Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat openshift container platform 4.9 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2022-1677
In OpenShift Container Platform, a user with permissions to create or modify Routes can craft a payload that inserts a malformed entry into one of the cluster router's HAProxy configuration files. This malformed entry can match any arbitrary hostname, or all hostnames in the...
Redhat Openshift Container Platform 3.11Redhat Openshift Container Platform 4.6Redhat Openshift Container Platform 4.7Redhat Openshift Container Platform 4.8Redhat Openshift Container Platform 4.10Redhat Openshift Container Platform 4.9
7.8
CVSSv2
CVE-2022-1708
A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and ...
Kubernetes Cri-oKubernetes Cri-o 1.24.0Fedoraproject Fedora 36Redhat Enterprise Linux 7.0Redhat Openshift Container Platform 3.11Redhat Enterprise Linux 8.0Redhat Openshift Container Platform 4.0Redhat Enterprise Linux 9.0Redhat Openshift Container Platform 4.10Redhat Openshift Container Platform 4.9
NA
CVE-2022-3259
Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks.
Redhat Openshift 4.9
NA
CVE-2023-2295
A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the ...
Libreswan Libreswan 4.9-1.el8Libreswan Libreswan 4.9-1.el9Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Server Tus 8.8Redhat Enterprise Linux Server Aus 8.8Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2
4.4
CVSSv2
CVE-2021-3697
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload....
Gnu Grub2Redhat Openshift 3.0Redhat Enterprise Linux 8.0Redhat Developer Tools 1.0Redhat Enterprise Linux 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux For Power Little Endian Eus 8.2Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Power Little Endian Eus 8.4Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.1Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.4Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.6Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux For Power Little Endian Eus 8.6
4.4
CVSSv2
CVE-2021-3695
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be expl...
Gnu Grub2Fedoraproject Fedora 36Redhat Openshift 3.0Redhat Enterprise Linux 8.0Redhat Developer Tools 1.0Redhat Enterprise Linux 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux For Power Little Endian Eus 8.2Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Power Little Endian Eus 8.4Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.1Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.4Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.6Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6
6.9
CVSSv2
CVE-2021-3696
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding...
Gnu Grub2Redhat Openshift 3.0Redhat Enterprise Linux 8.0Redhat Developer Tools 1.0Redhat Enterprise Linux 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux For Power Little Endian Eus 8.2Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Power Little Endian Eus 8.4Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.1Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.4Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.6Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux For Power Little Endian Eus 8.6
4.9
CVSSv2
CVE-2018-12207
Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.
Intel Core I3-10110u Firmware -Intel Core I3-10110y Firmware -Intel Core I3-1005g1 Firmware -Intel Core I3-9300t Firmware -Intel Core I3-9300 Firmware -Intel Core I3-9100 Firmware -Intel Core I3-9100t Firmware -Intel Core I3-9350k Firmware -Intel Core I3-9320 Firmware -Intel Core I3-8145u Firmware -Intel Core I3-8300 Firmware -Intel Core I3-8100t Firmware -Intel Core I3-8300t Firmware -Intel Core I3-8109u Firmware -Intel Core I3-8130u Firmware -Intel Core I3-8100 Firmware -Intel Core I3-8350k Firmware -Intel Core I3-7100 Firmware -Intel Core I3-7350k Firmware -Intel Core I3-7300t Firmware -Intel Core I3-7167u Firmware -Intel Core I3-7300 Firmware -
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook