Skip to contentRed Hat Openshift Container Platform 4 vulnerabilities
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.cCVE-2025-5917Fix available2.8 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: integer overflow while reading warc files at archive_read_support_format_warc.cCVE-2025-5916Fix available3.9 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.cCVE-2025-5915Public exploitFix available6.6 Medium
- samba, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreSamba: smbd doesn't pick up group membership changes when re-authenticating an expired smb sessionCVE-2025-0620Fix available4.9 Medium
- debian linux, linux kernel, systemd project systemd +14 more +16 moreSystemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dumpCVE-2025-4598Fix available4.7 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +12 more +14 moreCoreutils: heap buffer under-read in gnu coreutils sort via key specificationCVE-2025-5278Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +16 more +18 moreIcu: stack buffer overflow in the srbroot::addtag functionCVE-2025-5222Public exploitFix available7.0 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: grub allow access to encrypted device through cli once root device is unlocked via tpmCVE-2025-4382Fix available5.9 Medium
- red hat discovery 2, enterprise linux 10, enterprise linux 6 +26 more +28 moreKrb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisionsCVE-2025-3576Fix available5.9 Medium
- red hat directory server 11, directory server 12, enterprise linux 10 +7 more +9 moreRust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`CVE-2025-3416Fix available3.7 Low
- red hat directory server 11, directory server 12, enterprise linux 10 +8 more +10 moreCrossbeam-channel: crossbeam-channel vulnerable to double free on dropCVE-2025-4574Fix available6.5 Medium
- red hat openshift container platform 3.11, openshift container platform 4 +1 moreOpenshift-console: openshift console: path traversalCVE-2024-76314.3 Medium
- red hat devworkspace operator 0.33, discovery 1.14, enterprise linux 10 +26 more +28 moreLibexpat: expat: improper restriction of xml entity expansion depth in libexpatCVE-2024-8176Public exploitFix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreRing: some aes functions may panic when overflow checking is enabled in ringCVE-2025-4432Fix available5.3 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/hfs: integer overflow may lead to heap based out-of-bounds writeCVE-2025-1125Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: commands/dump: the dump command is not in lockdown when secure boot is enabledCVE-2025-1118Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: read: integer overflow may lead to out-of-bounds writeCVE-2025-0690Public exploitFix available6.1 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code executionCVE-2025-0689Fix available7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading datCVE-2025-0686Fix available6.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dataCVE-2025-0685Fix available6.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dataCVE-2025-0684Fix available6.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading dataCVE-2025-0678Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinksCVE-2025-0677Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 8 +19 more +21 moreGrub2: net: out-of-bounds write in grub_net_search_config_file()CVE-2025-0624Fix available7.6 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: command/gpg: use-after-free due to hooks not being removed on module unloadCVE-2025-0622Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: fs/hfs+: refcount can be decremented twiceCVE-2024-45783Fix available4.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)CVE-2024-45782Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: fs/ufs: oob write in the heapCVE-2024-45781Fix available6.7 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/tar: integer overflow causes heap oob writeCVE-2024-45780Fix available6.7 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/bfs: integer overflow leads to heap oob read in the bfs parserCVE-2024-45779Fix available6.0 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: fs/bfs: integer overflow in the bfs parser.CVE-2024-45778Fix available4.1 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: grub-core/gettext: integer overflow leads to heap oob write.CVE-2024-45777Fix available6.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: grub-core/gettext: integer overflow leads to heap oob write and read.CVE-2024-45776Fix available6.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: commands/extcmd: missing check for failed allocationCVE-2024-45775Fix available5.2 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: reader/jpeg: heap oob write during jpeg parsingCVE-2024-45774Fix available6.7 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 moreOpenssh: denial-of-service in opensshCVE-2025-26466Public exploitFix availableEPSS 38.7%5.9 Medium
- openbsd openssh, debian linux, netapp active iq unified manager +15 more +17 moreOpenssh: machine-in-the-middle attack if verifyhostkeydns is enabledCVE-2025-26465Public exploitFix available6.8 Medium
- fedora linux, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreKernel: secure boot does not automatically enable kernel lockdownCVE-2025-1272Fix available7.7 High
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +20 more +22 moreGnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dosCVE-2024-12243Fix available5.3 Medium
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +26 more +28 moreLibtasn1: inefficient der decoding in libtasn1 leading to potential remote dosCVE-2024-12133Fix available5.3 Medium
- red hat openshift container platform 4, openshift container platform 4.17, openshift container platform 4.18 +2 moreCri-o: cri-o path traversal in log handling functions allows arbitrary unmountingCVE-2025-0750Fix available6.6 Medium
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, openshift container platform 4 +2 moreOvn: egress acls may be bypassed via specially crafted udp packetCVE-2025-0650Fix available8.1 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +14 more +16 morePodman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfileCVE-2024-11218Fix available8.6 High
- red hat .net 6.0 on red hat enterprise linux, cryostat 3, logging subsystem for red hat openshift +52 more +54 moreNpm-serialize-javascript: cross-site scripting (xss) in serialize-javascriptCVE-2024-11831Fix available5.4 Medium
- red hat enterprise linux 10, enterprise linux 9, openshift container platform 4 +2 more +4 moreUsers: `root` appended to group listingsCVE-2025-5791Fix available7.1 High
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +4 more +6 moreRsync: race condition in rsync handling symbolic linksCVE-2024-12747Fix available5.6 Medium
- samba rsync, almalinux, archlinux arch linux +24 more +26 moreRsync: --safe-links option bypass leads to path traversalCVE-2024-12088Fix available6.5 Medium
- samba rsync, almalinux, archlinux arch linux +32 more +34 moreRsync: path traversal vulnerability in rsyncCVE-2024-12087Fix available6.5 Medium
- samba rsync, almalinux, archlinux arch linux +13 more +15 moreRsync: rsync server leaks arbitrary client filesCVE-2024-12086Fix available6.1 Medium
- samba rsync, almalinux, archlinux arch linux +44 more +46 moreRsync: info leak via uninitialized stack contentsCVE-2024-12085Public exploitFix available7.5 High
- Show moreLoading…