Vulnerabilities of Red Hat Red Hat OpenShift Container Platform 4.15

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-9676	Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)	6.5 Medium	Oct 15, 2024
CVE-2024-9675	Buildah: buildah allows arbitrary directory mount	7.8 High	Oct 9, 2024
CVE-2024-9341	Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library	5.4 Medium	Oct 1, 2024
CVE-2024-45496	A flaw was found in OpenShift	9.9 Critical	Sep 16, 2024
CVE-2024-7387	A flaw was found in openshift/builder	9.1 Critical	Sep 16, 2024
CVE-2024-6508	An insufficient entropy vulnerability was found in the Openshift Console	8.0 High	Aug 21, 2024
CVE-2024-7409	Qemu: denial of service via improper synchronization in qemu nbd server during socket closure	7.5 High	Aug 5, 2024
CVE-2024-6409	Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9	7.0 High	Jul 8, 2024
CVE-2024-6387	A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd)	8.1 High	Jul 1, 2024
CVE-2024-5154	Cri-o: malicious container can create symlink on host	8.1 High	Jun 12, 2024
CVE-2024-5037	A flaw was found in OpenShift's Telemeter	7.5 High	Jun 5, 2024
CVE-2024-3727	Containers/image: digest type does not guarantee valid type	8.3 High	May 9, 2024
CVE-2024-4369	An information disclosure flaw was found in OpenShift's internal image registry operator	6.8 Medium	Apr 30, 2024
CVE-2024-3154	A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation	7.2 High	Apr 26, 2024
CVE-2024-1139	Cluster-monitoring-operator: credentials leak	7.7 High	Apr 25, 2024
CVE-2024-0874	A flaw was found in coredns	5.3 Medium	Apr 25, 2024
CVE-2024-1394	Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads	7.5 High	Mar 21, 2024
CVE-2024-1753	Buildah: buildah: container escape via improper bind mount validation	8.6 High	Mar 18, 2024
CVE-2024-1725	A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP)	6.5 Medium	Mar 7, 2024
CVE-2024-21626	runc is a CLI tool for spawning and running containers on Linux according to the OCI specification	8.6 High	Jan 31, 2024

Other Red Hat products