redhat openshift container platform 4.12 vulnerabilities and exploits

(subscribe to this query)

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader ac...

Redhat Openshift Container Platform 4.12 Redhat Openshift Container Platform 4.11 Redhat Openshift Container Platform 4.13 Redhat Openshift Container Platform 4.14

An authentication bypass vulnerability exists in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need ...

Kubernetes Kube-apiserver -Redhat Openshift Container Platform 4.10 Redhat Openshift Container Platform 4.12 Redhat Openshift Container Platform 4.11 Redhat Openshift Container Platform 4.13

The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658, respectively, included an incorrect version of cri-o missing the fix for CVE-2022-27652, which was previously fixed in OCP...

Kubernetes Cri-o -Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.12

A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.

Redhat Openshift Container Platform 4.10 Redhat Openshift Container Platform For Linuxone 4.10 Redhat Openshift Container Platform For Linuxone 4.11 Redhat Openshift Container Platform For Power 4.10 Redhat Openshift Container Platform For Power 4.11 Redhat Openshift Container Platform Ibm Z Systems 4.10 Redhat Openshift Container Platform Ibm Z Systems 4.11 Redhat Openshift Container Platform For Arm64 4.11 Redhat Openshift Container Platform For Arm64 4.10 Redhat Openshift Container Platform For Arm64 4.12 Redhat Openshift Container Platform For Linuxone 4.12 Redhat Openshift Container Platform For Power 4.12 Redhat Openshift Container Platform Ibm Z Systems 4.12

An uncontrolled resource consumption vulnerability exists in HAProxy which could crash the service. This issue could allow an authenticated remote malicious user to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.

Haproxy Haproxy -Redhat Software Collections -Redhat Ceph Storage 5.0 Redhat Openshift Container Platform 4.12 Redhat Openshift Container Platform For Ibm Linuxone 4.12 Redhat Openshift Container Platform For Power 4.12 Redhat Openshift Container Platform Ibm Z Systems 4.12 Redhat Openshift Container Platform 4.12 Redhat Openshift Container Platform 4.11 Redhat Openshift Container Platform 4.10 Redhat Openshift Container Platform 4.10 Redhat Openshift Container Platform For Ibm Linuxone 4.10 Redhat Openshift Container Platform For Power 4.10 Redhat Openshift Container Platform Ibm Z Systems 4.10 Redhat Openshift Container Platform 4.11 Redhat Openshift Container Platform For Ibm Linuxone 4.11 Redhat Openshift Container Platform For Power 4.11 Redhat Openshift Container Platform Ibm Z Systems 4.11 Fedoraproject Extra Packages For Enterprise Linux 8.0 Fedoraproject Fedora 36 Fedoraproject Fedora 37

A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restr...

Redhat Openshift 4.11 Redhat Openshift 4.12

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.

Redhat Openshift Container Platform For Arm64 4.12 Redhat Openshift Container Platform For Linuxone 4.12 Redhat Openshift Container Platform For Power 4.12 Redhat Openshift Container Platform Ibm Z Systems 4.12 Redhat Openstack Platform 17.1

A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.

Kubernetes Cri-o -Redhat Openshift Container Platform For Arm64 4.12 Redhat Openshift Container Platform For Linuxone 4.12 Redhat Openshift Container Platform For Power 4.12 Redhat Openshift Container Platform Ibm Z Systems 4.12 Fedoraproject Extra Packages For Enterprise Linux 8.0 Fedoraproject Fedora 36 Fedoraproject Fedora 37 Redhat Openshift Container Platform For Arm64 4.11 Redhat Openshift Container Platform For Linuxone 4.11 Redhat Openshift Container Platform For Power 4.11 Redhat Openshift Container Platform Ibm Z Systems 4.11

The golang.org/x/crypto/ssh package prior to 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an malicious user to crash a server in certain circumstances involving AddHostKey.

Golang Ssh Fedoraproject Fedora 34 Fedoraproject Extra Packages For Enterprise Linux 8.0 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Redhat Advanced Cluster Management For Kubernetes 2.0

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook