Skip to contentRed Hat Openshift Container Platform 4.12 vulnerabilities
- red hat logging subsystem for red hat openshift, openshift container platform 4.12, openshift container platform 4.13 +7 more +9 moreOpenshift/telemeter: iss check during jwt authentication can be bypassedCVE-2024-50377.5 High
- kubernetes cri-o, red hat enterprise linux 8, enterprise linux 9 +8 more +10 moreCri-o: malicious container can create symlink on hostCVE-2024-5154Fix available8.1 High
- red hat openshift container platform 3.11, openshift container platform 4.12, openshift container platform 4.13 +2 more +4 moreCri-o: arbitrary command injection via pod annotationCVE-2024-3154Fix available7.2 High
- red hat advanced cluster management for kubernetes 2, openshift container platform 3.11, openshift container platform 4.12 +3 more +5 moreCluster-monitoring-operator: credentials leakCVE-2024-11397.7 High
- red hat openshift container platform 4, openshift container platform 4.11, openshift container platform 4.12 +2 moreOpenshift: incomplete fix for rapid reset (cve-2023-44487/cve-2023-39325)CVE-2023-65967.5 High
- red hat openshift container platform 4, openshift container platform 4.12 +1 moreKube-controller-manager: malformed hpa v1 manifest causes crashCVE-2024-0793Fix available7.7 High
- red hat nbde tang server, openshift developer tools and services, openshift pipelines +32 more +34 moreGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloadsCVE-2024-1394Fix available7.5 High
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 8.6 extended update support +9 more +11 moreBuildah: buildah: container escape via improper bind mount validationCVE-2024-1753Fix available8.6 High
- linuxfoundation runc, fedoraproject fedora, red hat ocp-tools-4.15-rhel-8 +26 more +28 morerunc container breakout through process.cwd trickery and leaked fdsCVE-2024-21626Public exploitFix availableEPSS 18.9%8.6 High
- red hat openshift container platform 4.11, openshift container platform 4.12, openshift container platform 4.13 +2 more +4 moreOpenshift: modification of node role labelsCVE-2023-5408Fix available7.2 High
- red hat ironic content for red hat openshift container platform 4.12, openstack platform 17.1 for rhel 8, openstack platform 17.1 for rhel 9 +5 more +7 morePython-eventlet: patch regression for cve-2021-21419 in some red hat buildsCVE-2023-5625Fix available5.3 Medium
- kubernetes kube-apiserver, red hat openshift container platform 4, openshift container platform 4.10 +5 more +7 moreKube-apiserver: privescCVE-2023-1260Fix available8.0 High
- kubernetes cri-o, redhat openshift container platform, red hat openshift container platform 3.11 +1 more +3 moreCri-o: security regression of cve-2022-27652CVE-2022-34664.8 Medium
- kubernetes cri-o, fedoraproject extra packages for enterprise linux, fedora +7 more +9 moreCri-o: /etc/passwd tampering privescCVE-2022-4318Fix available7.8 High