openshift container platform vulnerabilities and exploits

(subscribe to this query)

NA

NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an malicious user to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

NA

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and previous versions, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a working director...

Linuxfoundation Runc Fedoraproject Fedora 39

20 Github repositories

NA

DescriptionAn incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift Containers.An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift Containers.

NA

A denial of service (DoS) vulnerability exists in go-git versions prior to v5.11. This vulnerability allows an malicious user to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Appl...

Go-git Project Go-git

NA

A path traversal vulnerability exists in go-git versions prior to v5.11. This vulnerability allows an malicious user to create and amend files across the filesystem. In the worse case scenario, remote code execution could be achieved. Applications are only affected if they are us...

Go-git Project Go-git

1 Github repository

NA

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node.

Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.13 Redhat Openshift Container Platform 4.14

NA

It exists that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

Linux Linux Kernel Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 22.04

8 Github repositories

NA

A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve ...

Shadow-maint Shadow-utils Redhat Enterprise Linux 8.0 Redhat Codeready Linux Builder 8.0 Redhat Enterprise Linux 9.0 Redhat Enterprise Linux For Arm 64 9.0 Redhat Enterprise Linux For Arm 64 8.0 Redhat Codeready Linux Builder For Ibm Z Systems 9.0 S390x Redhat Codeready Linux Builder For Arm64 9.0 Aarch64 Redhat Enterprise Linux For Power Little Endian 8.0 Ppc64le Redhat Enterprise Linux For Ibm Z Systems 8.0 S390x Redhat Codeready Linux Builder For Power Little Endian 9.0 Ppc64le Redhat Codeready Linux Builder 9.0 Redhat Enterprise Linux For Power Little Endian 9.0 Ppc64le Redhat Enterprise Linux For Ibm Z Systems 9.0 S390x Redhat Codeready Linux Builder For Ibm Z Systems 8.0 S390x Redhat Codeready Linux Builder For Arm64 8.0 Aarch64 Redhat Codeready Linux Builder For Power Little Endian 8.0 Ppc64le

NA

Multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened. For the oldstable distribution (bullseye), ...

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook