Red Hat Software Collections vulnerabilities

137 CVEs affecting Red Hat Software Collections, 5 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-5870, published 2023-12-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-40438: Apache HTTP Server-Side Request Forgery (SSRF), published 2021-09-16. Critical severity, CVSS 9.0. Actively exploited: in CISA KEV since 2021-12-01. EPSS: 100% chance of exploitation in the next 30 days. A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVE-2019-11043: PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability, published 2019-10-28. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 99.7% chance of exploitation in the next 30 days. In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space…
CVE-2019-5418: Rails Ruby on Rails Path Traversal Vulnerability, published 2019-03-27. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2025-07-07. EPSS: 98.5% chance of exploitation in the next 30 days. There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the…
CVE-2016-0752: Ruby on Rails Directory Traversal Vulnerability, published 2016-02-16. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 95.5% chance of exploitation in the next 30 days. Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read…
CVE-2019-0211: Apache HTTP Server Privilege Escalation Vulnerability, published 2019-04-08. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 65% chance of exploitation in the next 30 days. In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process…
CVE-2020-9490, published 2020-08-07. High severity, CVSS 7.5. EPSS: 88.8% chance of exploitation in the next 30 days. Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a…
CVE-2019-9515, published 2019-08-13. High severity, CVSS 7.5. EPSS: 87.4% chance of exploitation in the next 30 days. Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the…
CVE-2019-9514, published 2019-08-13. High severity, CVSS 7.5. EPSS: 82.8% chance of exploitation in the next 30 days. Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that…
CVE-2016-0742, published 2016-02-15. High severity, CVSS 7.5. EPSS: 82.4% chance of exploitation in the next 30 days. The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a crafted UDP DNS response.
CVE-2019-9513, published 2019-08-13. High severity, CVSS 7.5. EPSS: 81.6% chance of exploitation in the next 30 days. Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the…

Latest

CVE-2023-5870, published 2023-12-10. Medium severity, CVSS 4.4. EPSS: 2.6% chance of exploitation in the next 30 days. A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher.…
CVE-2023-5869, published 2023-12-10. High severity, CVSS 8.8. EPSS: 4.3% chance of exploitation in the next 30 days. A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an…
CVE-2023-5868, published 2023-12-10. Medium severity, CVSS 4.3. EPSS: 2.8% chance of exploitation in the next 30 days. A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments.…
CVE-2022-4900, published 2023-11-02. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.
CVE-2023-39417, published 2023-08-11. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an…
CVE-2023-2455, published 2023-06-09. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and a given query is…
CVE-2023-2454, published 2023-06-09. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute…
CVE-2023-0056, published 2023-03-23. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted…
CVE-2022-4904, published 2023-03-06. High severity, CVSS 8.6. EPSS: 1.2% chance of exploitation in the next 30 days. A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a…
CVE-2020-10735, published 2022-09-09. High severity, CVSS 7.5. EPSS: 4.5% chance of exploitation in the next 30 days. A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for…