Vulnérabilités de Red Hat Red Hat OpenShift Container Platform 4.14

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2024-6538	A flaw was found in OpenShift Console	5.3 Moyenne	25 nov. 2024
CVE-2024-9676	Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)	6.5 Moyenne	15 oct. 2024
CVE-2024-9675	Buildah: buildah allows arbitrary directory mount	7.8 Élevée	9 oct. 2024
CVE-2024-9341	Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library	5.4 Moyenne	1 oct. 2024
CVE-2024-45496	A flaw was found in OpenShift	9.9 Critique	16 sept. 2024
CVE-2024-7387	A flaw was found in openshift/builder	9.1 Critique	16 sept. 2024
CVE-2024-6508	An insufficient entropy vulnerability was found in the Openshift Console	8.0 Élevée	21 août 2024
CVE-2024-7409	Qemu: denial of service via improper synchronization in qemu nbd server during socket closure	7.5 Élevée	5 août 2024
CVE-2024-6409	Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9	7.0 Élevée	8 juil. 2024
CVE-2024-6387	A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd)	8.1 Élevée	1 juil. 2024
CVE-2024-5154	Cri-o: malicious container can create symlink on host	8.1 Élevée	12 juin 2024
CVE-2024-5037	A flaw was found in OpenShift's Telemeter	7.5 Élevée	5 juin 2024
CVE-2024-3727	Containers/image: digest type does not guarantee valid type	8.3 Élevée	9 mai 2024
CVE-2024-4369	An information disclosure flaw was found in OpenShift's internal image registry operator	6.8 Moyenne	30 avr. 2024
CVE-2024-3154	A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation	7.2 Élevée	26 avr. 2024
CVE-2024-1139	Cluster-monitoring-operator: credentials leak	7.7 Élevée	25 avr. 2024
CVE-2024-0874	A flaw was found in coredns	5.3 Moyenne	25 avr. 2024
CVE-2024-1394	Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads	7.5 Élevée	21 mars 2024
CVE-2024-1753	Buildah: buildah: container escape via improper bind mount validation	8.6 Élevée	18 mars 2024
CVE-2024-1725	A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP)	6.5 Moyenne	7 mars 2024
CVE-2024-21626	runc is a CLI tool for spawning and running containers on Linux according to the OCI specification	8.6 Élevée	31 janv. 2024
CVE-2023-6476	A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined	6.5 Moyenne	9 janv. 2024
CVE-2023-5408	A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift	7.2 Élevée	2 nov. 2023
CVE-2023-1260	An authentication bypass vulnerability was discovered in kube-apiserver	8.0 Élevée	24 sept. 2023

Autres produits Red Hat