Skip to contentRed Hat Openshift Container Platform 4.18 vulnerabilities
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, discovery 2 +43 more +45 moreLibxml: type confusion leads to denial of service (dos)CVE-2025-49796Fix available9.1 Critical
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, 3scale api management platform 2 +43 more +45 moreLibxml: heap use after free (uaf) leads to denial of service (dos)CVE-2025-49794Fix available9.1 Critical
- libarchive, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +35 more +37 moreLibarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.cCVE-2025-5914Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +16 more +18 moreIcu: stack buffer overflow in the srbroot::addtag functionCVE-2025-5222Public exploitFix available7.0 High
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 8 +19 more +21 moreGrub2: net: out-of-bounds write in grub_net_search_config_file()CVE-2025-0624Fix available7.6 High
- red hat openshift container platform 4, openshift container platform 4.17, openshift container platform 4.18 +2 moreCri-o: cri-o path traversal in log handling functions allows arbitrary unmountingCVE-2025-0750Fix available6.6 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +14 more +16 morePodman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfileCVE-2024-11218Fix available8.6 High
- samba rsync, almalinux, archlinux arch linux +44 more +46 moreRsync: info leak via uninitialized stack contentsCVE-2024-12085Public exploitFix available7.5 High
- red hat fuse 7, openshift container platform 4.12, openshift container platform 4.13 +6 more +8 moreOpenshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentialsCVE-2024-454977.6 High
- red hat openshift container platform 4.18Ose-olm-catalogd-container: incomplete fix for rapid reset (cve-2023-39325/cve-2023-44487)CVE-2024-126986.5 Medium
- red hat enterprise linux 8, enterprise linux 9, openshift container platform 3.11 +5 more +7 moreCri-o: checkpoint restore can be triggered from different namespacesCVE-2024-8676Fix available7.4 High
- red hat openshift container platform 4.14, openshift container platform 4.15, openshift container platform 4.16 +2 more +4 moreOpenshift-console: openshift console: server-side request forgeryCVE-2024-65385.3 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +7 more +9 morePodman: build context bind mountCVE-2025-4953Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 morePam: improper hostname interpretation in pam_access leads to access control bypassCVE-2024-10963Fix available7.4 High
- red hat openshift container platform 4.16, openshift container platform 4.17, openshift container platform 4.18 +1 more +3 moreGraphql: information disclosure via graphql introspection in openshiftCVE-2024-503125.3 Medium
- red hat openshift container platform 4.18, redhat openshift container platform +1 moreGraphql: denial of service (dos) vulnerability via graphql batchingCVE-2024-503116.5 Medium
- red hat openshift developer tools and services, enterprise linux 10, enterprise linux 8 +25 more +27 morePodman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)CVE-2024-9676Fix available6.5 Medium
- buildah project buildah, red hat openshift developer tools and services, enterprise linux 10 +30 more +32 moreBuildah: buildah allows arbitrary directory mountCVE-2024-9675Fix available7.8 High
- containers common, red hat enterprise linux 10, enterprise linux 8 +10 more +12 morePodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go libraryCVE-2024-9341Fix available5.4 Medium
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift-controller-manager: elevated build pods can lead to node compromise in openshiftCVE-2024-45496Fix available9.9 Critical
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategyCVE-2024-73879.1 Critical
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift-console: oauth2 insufficient state parameter entropyCVE-2024-65088.0 High
- red hat openshift container platform 3.11, openshift container platform 4.16, openshift container platform 4.17 +1 more +3 moreOpenshift-console: unauthenticated data exposureCVE-2024-71285.3 Medium
- red hat multicluster engine for kubernetes, oadp-1.3-rhel-9, openshift developer tools and services +28 more +30 moreContainers/image: digest type does not guarantee valid typeCVE-2024-3727Fix available8.3 High
- mholt archiver, red hat advanced cluster security 3, advanced cluster security 4 +3 more +5 moreMholt/archiver: path traversal vulnerabilityCVE-2024-0406Public exploitFix available6.1 Medium
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +53 more +55 morefast-uri vulnerable to host confusion via percent-encoded authority delimitersCVE-2026-6322Fix available7.5 High