Vulnerabilities of Red Hat Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-11217	A vulnerability was found in the OAuth-server	4.9 Medium	Nov 15, 2024
CVE-2024-10963	Pam: improper hostname interpretation in pam_access leads to access control bypass	7.4 High	Nov 7, 2024
CVE-2024-9676	Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)	6.5 Medium	Oct 15, 2024
CVE-2024-9675	Buildah: buildah allows arbitrary directory mount	7.8 High	Oct 9, 2024
CVE-2024-9407	Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction	4.7 Medium	Oct 1, 2024
CVE-2024-9341	Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library	5.4 Medium	Oct 1, 2024
CVE-2024-9355	Golang-fips: golang fips zeroed buffer	6.5 Medium	Oct 1, 2024
CVE-2024-8418	Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service	7.5 High	Sep 4, 2024
CVE-2024-43168	DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software…	4.8 Medium	Aug 8, 2024
CVE-2024-43167	DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software…	2.8 Low	Aug 8, 2024
CVE-2024-7409	Qemu: denial of service via improper synchronization in qemu nbd server during socket closure	7.5 High	Aug 5, 2024
CVE-2024-3056	Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack	7.7 High	Aug 2, 2024
CVE-2024-7079	A flaw was found in the Openshift console	6.5 Medium	Jul 24, 2024
CVE-2024-6501	A flaw was found in NetworkManager	3.1 Low	Jul 9, 2024
CVE-2024-6387	A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd)	8.1 High	Jul 1, 2024
CVE-2024-3727	Containers/image: digest type does not guarantee valid type	8.3 High	May 9, 2024
CVE-2024-2905	A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds…	6.2 Medium	Apr 25, 2024
CVE-2023-6596	An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift…	7.5 High	Apr 25, 2024
CVE-2024-1394	Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads	7.5 High	Mar 21, 2024
CVE-2024-2182	A flaw was found in the Open Virtual Network (OVN)	6.5 Medium	Mar 12, 2024
CVE-2024-1485	A flaw was found in the decompression function of registry-support	8.0 High	Feb 13, 2024
CVE-2024-21626	runc is a CLI tool for spawning and running containers on Linux according to the OCI specification	8.6 High	Jan 31, 2024
CVE-2023-5366	A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass…	7.1 High	Oct 6, 2023
CVE-2022-3248	A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions	4.4 Medium	Oct 5, 2023
CVE-2022-4145	A content spoofing flaw was found in OpenShift's OAuth endpoint	4.3 Medium	Oct 5, 2023

Other Red Hat products