Threats Tagged 'cve-2025-14831'

Multiple security vulnerabilities affecting RHEL-8 based Middleware Containers container images have been addressed by Red Hat in updated container images. These include high severity issues such as a stack-based buffer overflow in GnuTLS (CVE-2025-9820), denial of service vulnerabilities, information disclosure, and arbitrary code execution in various components including libarchive and Python. The advisory covers a range of CVEs fixed by backported patches in updated container images. Users are advised to upgrade to the updated images and rebuild dependent container images to mitigate these issues.

Red Hat Update Infrastructure (RHUI) 5. 1 container images have been updated to the latest versions of RHUI RPM packages and base images (ubi9 or ubi9-init). This security advisory addresses multiple vulnerabilities identified by CVE-2025-9086 and 31 additional CVEs affecting RHUI components. The advisory is classified as high severity but does not provide specific technical details or exploit information. No known exploits in the wild have been reported. The vendor advisory does not explicitly state that a patch or official fix is available, nor does it provide direct remediation instructions beyond recommending deployment of updated container images using the rhui-installer utility.

A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).