Red Hat Discovery 1.14 vulnerabilities

4 CVEs affecting Red Hat Discovery 1.14, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-8176, published 2025-03-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-8176, published 2025-03-14. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references,…
CVE-2024-12243, published 2025-02-10. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time,…
CVE-2024-12133, published 2025-02-10. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down…
CVE-2024-12747, published 2025-01-14. Medium severity, CVSS 5.6. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an…