Vulnerabilities of Red Hat Red Hat OpenShift Container Platform 3.11

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-7631	Openshift-console: openshift console: path traversal	4.3 Medium	Mar 19, 2025
CVE-2024-11831	Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript	5.4 Medium	Feb 10, 2025
CVE-2024-8676	Cri-o: checkpoint restore can be triggered from different namespaces	7.4 High	Nov 26, 2024
CVE-2024-3056	Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack	7.7 High	Aug 2, 2024
CVE-2024-7128	A flaw was found in the OpenShift console	5.3 Medium	Jul 26, 2024
CVE-2024-7079	A flaw was found in the Openshift console	6.5 Medium	Jul 24, 2024
CVE-2024-5154	Cri-o: malicious container can create symlink on host	8.1 High	Jun 12, 2024
CVE-2024-3727	Containers/image: digest type does not guarantee valid type	8.3 High	May 9, 2024
CVE-2024-3154	A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation	7.2 High	Apr 26, 2024
CVE-2024-1139	Cluster-monitoring-operator: credentials leak	7.7 High	Apr 25, 2024
CVE-2024-1753	Buildah: buildah: container escape via improper bind mount validation	8.6 High	Mar 18, 2024
CVE-2023-3966	A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a…	7.5 High	Feb 22, 2024
CVE-2024-0567	Gnutls: rejects certificate chain with distributed trust	7.5 High	Jan 16, 2024
CVE-2023-6476	A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined	6.5 Medium	Jan 9, 2024
CVE-2023-5366	A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass…	7.1 High	Oct 6, 2023
CVE-2022-3248	A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions	4.4 Medium	Oct 5, 2023
CVE-2022-3466	The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via…	4.8 Medium	Sep 15, 2023
CVE-2023-3089	A compliance problem was found in the Red Hat OpenShift Container Platform	7.0 High	Jul 5, 2023

Other Red Hat products