Skip to contentRed Hat Openshift vulnerabilities
- red hat openshift container platform 4.14, openshift container platform 4.15 +1 moreCluster-image-registry-operator: exposes a secret via env variable in pod definition on azureCVE-2024-43696.8 Medium
- red hat openshift container platform 3.11, openshift container platform 4.12, openshift container platform 4.13 +2 more +4 moreCri-o: arbitrary command injection via pod annotationCVE-2024-3154Fix available7.2 High
- red hat mirror registry for red hat openshiftMirror-registry: redis password stored in plain-textCVE-2024-36257.3 High
- red hat mirror registry for red hat openshiftMirror-registry: database user and password stored in plain-textCVE-2024-36247.3 High
- red hat mirror registry for red hat openshift, redhat mirror registry +1 moreMirror-registry: default database secret key stored in plain-text on initial configuration fileCVE-2024-36236.5 Medium
- red hat mirror registry for red hat openshift, redhat mirror registry +1 moreMirror-registry: plain-text default csrf secret keyCVE-2024-36228.8 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 more +4 moreRpm-ostree: world-readable /etc/shadow fileCVE-2024-2905Fix available6.2 Medium
- red hat advanced cluster management for kubernetes 2, openshift container platform 3.11, openshift container platform 4.12 +3 more +5 moreCluster-monitoring-operator: credentials leakCVE-2024-11397.7 High
- red hat logging subsystem for red hat openshift, advanced cluster management for kubernetes 2, openshift container platform 4.13 +3 more +5 moreCoredns: cd bit response is cached and served laterCVE-2024-0874Fix available5.3 Medium
- red hat openshift container platform 4, openshift container platform 4.11, openshift container platform 4.12 +2 moreOpenshift: incomplete fix for rapid reset (cve-2023-44487/cve-2023-39325)CVE-2023-65967.5 High
- red hat migration toolkit for applications 6, migration toolkit for applications 7, amq broker 7 +18 more +20 moreKeycloak: xss via assertion consumer service url in saml post-binding flowCVE-2023-6717Fix available6.0 Medium
- red hat openshift container platform 4, openshift container platform 4.12 +1 moreKube-controller-manager: malformed hpa v1 manifest causes crashCVE-2024-0793Fix available7.7 High
- mholt archiver, red hat advanced cluster security 3, advanced cluster security 4 +3 more +5 moreMholt/archiver: path traversal vulnerabilityCVE-2024-0406Public exploitFix available6.1 Medium
- red hat openshift virtualization 4Cnv: dos through repeatedly calling vm-dump-metrics until virt handler crashesCVE-2024-314206.5 Medium
- red hat openshift virtualization 4Cnv: information disclosure through the usage of vm-dump-metricsCVE-2024-314194.3 Medium
- red hat nbde tang server, openshift developer tools and services, openshift pipelines +32 more +34 moreGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloadsCVE-2024-1394Fix available7.5 High
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 8.6 extended update support +9 more +11 moreBuildah: buildah: container escape via improper bind mount validationCVE-2024-1753Fix available8.6 High
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 10 +5 more +7 moreOvn: insufficient validation of bfd packets may lead to denial of serviceCVE-2024-2182Fix available6.5 Medium
- red hat openshift container platform 4.13, openshift container platform 4.14, openshift container platform 4.15 +5 more +7 moreKubevirt-csi: persistentvolume allows access to hcp's root nodeCVE-2024-1725Fix available6.5 Medium
- devfile registry-support, red hat openshift developer tools and services, openshift container platform 4 +1 more +3 moreRegistry-support: decompress can delete files outside scope via relative pathsCVE-2024-1485Fix available8.0 High
- fedora, openvswitch, rdo openstack rdo +5 more +7 moreOpenvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packetCVE-2023-3966Fix available7.5 High
- linuxfoundation runc, fedoraproject fedora, red hat ocp-tools-4.15-rhel-8 +26 more +28 morerunc container breakout through process.cwd trickery and leaked fdsCVE-2024-21626Public exploitFix availableEPSS 18.9%8.6 High
- libtiff, red hat ai inference server 3.2, discovery 2 +11 more +13 moreLibtiff: tiffrasterscanlinesize64 produce too-big size and could cause oomCVE-2023-52355Fix available7.5 High
- gnu gnutls, debian linux, fedoraproject fedora +10 more +12 moreGnutls: rejects certificate chain with distributed trustCVE-2024-0567Fix available7.5 High
- sqlite, fedoraproject extra packages for enterprise linux, fedora +9 more +11 moreSqlite: use-after-free bug in jsonparseaddnodearrayCVE-2024-0232Fix available4.7 Medium
- red hat openshift container platform 3.11, openshift container platform 4.13, openshift container platform 4.14 +1 more +3 moreCri-o: pods are able to break out of resource confinement on cgroupv2CVE-2023-6476Fix available6.5 Medium
- red hat openshift container platform 4.11, openshift container platform 4.12, openshift container platform 4.13 +2 more +4 moreOpenshift: modification of node role labelsCVE-2023-5408Fix available7.2 High
- red hat ironic content for red hat openshift container platform 4.12, openstack platform 17.1 for rhel 8, openstack platform 17.1 for rhel 9 +5 more +7 morePython-eventlet: patch regression for cve-2021-21419 in some red hat buildsCVE-2023-5625Fix available5.3 Medium
- golang go, traefik, red hat openshift ai (rhoai) +2 more +4 moreTraefik - Denial of Service via HTTP/2 Request HandlingCVE-2023-54365Fix available8.7 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty's wrapping plain trust manager silently disables hostname verificationCVE-2026-50010Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +24 more +26 moreNetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory ExhaustionCVE-2026-48059Fix available8.7 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +24 more +26 morenetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory ExhaustionCVE-2026-48043Fix available5.3 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty has Insufficient Bailiwick Validation for NS RecordsCVE-2026-47691Fix available8.7 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME RecordsCVE-2026-45674Public exploitFix available8.7 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytesCVE-2026-45416Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +23 more +25 moreNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV lengthCVE-2026-44893Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator MaskingCVE-2026-44249Fix available8.1 High
- netty, io.netty netty-codec-http, netty-codec-http2 +37 more +39 moreNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoSCVE-2026-42587Fix available7.5 High
- netty, io.netty netty-codec-http, red hat cryostat 4 on rhel 9 +33 more +35 moreNetty: HttpClientCodec response desynchronizationCVE-2026-42584Fix available7.3 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +32 more +34 moreNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling SanitizationCVE-2026-42581Fix available5.8 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)CVE-2026-42579Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +32 more +34 moreNetty: HTTP Header Injection via HttpProxyHandler Disabled ValidationCVE-2026-42578Fix available2.9 Low
- netty, red hat cryostat 4, cryostat 4 on rhel 9 +37 more +39 moreNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame BypassCVE-2026-33871Public exploitFix available8.7 High
- netty, red hat cryostat 4 on rhel 9, logging subsystem for red hat openshift +33 more +35 moreNetty: HTTP Request Smuggling via Chunked Extension Quoted-String ParsingCVE-2026-33870Fix available7.5 High
- openvswitch, fedora, red hat fast datapath for rhel 7 +12 more +14 moreOpenvswitch don't match packets on nd_target fieldCVE-2023-5366Fix available7.1 High
- red hat advanced cluster management for kubernetes 2, ansible automation platform 1.2, ansible tower 3 +4 more +6 moreOpenshift api admission checks does not enforce "custom-host" permissionsCVE-2022-32484.4 Medium
- red hat openshift container platform 4, redhat openshift container platform +1 moreContent spoofingCVE-2022-41454.3 Medium
- redhat openshift data science, opendatahub open data hub dashboard, red hat openshift data science (rhods) +2 moreS3 credentials included when exporting elyra notebookCVE-2023-33617.7 High
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: xml external entity (xxe) injectionCVE-2022-4245Fix available4.3 Medium
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: directory traversalCVE-2022-4244Public exploitFix available7.5 High
- Show moreLoading…