Veille CVE

Recherche « Red Hat OpenShift distributed tracing 3.10.2 »

3 CVE

Critique 0 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Red Hat OpenShift distributed tracing 3.10.2 » ✕
  1. CVE-2026-54369 7.1 Élevée

    acl project acl · Red Hat Enterprise Linux 10 · Red Hat Enterprise Linux 10.0 Extended Update Support · Red Hat Enterprise Linux 8

    acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.

  2. CVE-2026-43869 7.3 Élevée

    Apache Software Foundation Apache Thrift · Red Hat Cryostat 4 on RHEL 9 · Red Hat Build of Apache Camel 3.33 for Quarkus 3.33.2.SP1 · Red Hat Multicluster Global Hub 1.3.4

    Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

  3. CVE-2025-48431 7.5 Élevée

    Apache Software Foundation Apache Thrift · Red Hat Cryostat 4 on RHEL 9 · Red Hat Advanced Cluster Management for Kubernetes 2.14 · Red Hat Advanced Cluster Management for Kubernetes 2.15

    Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue. Description: Specially crafted requests can crash an c_glib-based Thrift server with a clean but fatal "free(): invalid pointer" error message.