Vulnérabilités de Red Hat Red Hat OpenShift Container Platform 4

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2025-61664	Grub2: missing unregister call for normal_exit command may lead to use-after-free	4.9 Moyenne	18 nov. 2025
CVE-2025-61663	Grub2: missing unregister call for normal commands may lead to use-after-free	4.9 Moyenne	18 nov. 2025
CVE-2025-61662	A Use-After-Free vulnerability has been discovered in GRUB's gettext module	7.8 Élevée	18 nov. 2025
CVE-2025-61661	Grub2: grub2: out-of-bounds write via malicious usb device	4.8 Moyenne	18 nov. 2025
CVE-2025-54771	Grub2: use-after-free in grub_file_close()	4.9 Moyenne	18 nov. 2025
CVE-2025-10230	Samba: command injection in wins server hook script	10.0 Critique	7 nov. 2025
CVE-2025-12464	Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode	6.2 Moyenne	31 oct. 2025
CVE-2025-11568	Luksmeta: data corruption when handling luks1 partitions with luksmeta	4.4 Moyenne	15 oct. 2025
CVE-2025-9640	A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into…	4.3 Moyenne	15 oct. 2025
CVE-2025-11731	A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT elements during stylesheet…	3.1 Faible	14 oct. 2025
CVE-2025-11561	Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems	8.8 Élevée	9 oct. 2025
CVE-2025-11234	Qemu-kvm: vnc websocket handshake use-after-free	7.5 Élevée	3 oct. 2025
CVE-2025-10911	Libxslt: use-after-free with key data stored cross-rvt	5.5 Moyenne	25 sept. 2025
CVE-2025-4953	Podman: build context bind mount	7.4 Élevée	16 sept. 2025
CVE-2025-8277	A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX…	3.1 Faible	9 sept. 2025
CVE-2025-9566	There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the…	8.1 Élevée	5 sept. 2025
CVE-2025-4877	Libssh: write beyond bounds in binary to base64 conversion functions	4.5 Moyenne	20 août 2025
CVE-2025-4437	There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser…	5.7 Moyenne	20 août 2025
CVE-2025-7195	Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used…	6.4 Moyenne	7 août 2025
CVE-2025-8556	A flaw was found in CIRCL's implementation of the FourQ elliptic curve	3.7 Faible	6 août 2025
CVE-2025-8283	A vulnerability was found in the netavark package, a network stack for containers used with Podman	3.7 Faible	28 juil. 2025
CVE-2025-5449	Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service	6.5 Moyenne	25 juil. 2025
CVE-2025-8114	Libssh: null pointer dereference in libssh kex session id calculation	4.7 Moyenne	24 juil. 2025
CVE-2025-4878	A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the…	3.6 Faible	22 juil. 2025
CVE-2025-7519	Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write	6.7 Moyenne	14 juil. 2025

Autres produits Red Hat