Aller au contenu

Vulnérabilités de Red Hat Red Hat OpenShift Container Platform 4.18

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Moyenne 2 juin 2026
CVE-2026-1784 The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy 8.8 Élevée 2 juin 2026
CVE-2026-46243 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego… 7.1 Élevée 1 juin 2026
CVE-2026-42965 Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation 7.7 Élevée 29 mai 2026
CVE-2026-46579 A flaw was found in the OpenShift Router 7.4 Élevée 29 mai 2026
CVE-2026-4408 Samba: remote code execution in samr 9.0 Critique 28 mai 2026
CVE-2026-1933 Samba: missing access check on reparse point operations 7.1 Élevée 27 mai 2026
CVE-2026-2340 Samba: vfs_worm does not block directory modification 6.5 Moyenne 27 mai 2026
CVE-2026-3012 Samba: group policy certificate enrollment uses http:// without validation 8.0 Élevée 27 mai 2026
CVE-2026-42013 Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name 8.2 Élevée 26 mai 2026
CVE-2026-5260 Gnutls: gnutls: information disclosure via heap overread in rsa key exchange 8.2 Élevée 26 mai 2026
CVE-2026-48864 A flaw was found in libsolv 7.8 Élevée 26 mai 2026
CVE-2026-46300 Exploitée Linux Kernel Missing Initialization of a Variable Vulnerability 7.8 Élevée 23 mai 2026
CVE-2026-43503 In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through… 8.8 Élevée 23 mai 2026
CVE-2026-9277 shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()` 8.1 Élevée 22 mai 2026
CVE-2026-42009 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 7.5 Élevée 18 mai 2026
CVE-2026-44293 protobufjs compiles protobuf definitions into JavaScript (JS) functions 7.7 Élevée 13 mai 2026
CVE-2026-43329 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum… 7.8 Élevée 8 mai 2026
CVE-2026-43284 In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb… 8.8 Élevée 8 mai 2026
CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… 7.5 Élevée 7 mai 2026
CVE-2026-39820 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion… 7.5 Élevée 7 mai 2026
CVE-2026-42499 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322 7.5 Élevée 7 mai 2026
CVE-2026-42011 Gnutls: gnutls: security bypass due to incorrect name constraint handling 7.4 Élevée 7 mai 2026
CVE-2026-42010 Gnutls: gnutls: authentication bypass via nul character in username 7.1 Élevée 7 mai 2026
CVE-2026-43112 In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in… 8.8 Élevée 6 mai 2026

Autres produits Red Hat