeed: ansible lightspeed mcp server: remote code execution and data exfiltration via path traversal — Red Hat Ansible Automation Platform 2CWE-22 6.6 Medium2026-07-22

本页汇总了 Red Hat 厂商截至目前公开的全部 975 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。