What’s Vulnerable › Products
RedHat Codeready Linux Builder vulnerabilities
45 known vulnerabilities, 4 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Check whether your RedHat Codeready Linux Builder version is affected
Exploited RedHat Codeready Linux Builder vulnerabilities
- CVE-2022-0492 — Linux Kernel Improper Authentication Vulnerability
- CVE-2023-4911 — GNU C Library Buffer Overflow Vulnerability
- CVE-2019-8720 — WebKitGTK Memory Corruption Vulnerability
- CVE-2022-0847 — Linux Kernel Privilege Escalation Vulnerability
Latest RedHat Codeready Linux Builder vulnerabilities
- CVE-2026-39979 — jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers (CVSS 6.5)
- CVE-2026-4775 — Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing (CVSS 7.8)
- CVE-2025-13601 — Glib: integer overflow in in g_escape_uri_string() (CVSS 7.7)
- CVE-2025-3155 — Yelp: arbitrary file read (CVSS 7.4)
- CVE-2025-2784 — Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content (CVSS 6.5)
- CVE-2023-3758 — Sssd: race condition during authorization leads to gpo policies functioning inconsistently (CVSS 7.1)
- CVE-2024-1488 — Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation (CVSS 7.3)
- CVE-2023-6915 — Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c (CVSS 5.5)
- CVE-2023-5455 — Ipa: invalid csrf protection (CVSS 6.5)
- CVE-2024-0193 — Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation (CVSS 6.7)
- CVE-2023-4641 — Shadow-utils: possible password leak during passwd(1) change (CVSS 5.5)
- CVE-2023-5633 — Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling (CVSS 7.8)
- CVE-2023-4911 — GNU C Library Buffer Overflow Vulnerability (CVSS 7.8) — exploited
- CVE-2023-4732 — Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h (CVSS 4.7)
- CVE-2023-4042 — Ghostscript: incomplete fix for cve-2020-16305 (CVSS 5.5)
- CVE-2023-0179 — (CVSS 7.8)
- CVE-2019-8720 — WebKitGTK Memory Corruption Vulnerability (CVSS 8.8) — exploited
- CVE-2021-3669 — (CVSS 5.5)
- CVE-2021-3975 — (CVSS 6.5)
- CVE-2021-31566 — (CVSS 7.8)
- CVE-2021-23177 — (CVSS 7.8)
- CVE-2021-3659 — (CVSS 5.5)
- CVE-2021-3697 — (CVSS 7.0)
- CVE-2021-3696 — (CVSS 4.5)
- CVE-2021-3695 — (CVSS 4.5)