Aller au contenu

Vulnérabilités de Red Hat Red Hat OpenShift Container Platform 4.17

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-5222 Icu: stack buffer overflow in the srbroot::addtag function 7.0 Élevée 27 mai 2025
CVE-2025-0624 Grub2: net: out-of-bounds write in grub_net_search_config_file() 7.6 Élevée 19 févr. 2025
CVE-2025-0750 A vulnerability was found in CRI-O 6.6 Moyenne 28 janv. 2025
CVE-2024-11218 Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile 8.6 Élevée 22 janv. 2025
CVE-2024-12085 A flaw was found in rsync which could be triggered when rsync compares file checksums 7.5 Élevée 14 janv. 2025
CVE-2024-45497 A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume… 7.6 Élevée 31 déc. 2024
CVE-2024-8676 Cri-o: checkpoint restore can be triggered from different namespaces 7.4 Élevée 26 nov. 2024
CVE-2024-6538 A flaw was found in OpenShift Console 5.3 Moyenne 25 nov. 2024
CVE-2024-10963 Pam: improper hostname interpretation in pam_access leads to access control bypass 7.4 Élevée 7 nov. 2024
CVE-2024-50312 A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query 5.3 Moyenne 22 oct. 2024
CVE-2024-9676 Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) 6.5 Moyenne 15 oct. 2024
CVE-2024-9675 Buildah: buildah allows arbitrary directory mount 7.8 Élevée 9 oct. 2024
CVE-2024-9341 Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library 5.4 Moyenne 1 oct. 2024
CVE-2024-45496 A flaw was found in OpenShift 9.9 Critique 16 sept. 2024
CVE-2024-7387 A flaw was found in openshift/builder 9.1 Critique 16 sept. 2024
CVE-2024-6508 An insufficient entropy vulnerability was found in the Openshift Console 8.0 Élevée 21 août 2024
CVE-2024-7409 Qemu: denial of service via improper synchronization in qemu nbd server during socket closure 7.5 Élevée 5 août 2024
CVE-2024-7128 A flaw was found in the OpenShift console 5.3 Moyenne 26 juil. 2024
CVE-2024-5154 Cri-o: malicious container can create symlink on host 8.1 Élevée 12 juin 2024
CVE-2024-3727 Containers/image: digest type does not guarantee valid type 8.3 Élevée 9 mai 2024
CVE-2024-21626 runc is a CLI tool for spawning and running containers on Linux according to the OCI specification 8.6 Élevée 31 janv. 2024

Autres produits Red Hat