← All credits

Red Hat would like to thank AISLE Research for reporting this issue.

14 vulnerability records and advisories credit this contributor.

Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service

Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read

Libssh: libssh: denial of service via automatic certificate authentication loop

Kernel: heap out-of-bounds write in the linux kernel rpc-over-rdma server reply path...

Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution

Dracut: dracut: root code execution via dhcp options command injection

Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)

Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path

Libssh: libssh: denial of service via sftp responses with unknown request ids

Libssh: libssh: authentication bypass via missing gssapi principal check