Service Interconnect 1 for RHEL 9 vulnerabilities

2 known vulnerabilities in Service Interconnect 1 for RHEL 9 from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  OpenSSL: Out-of-bounds Write

  CVE-2025-15467Jan 27, 2026OpenSSLEPSS 74.8%

  Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote co

• 7.1 High severity

  Service Interconnect 1 for RHEL 9: Authentication Bypass by Primary Weakness

  CVE-2024-12582Dec 24, 2024Red Hat

  A flaw was found in the skupper console, a read-only interface that renders cluster network, traffic details, and metrics for a network application that a user sets up across a hybrid multi-cloud environment. When the default authentication method is used, a r