Red Hat Red Hat OpenShift AI 3.0

13 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concernsMEDIUM 6.80.3 %
CVE-2026-96512Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorizationHIGH 7.80.3 %
CVE-2026-74860Libxml2: double-free/uaf in libxml2 python bindingsHIGH 8.50.7 %
CVE-2026-16118Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.cHIGH 7.10.2 %
CVE-2026-58016Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"CRITICAL 9.10.6 %
CVE-2026-14164Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()HIGH 7.50.8 %
CVE-2026-12912Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff imageHIGH 7.30.4 %
CVE-2026-55655Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versionsMEDIUM 6.10.1 %
CVE-2026-55653Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to clien…MEDIUM 6.50.5 %
CVE-2026-48864Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page dataHIGH 7.80.2 %
CVE-2025-13327corrigé en 1793041981Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentialsMEDIUM 6.30.2 %
CVE-2025-12103corrigé en v3.0.0-1762251316Openshift-ai: trusty ai grants all authenticated users to list pods in any namespaceMEDIUM 5.00.3 %
CVE-2023-52355Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oomHIGH 7.51.8 %