red hat red hat openshift container platform 4 vulnerabilities and exploits

A vulnerability was found in CRI-O, where it can be requested to take a checkpoint archive of a container and later be asked to restore it. When it does that restoration, it attempts to restore the mounts from the restore archive instead of the pod request. As a result, the valid...

Red Hat Red Hat Openshift Container Platform 4.15 Red Hat Red Hat Openshift Container Platform 4.16 Red Hat Red Hat Openshift Container Platform 4.17 Red Hat Red Hat Openshift Container Platform 4.18 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Openshift Container Platform 3.11 Red Hat Red Hat Openshift Container Platform 4

850

VMScore

An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift Containers.

Red Hat Red Hat Openshift Container Platform 4.11 Red Hat Red Hat Openshift Container Platform 4.12 Red Hat Red Hat Openshift Container Platform 4

920

VMScore

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an malicious user to exploit symbolic links and trick the system into mount...

930

VMScore

A flaw was found in the github.com/containers/image library. This flaw allows malicious users to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

Red Hat Oadp-1.3-rhel-9 Red Hat Red Hat Advanced Cluster Security 4.4 Red Hat Red Hat Advanced Cluster Security 4.5 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Migration Toolkit For Containers 1.8 Red Hat Red Hat Openshift Container Platform 4.13 Red Hat Red Hat Openshift Container Platform 4.14 Red Hat Red Hat Openshift Container Platform 4.15 Red Hat Red Hat Openshift Container Platform 4.16 Red Hat Red Hat Openshift Container Platform 4.17 Red Hat Rhel-9-cnv-4.15

850

VMScore

A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey and...

Red Hat Red Hat Ansible Automation Platform 2.4 For Rhel 8 Red Hat Red Hat Ansible Automation Platform 2.4 For Rhel 9 Red Hat Red Hat Developer Tools Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Enterprise Linux 9.0 Update Services For Sap Solutions Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support Red Hat Red Hat Openshift Container Platform 4.12 Red Hat Red Hat Openshift Container Platform 4.13 Red Hat Red Hat Openshift Container Platform 4.14 Red Hat Red Hat Openshift Container Platform 4.15 Red Hat Red Hat Openstack Platform 16.2

570

VMScore

A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not properly validate the input passed to this option, allowing users to pass arbitrary parameters to the mount instruction. This issue can be exploited to mount sensi...

Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support Red Hat Red Hat Openshift Container Platform 4.16 Red Hat Red Hat Openshift Container Platform 4

750

VMScore

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when co...

Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support Red Hat Nbde Tang Server Red Hat Openshift Developer Tools And Services Red Hat Openshift Pipelines Red Hat Openshift Serverless Red Hat Red Hat Ansible Automation Platform 1.2 Red Hat Red Hat Ansible Automation Platform 2 Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Openshift Container Platform 4

860

VMScore

A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume mount that maps the node's /var/lib/kubelet/config.json file into the build pod. This file contains sensitive credentials necessary for pulling images from ...

Red Hat Red Hat Fuse 7 Red Hat Red Hat Openshift Container Platform 4

870

VMScore

A flaw was found in Podman. This issue may allow an malicious user to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue ...

Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Openshift Container Platform 3.11 Red Hat Red Hat Openshift Container Platform 4 Podman Project Podman Redhat Openshift Container Platform 4.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0 Fedoraproject Fedora 40

710

VMScore

A flaw exists in the mholt/archiver package. This flaw allows an malicious user to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or app...

Red Hat Red Hat Advanced Cluster Security 3 Red Hat Red Hat Advanced Cluster Security 4 Red Hat Red Hat Openshift Container Platform 4

1 Github repository

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

red hat red hat openshift container platform 4 vulnerabilities and exploits

CVE-2024-8676

CVE-2023-6596

CVE-2024-9341

CVE-2024-3727

CVE-2024-1394

CVE-2024-9407

CVE-2024-9355

CVE-2024-45497

CVE-2024-3056

CVE-2024-0406

Vulmon Search

About

Products

Connect