Red Hat Codeready Linux Builder vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Red Hat Codeready Linux Builder: 7 record(s), with affected versions and fixes.cpe:2.3:a:redhat:codeready_linux_builder
CVE-2025-13601
High · 7.7
CWE-190 Nov 26, 2025
Glib: integer overflow in in g_escape_uri_string()
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
CVE-2023-4911
High · 7.8
KEV Urgent · 76 Public exploit CWE-787 Oct 3, 2023
GNU C Library Buffer Overflow Vulnerability
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
CVE-2019-8720
High · 8.8
KEV High · 52 CWE-119 Mar 6, 2023
WebKitGTK Memory Corruption Vulnerability
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.
CVE-2022-0847
High · 7.8
KEV Urgent · 86 Public exploit CWE-665 Mar 10, 2022
Linux Kernel Privilege Escalation Vulnerability
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
CVE-2021-3733
Medium · 6.5
CWE-400 Mar 10, 2022
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.
CVE-2021-3737
High · 7.5
CWE-400 Mar 4, 2022
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.
CVE-2022-0492
High · 7.8
KEV Urgent · 73 Public exploit CWE-862 Mar 3, 2022
Linux Kernel Improper Authentication Vulnerability
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.