Aller au contenu

Vulnérabilités de Red Hat Red Hat OpenShift Container Platform 4

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-45781 Grub2: fs/ufs: oob write in the heap 6.7 Moyenne 18 févr. 2025
CVE-2024-45776 Grub2: grub-core/gettext: integer overflow leads to heap oob write and read. 6.7 Moyenne 18 févr. 2025
CVE-2024-45775 Grub2: commands/extcmd: missing check for failed allocation 5.2 Moyenne 18 févr. 2025
CVE-2025-26465 Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled 6.8 Moyenne 18 févr. 2025
CVE-2024-45774 Grub2: reader/jpeg: heap oob write during jpeg parsing 6.7 Moyenne 18 févr. 2025
CVE-2024-12243 Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos 5.3 Moyenne 10 févr. 2025
CVE-2024-12133 Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos 5.3 Moyenne 10 févr. 2025
CVE-2024-11831 Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript 5.4 Moyenne 10 févr. 2025
CVE-2025-0750 A vulnerability was found in CRI-O 6.6 Moyenne 28 janv. 2025
CVE-2025-0650 A flaw was found in the Open Virtual Network (OVN) 8.1 Élevée 23 janv. 2025
CVE-2024-11218 Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile 8.6 Élevée 22 janv. 2025
CVE-2024-12084 Rsync: heap buffer overflow in rsync due to improper checksum length handling 9.8 Critique 15 janv. 2025
CVE-2024-12087 A path traversal vulnerability exists in rsync 6.5 Moyenne 14 janv. 2025
CVE-2024-12747 Rsync: race condition in rsync handling symbolic links 5.6 Moyenne 14 janv. 2025
CVE-2024-12088 Rsync: --safe-links option bypass leads to path traversal 6.5 Moyenne 14 janv. 2025
CVE-2024-12086 Rsync: rsync server leaks arbitrary client files 6.1 Moyenne 14 janv. 2025
CVE-2024-12085 A flaw was found in rsync which could be triggered when rsync compares file checksums 7.5 Élevée 14 janv. 2025
CVE-2024-45497 A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume… 7.6 Élevée 31 déc. 2024
CVE-2024-11614 An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature 7.4 Élevée 18 déc. 2024
CVE-2024-12401 A flaw was found in the cert-manager package 4.4 Moyenne 12 déc. 2024
CVE-2024-8676 Cri-o: checkpoint restore can be triggered from different namespaces 7.4 Élevée 26 nov. 2024
CVE-2024-52616 Avahi: avahi wide-area dns predictable transaction ids 5.3 Moyenne 21 nov. 2024
CVE-2024-52615 Avahi: avahi wide-area dns uses constant source port 5.3 Moyenne 21 nov. 2024
CVE-2024-0793 A flaw was found in kube-controller-manager 7.7 Élevée 17 nov. 2024
CVE-2020-25720 Samba: check attribute access rights for ldap adds of computers 7.5 Élevée 17 nov. 2024

Autres produits Red Hat