openshift vulnerabilities (Red Hat)
267 vulnerabilities.
openshiftRed HatHAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are...9.1 CriticalopenshiftRed Hatgithub.com/openshift/apiserver-library-go Improper Input Validation vulnerability6.3 MediumopenshiftRed HatSandbox bypass in Jenkins Script Security Plugin8.8 HighopenshiftRed HatAn uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash...6.5 MediumopenshiftRed HatOpenshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the...7.4 HighopenshiftRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumopenshiftRed HatSpring Security authorization rules can be bypassed via forward or include dispatcher types9.8 CriticalopenshiftRed Hatspring-security-oauth2-client vulnerable to Privilege Escalation8.1 HighopenshiftRed HatKubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)5.1 MediumopenshiftRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 CriticalopenshiftRed HatDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 HighopenshiftRed HatIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighopenshiftRed HatMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighopenshiftRed HatUnbounded memory consumption when reading headers in archive/tar7.5 HighopenshiftRed HatCRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure7.1 HighopenshiftRed HatBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighopenshiftRed HatPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighopenshiftRed HatFailure to strip relative path components in net/url7.5 HighopenshiftRed Hatgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighopenshiftRed Hatpython-scciclient vulnerable to Man-in-the-middle (MITM) attacks7.4 HighopenshiftRed HatPanic when decoding Float and Rat types in math/big7.5 HighopenshiftRed HatExposure of client IP addresses in net/http6.5 MediumopenshiftRed HatStack exhaustion when reading certain archives in compress/gzip7.5 HighopenshiftRed HatImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumopenshiftRed HatSession tickets lack random ticket_age_add in crypto/tls3.1 LowopenshiftRed Hatgolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 MediumopenshiftRed HatIncorrect Default Permissions in runc5.9 MediumopenshiftRed HatIgnition config accessible to unprivileged software on VMware6.5 MediumopenshiftRed HatThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...7.5 HighopenshiftRed Hatencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 HighopenshiftRed Hatgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 HighopenshiftRed Hatregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 HighopenshiftRed HatUncontrolled Resource Consumption in promhttp7.5 HighopenshiftRed Hatcmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 HighopenshiftRed HatRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 HighopenshiftRed HatCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 CriticalopenshiftRed HatIncorrect Permission Assignment for Critical Resource in CRI-O4.2 MediumopenshiftRed HatOS command execution vulnerability in Jenkins Docker Commons Plugin8.8 HighopenshiftRed HatCross-Site Request Forgery in Jenkins4.3 MediumopenshiftRed Hatx/crypto/ssh vulnerable to panic via malformed packets7.5 HighopenshiftRed HatGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 MediumopenshiftRed Hatgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 HighopenshiftRed HatClarify Content-Type handling in OCI spec3.0 LowopenshiftRed Hatcoreos-installer < 0.10.0 writes world-readable Ignition config to installed system5.5 MediumopenshiftRed HatGo before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted...7.5 HighopenshiftRed HatPath traversal vulnerability in Jenkins Subversion Plugin allows reading arbitrary files7.5 HighopenshiftRed HatAgent-to-controller access control allows reading/writing most content of build directories in Jenkins9.1 CriticalopenshiftRed HatAgent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries Plugin9.8 CriticalopenshiftRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins8.8 HighopenshiftRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 Critical- Show moreLoading…