Red Hat Insights proxy 1.5 vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Latest Red Hat Insights proxy 1.5 vulnerabilities

CVE-2026-4111 — Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive (CVSS 7.5)
CVE-2025-14831 — Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification (CVSS 5.3)
CVE-2025-9820 — Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function (CVSS 4.0)
CVE-2025-14104 — Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames (CVSS 6.1)
CVE-2025-8941 — Linux-pam: incomplete fix for cve-2025-6020 (CVSS 7.8)
CVE-2025-6395 — Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite() (CVSS 6.5)
CVE-2025-7425 — Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr (CVSS 7.8)
CVE-2025-6020 — Linux-pam: linux-pam directory traversal (CVSS 7.8)
CVE-2025-49796 — Libxml: type confusion leads to denial of service (dos) (CVSS 9.1)
CVE-2025-49794 — Libxml: heap use after free (uaf) leads to denial of service (dos) (CVSS 9.1)
CVE-2025-6170 — Libxml2: stack buffer overflow in xmllint interactive shell command handling (CVSS 2.5)
CVE-2025-5278 — Coreutils: heap buffer under-read in gnu coreutils sort via key specification (CVSS 4.4)
CVE-2025-4373 — Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar (CVSS 4.8)