Vulnérabilités de Red Hat Red Hat OpenShift Container Platform 4

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2024-11217	A vulnerability was found in the OAuth-server	4.9 Moyenne	15 nov. 2024
CVE-2024-10963	Pam: improper hostname interpretation in pam_access leads to access control bypass	7.4 Élevée	7 nov. 2024
CVE-2024-9676	Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)	6.5 Moyenne	15 oct. 2024
CVE-2024-9675	Buildah: buildah allows arbitrary directory mount	7.8 Élevée	9 oct. 2024
CVE-2024-9407	Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction	4.7 Moyenne	1 oct. 2024
CVE-2024-9341	Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library	5.4 Moyenne	1 oct. 2024
CVE-2024-9355	Golang-fips: golang fips zeroed buffer	6.5 Moyenne	1 oct. 2024
CVE-2024-8418	Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service	7.5 Élevée	4 sept. 2024
CVE-2024-43168	DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software…	4.8 Moyenne	8 août 2024
CVE-2024-43167	DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software…	2.8 Faible	8 août 2024
CVE-2024-7409	Qemu: denial of service via improper synchronization in qemu nbd server during socket closure	7.5 Élevée	5 août 2024
CVE-2024-3056	Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack	7.7 Élevée	2 août 2024
CVE-2024-7079	A flaw was found in the Openshift console	6.5 Moyenne	24 juil. 2024
CVE-2024-6501	A flaw was found in NetworkManager	3.1 Faible	9 juil. 2024
CVE-2024-6387	A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd)	8.1 Élevée	1 juil. 2024
CVE-2024-3727	Containers/image: digest type does not guarantee valid type	8.3 Élevée	9 mai 2024
CVE-2024-2905	A security vulnerability has been discovered within rpm-ostree, pertaining to the /etc/shadow file in default builds…	6.2 Moyenne	25 avr. 2024
CVE-2023-6596	An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift…	7.5 Élevée	25 avr. 2024
CVE-2024-1394	Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads	7.5 Élevée	21 mars 2024
CVE-2024-2182	A flaw was found in the Open Virtual Network (OVN)	6.5 Moyenne	12 mars 2024
CVE-2024-1485	A flaw was found in the decompression function of registry-support	8.0 Élevée	13 févr. 2024
CVE-2024-21626	runc is a CLI tool for spawning and running containers on Linux according to the OCI specification	8.6 Élevée	31 janv. 2024
CVE-2023-5366	A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass…	7.1 Élevée	6 oct. 2023
CVE-2022-3248	A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions	4.4 Moyenne	5 oct. 2023
CVE-2022-4145	A content spoofing flaw was found in OpenShift's OAuth endpoint	4.3 Moyenne	5 oct. 2023

Autres produits Red Hat