Known vulnerabilities in Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-45781	Grub2: fs/ufs: oob write in the heap	6.7 Medium	Feb 18, 2025
CVE-2024-45776	Grub2: grub-core/gettext: integer overflow leads to heap oob write and read.	6.7 Medium	Feb 18, 2025
CVE-2024-45775	Grub2: commands/extcmd: missing check for failed allocation	5.2 Medium	Feb 18, 2025
CVE-2025-26465	Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled	6.8 Medium	Feb 18, 2025
CVE-2024-45774	Grub2: reader/jpeg: heap oob write during jpeg parsing	6.7 Medium	Feb 18, 2025
CVE-2024-12243	Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos	5.3 Medium	Feb 10, 2025
CVE-2024-12133	Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos	5.3 Medium	Feb 10, 2025
CVE-2024-11831	Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript	5.4 Medium	Feb 10, 2025
CVE-2025-0750	A vulnerability was found in CRI-O	6.6 Medium	Jan 28, 2025
CVE-2025-0650	A flaw was found in the Open Virtual Network (OVN)	8.1 High	Jan 23, 2025
CVE-2024-11218	Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile	8.6 High	Jan 22, 2025
CVE-2024-12084	Rsync: heap buffer overflow in rsync due to improper checksum length handling	9.8 Critical	Jan 15, 2025
CVE-2024-12087	A path traversal vulnerability exists in rsync	6.5 Medium	Jan 14, 2025
CVE-2024-12747	Rsync: race condition in rsync handling symbolic links	5.6 Medium	Jan 14, 2025
CVE-2024-12088	Rsync: --safe-links option bypass leads to path traversal	6.5 Medium	Jan 14, 2025
CVE-2024-12086	Rsync: rsync server leaks arbitrary client files	6.1 Medium	Jan 14, 2025
CVE-2024-12085	A flaw was found in rsync which could be triggered when rsync compares file checksums	7.5 High	Jan 14, 2025
CVE-2024-45497	A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume…	7.6 High	Dec 31, 2024
CVE-2024-11614	An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature	7.4 High	Dec 18, 2024
CVE-2024-12401	A flaw was found in the cert-manager package	4.4 Medium	Dec 12, 2024
CVE-2024-8676	Cri-o: checkpoint restore can be triggered from different namespaces	7.4 High	Nov 26, 2024
CVE-2024-52616	Avahi: avahi wide-area dns predictable transaction ids	5.3 Medium	Nov 21, 2024
CVE-2024-52615	Avahi: avahi wide-area dns uses constant source port	5.3 Medium	Nov 21, 2024
CVE-2024-0793	A flaw was found in kube-controller-manager	7.7 High	Nov 17, 2024
CVE-2020-25720	Samba: check attribute access rights for ldap adds of computers	7.5 High	Nov 17, 2024

Other Red Hat products