Red Hat Developer Tools vulnerabilities

15 CVEs affecting Red Hat Developer Tools, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-3669, published 2022-08-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-9514, published 2019-08-13. High severity, CVSS 7.5. EPSS: 82.8% chance of exploitation in the next 30 days. Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that…
CVE-2017-15041, published 2017-10-05. Critical severity, CVSS 9.8. EPSS: 9.3% chance of exploitation in the next 30 days. Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1 points to a Subversion repository but…
CVE-2019-16276, published 2019-09-30. High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days. Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.
CVE-2019-17596, published 2019-10-24. High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days. Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client…
CVE-2022-1227, published 2022-04-29. High severity, CVSS 8.8. EPSS: 4.2% chance of exploitation in the next 30 days. A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability…
CVE-2018-16871, published 2019-07-30. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null…
CVE-2019-9741, published 2019-03-13. Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days. An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the second argument to http.NewRequest with \r\n followed by…
CVE-2022-27649, published 2022-04-04. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine), where containers were started incorrectly…
CVE-2022-1011, published 2022-03-18. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem,…
CVE-2021-3744, published 2022-03-04. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This…

Latest

CVE-2021-3669, published 2022-08-26. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS.
CVE-2021-3697, published 2022-07-06. High severity, CVSS 7.0. EPSS: 0.5% chance of exploitation in the next 30 days. A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some…
CVE-2021-3696, published 2022-07-06. Medium severity, CVSS 4.5. EPSS: 0.5% chance of exploitation in the next 30 days. A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact…
CVE-2021-3695, published 2022-07-06. Medium severity, CVSS 4.5. EPSS: 0.5% chance of exploitation in the next 30 days. A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution…
CVE-2022-0330, published 2022-03-25. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system…