Security
فارسی
All products

Red Hat Enterprise Linux 9/shim

Red Hat · Package
51 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
openssl-src subject to Timing Oracle in RSA DecryptionCVE-2022-4304 · GHSA-P52G-CM5J-MJV4Version ranges need review. openssl-srcRed Hat Enterprise Linux 7/openssl Rust / CargoRed Hat Medium Fix reported
openssl-src vulnerable to Use-after-free following `BIO_new_NDEF`CVE-2023-0215 · GHSA-R7JW-WP68-3XCHVersion ranges need review. openssl-srcRed Hat Enterprise Linux 6/openssl Rust / CargoRed Hat High Fix reported
openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()CVE-2026-45447 Multicluster Engine for Kubernetes/multicluster-engine/hive-rhel9Multicluster Engine for Kubernetes/multicluster-engine/hypershift-rhel9-operator Red Hat High No fix reported
openssl: Denial of service by excessive resource usage in verifying X509 policy constraintsCVE-2023-0464 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Low No fix reported
openssl: Certificate policy check not enabledCVE-2023-0466 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Medium No fix reported
openssl: Invalid certificate policies in leaf certificates are silently ignoredCVE-2023-0465 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Low No fix reported
openssl: Possible DoS translating ASN.1 object identifiersCVE-2023-2650 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Medium No fix reported
openssl: Low-level invalid GF(2^m) parameters lead to OOB memory accessCVE-2024-9143 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: Timing side-channel in ECDSA signature computationCVE-2024-13176 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verificationCVE-2026-22796 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processingCVE-2026-22795 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service via malformed TimeStamp ResponseCVE-2025-69420 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processingCVE-2025-69421 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption callsCVE-2025-69418 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filterCVE-2025-68160 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncationCVE-2025-15469 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handlingCVE-2025-15468 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported
openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 fileCVE-2025-11187 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Medium No fix reported
openssl: openssl: Denial of Service due to out-of-bounds read in AES-CFB128CVE-2026-28386 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Medium No fix reported
openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authenticationCVE-2026-28387 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/openssl Red Hat Low No fix reported