Vulnérabilités connues pour Red Hat OpenShift Container Platform 4

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 Élevée	7 mai 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 Élevée	7 mai 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 Élevée	7 mai 2026
CVE-2026-42011	Gnutls: gnutls: security bypass due to incorrect name constraint handling	7.4 Élevée	7 mai 2026
CVE-2026-42010	Gnutls: gnutls: authentication bypass via nul character in username	7.1 Élevée	7 mai 2026
CVE-2026-41139	Math.js is an extensive math library for JavaScript and Node.js	8.8 Élevée	7 mai 2026
CVE-2026-41675	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	8.7 Élevée	7 mai 2026
CVE-2026-41673	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	8.7 Élevée	7 mai 2026
CVE-2026-41672	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	8.7 Élevée	7 mai 2026
CVE-2026-43133	In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE…	7.9 Élevée	6 mai 2026
CVE-2026-43114	In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo_avx2: don't return…	9.4 Critique	6 mai 2026
CVE-2026-43112	In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in…	8.8 Élevée	6 mai 2026
CVE-2026-35579	CoreDNS is a DNS server written in Go	8.2 Élevée	5 mai 2026
CVE-2026-34956	Openvswitch: open vswitch: denial of service via malformed ftp epasv command	5.9 Moyenne	5 mai 2026
CVE-2026-6322	fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them…	7.5 Élevée	5 mai 2026
CVE-2026-43869	Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift	Non notée	5 mai 2026
CVE-2026-42997	An issue was discovered in idrac in OpenStack Ironic before 35.0.1	7.7 Élevée	5 mai 2026
CVE-2026-6321	fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize()…	7.5 Élevée	4 mai 2026
CVE-2026-42154	Prometheus is an open-source monitoring system and time series database	7.5 Élevée	4 mai 2026
CVE-2026-42151	Prometheus is an open-source monitoring system and time series database	7.5 Élevée	4 mai 2026
CVE-2026-33846	Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly	7.5 Élevée	4 mai 2026
CVE-2026-7598	A security vulnerability has been detected in libssh2 up to 1.11.1	6.9 Moyenne	1 mai 2026
CVE-2026-43003	An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0	8.0 Élevée	1 mai 2026
CVE-2026-33845	Gnutls: gnutls: denial of service via dtls zero-length fragment	7.5 Élevée	30 avr. 2026
CVE-2026-3832	Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response	3.7 Faible	30 avr. 2026

Autres produits Red Hat