Known vulnerabilities in Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-4574	Crossbeam-channel: crossbeam-channel vulnerable to double free on drop	6.5 Medium	May 13, 2025
CVE-2025-4432	Ring: some aes functions may panic when overflow checking is enabled in ring	5.3 Medium	May 9, 2025
CVE-2025-4382	Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm	5.9 Medium	May 9, 2025
CVE-2025-3576	Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions	5.9 Medium	Apr 15, 2025
CVE-2025-3416	A flaw was found in OpenSSL's handling of the properties argument in certain functions	3.7 Low	Apr 8, 2025
CVE-2024-7631	Openshift-console: openshift console: path traversal	4.3 Medium	Mar 19, 2025
CVE-2024-8176	Libexpat: expat: improper restriction of xml entity expansion depth in libexpat	7.5 High	Mar 14, 2025
CVE-2025-0686	Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat	6.4 Medium	Mar 3, 2025
CVE-2025-0685	Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data	6.4 Medium	Mar 3, 2025
CVE-2025-0684	Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data	6.4 Medium	Mar 3, 2025
CVE-2025-0678	Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data	7.8 High	Mar 3, 2025
CVE-2024-45782	Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)	7.8 High	Mar 3, 2025
CVE-2024-45778	Grub2: fs/bfs: integer overflow in the bfs parser.	4.1 Medium	Mar 3, 2025
CVE-2024-45779	Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser	6.0 Medium	Mar 3, 2025
CVE-2024-45780	Grub2: fs/tar: integer overflow causes heap oob write	6.7 Medium	Mar 3, 2025
CVE-2025-0689	Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution	7.8 High	Mar 3, 2025
CVE-2025-1125	Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write	7.8 High	Mar 3, 2025
CVE-2025-26466	Openssh: denial-of-service in openssh	5.9 Medium	Feb 28, 2025
CVE-2025-0690	Grub2: read: integer overflow may lead to out-of-bounds write	6.1 Medium	Feb 24, 2025
CVE-2025-0677	Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks	6.4 Medium	Feb 19, 2025
CVE-2025-0624	Grub2: net: out-of-bounds write in grub_net_search_config_file()	7.6 High	Feb 19, 2025
CVE-2025-1118	Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled	4.4 Medium	Feb 19, 2025
CVE-2024-45777	Grub2: grub-core/gettext: integer overflow leads to heap oob write.	6.7 Medium	Feb 19, 2025
CVE-2025-0622	Grub2: command/gpg: use-after-free due to hooks not being removed on module unload	6.4 Medium	Feb 18, 2025
CVE-2024-45783	Grub2: fs/hfs+: refcount can be decremented twice	4.4 Medium	Feb 18, 2025

Other Red Hat products