7.2
Élevée
CVE-2024-3154 A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation
Description
A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an arbitrary annotation may perform an arbitrary action on the host system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat OpenShift Container Platform 4.12 | Versions non publiées | |
| Red Hat OpenShift Container Platform 4.13 | Versions non publiées | |
| Red Hat OpenShift Container Platform 4.14 | Versions non publiées | |
| Red Hat OpenShift Container Platform 4.15 | Versions non publiées | |
| Red Hat OpenShift Container Platform 3.11 | Versions non publiées |
Références
- RHSA-2024:2669 access.redhat.com
- RHSA-2024:2672 access.redhat.com
- RHSA-2024:2784 access.redhat.com
- RHSA-2024:3496 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2272532 bugzilla.redhat.com
- github.com github.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat OpenShift Container Platform 4.12
Les 113 CVE de Red Hat OpenShift Container Platform 4.12 →
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Moyenne
CVE-2026-75888
A flaw was found in the OpenShift console
7.7
Élevée
CVE-2026-93017
The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core…
7.7
Élevée
CVE-2026-83589
A flaw was found in oauth-proxy
6.1
Moyenne