Vulnerabilidades do Red Hat Codeready Linux Builder For Ibm Z Systems
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Red Hat Codeready Linux Builder For Ibm Z Systems: 5 registro(s), com versões afetadas e correções.cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems
CVE-2025-13601
Alta · 7.7
CWE-190 26/11/2025
Glib: integer overflow in in g_escape_uri_string()
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
CVE-2023-4911
Alta · 7.8
KEV Urgente · 76 Exploit público CWE-787 03/10/2023
GNU C Library Buffer Overflow Vulnerability
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
CVE-2023-4806
Média · 5.9
CWE-416 18/09/2023
Glibc: potential use-after-free in getaddrinfo()
A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.
CVE-2021-3733
Média · 6.5
CWE-400 10/03/2022
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.
CVE-2021-3737
Alta · 7.5
CWE-400 04/03/2022
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.