Skip to contentRed Hat Openshift vulnerabilities
- red hat openshift gitops 1.14, openshift gitops 1.15, openshift gitops 1.16 +2 moreOpenshift-gitops-operator-container: namespace isolation breakCVE-2024-13484Fix available8.2 High
- red hat openshift container platform 4, openshift container platform 4.17, openshift container platform 4.18 +2 moreCri-o: cri-o path traversal in log handling functions allows arbitrary unmountingCVE-2025-0750Fix available6.6 Medium
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, openshift container platform 4 +2 moreOvn: egress acls may be bypassed via specially crafted udp packetCVE-2025-0650Fix available8.1 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +14 more +16 morePodman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfileCVE-2024-11218Fix available8.6 High
- red hat .net 6.0 on red hat enterprise linux, cryostat 3, logging subsystem for red hat openshift +52 more +54 moreNpm-serialize-javascript: cross-site scripting (xss) in serialize-javascriptCVE-2024-11831Fix available5.4 Medium
- red hat enterprise linux 10, enterprise linux 9, openshift container platform 4 +2 more +4 moreUsers: `root` appended to group listingsCVE-2025-5791Fix available7.1 High
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +4 more +6 moreRsync: race condition in rsync handling symbolic linksCVE-2024-12747Fix available5.6 Medium
- samba rsync, almalinux, archlinux arch linux +24 more +26 moreRsync: --safe-links option bypass leads to path traversalCVE-2024-12088Fix available6.5 Medium
- samba rsync, almalinux, archlinux arch linux +32 more +34 moreRsync: path traversal vulnerability in rsyncCVE-2024-12087Fix available6.5 Medium
- samba rsync, almalinux, archlinux arch linux +13 more +15 moreRsync: rsync server leaks arbitrary client filesCVE-2024-12086Fix available6.1 Medium
- samba rsync, almalinux, archlinux arch linux +44 more +46 moreRsync: info leak via uninitialized stack contentsCVE-2024-12085Public exploitFix available7.5 High
- samba rsync, almalinux, archlinux arch linux +11 more +13 moreRsync: heap buffer overflow in rsync due to improper checksum length handlingCVE-2024-12084Public exploitFix availableEPSS 72.5%9.8 Critical
- red hat fuse 7, openshift container platform 4.12, openshift container platform 4.13 +6 more +8 moreOpenshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentialsCVE-2024-454977.6 High
- red hat openshift container platform 4.18Ose-olm-catalogd-container: incomplete fix for rapid reset (cve-2023-39325/cve-2023-44487)CVE-2024-126986.5 Medium
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 7 +12 more +14 moreDpdk: denial of service from malicious guest on hypervisors using dpdk vhost libraryCVE-2024-11614Fix available7.4 High
- red hat enterprise linux 8, enterprise linux 9, openshift container platform 3.11 +5 more +7 moreCri-o: checkpoint restore can be triggered from different namespacesCVE-2024-8676Fix available7.4 High
- red hat openshift container platform 4.14, openshift container platform 4.15, openshift container platform 4.16 +2 more +4 moreOpenshift-console: openshift console: server-side request forgeryCVE-2024-65385.3 Medium
- red hat cert-manager operator for red hat openshift, cryostat 3, multicluster engine for kubernetes +5 more +7 moreCert-manager: potential dos when parsing specially crafted pem inputsCVE-2024-12401Fix available4.4 Medium
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 moreAvahi: avahi wide-area dns predictable transaction idsCVE-2024-52616Fix available5.3 Medium
- avahi, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreAvahi: avahi wide-area dns uses constant source portCVE-2024-52615Fix available5.3 Medium
- red hat openshift container platform 4Oauth-server-container: oauth-server-container logs client secret in debug levelCVE-2024-112174.9 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +7 more +9 morePodman: build context bind mountCVE-2025-4953Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 morePam: improper hostname interpretation in pam_access leads to access control bypassCVE-2024-10963Fix available7.4 High
- red hat openshift container platform 4.16, openshift container platform 4.17, openshift container platform 4.18 +1 more +3 moreGraphql: information disclosure via graphql introspection in openshiftCVE-2024-503125.3 Medium
- red hat openshift container platform 4.18, redhat openshift container platform +1 moreGraphql: denial of service (dos) vulnerability via graphql batchingCVE-2024-503116.5 Medium
- red hat openshift developer tools and services, enterprise linux 10, enterprise linux 8 +25 more +27 morePodman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)CVE-2024-9676Fix available6.5 Medium
- buildah project buildah, red hat openshift developer tools and services, enterprise linux 10 +30 more +32 moreBuildah: buildah allows arbitrary directory mountCVE-2024-9675Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreBuildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instructionCVE-2024-9407Fix available4.7 Medium
- containers common, red hat enterprise linux 10, enterprise linux 8 +10 more +12 morePodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go libraryCVE-2024-9341Fix available5.4 Medium
- red hat nbde tang server, openshift developer tools and services, openshift pipelines +34 more +36 moreGolang-fips: golang fips zeroed bufferCVE-2024-9355Fix available6.5 Medium
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift-controller-manager: elevated build pods can lead to node compromise in openshiftCVE-2024-45496Fix available9.9 Critical
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategyCVE-2024-73879.1 Critical
- redhat keycloak, red hat build of quarkus, fuse 7 +6 more +8 moreKeycloak: amount of attributes per object is not limited and it may lead to dosCVE-2023-6841Fix available7.5 High
- containers aardvark-dns, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreContainers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of serviceCVE-2024-8418Fix available7.5 High
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift-console: oauth2 insufficient state parameter entropyCVE-2024-65088.0 High
- redhat openshift ai, red hat openshift data science (rhods), rhoai-2.14-rhel-8 +1 more +3 moreOdh-dashboard: odh-model-controller: cross-model authentication bypass in openshift aiCVE-2024-75578.8 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +5 more +7 moreUnbound: heap-buffer-overflow in unboundCVE-2024-43168Fix available4.8 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +5 more +7 moreUnbound: null pointer dereference in unboundCVE-2024-43167Fix available2.8 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +11 more +13 moreQemu: denial of service via improper synchronization in qemu nbd server during socket closureCVE-2024-7409Fix available7.5 High
- podman project podman, fedoraproject fedora, red hat enterprise linux 10 +7 more +9 morePodman: kernel: containers in shared ipc namespace are vulnerable to denial of service attackCVE-2024-3056Fix available7.7 High
- red hat openshift container platform 3.11, openshift container platform 4.16, openshift container platform 4.17 +1 more +3 moreOpenshift-console: unauthenticated data exposureCVE-2024-71285.3 Medium
- red hat openshift container platform 3.11, openshift container platform 4, redhat openshift container platform +2 moreOpenshift-console: unauthenticated installation of helm chartsCVE-2024-70796.5 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreNetworkmanager: denial of serviceCVE-2024-6501Fix available3.1 Low
- red hat enterprise linux 9, enterprise linux 10, enterprise linux 6 +11 more +13 moreOpenssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9CVE-2024-6409Fix availableEPSS 27.9%7.0 High
- red hat advanced virtualization for rhel 8.2.1, advanced virtualization for rhel 8.4.0.eus, enterprise linux 10 +15 more +17 moreQemu-kvm: 'qemu-img info' leads to host file read/writeCVE-2024-4467Fix available7.8 High
- openbsd openssh, almalinux, amazon linux +71 more +73 moreOpenssh: regresshion - race condition in ssh allows rce/dosCVE-2024-6387Public exploitFix availableEPSS 99.5%8.1 High
- red hat logging subsystem for red hat openshift, openshift container platform 4.12, openshift container platform 4.13 +7 more +9 moreOpenshift/telemeter: iss check during jwt authentication can be bypassedCVE-2024-50377.5 High
- kubernetes cri-o, red hat enterprise linux 8, enterprise linux 9 +8 more +10 moreCri-o: malicious container can create symlink on hostCVE-2024-5154Fix available8.1 High
- red hat advanced cluster management for kubernetes 2, openshift data foundation 4.20, rhodf-4.16-rhel-9 +2 moreSubmariner-operator: rbac permissions can allow for the spread of node compromisesCVE-2024-5042Fix available6.6 Medium
- red hat multicluster engine for kubernetes, oadp-1.3-rhel-9, openshift developer tools and services +28 more +30 moreContainers/image: digest type does not guarantee valid typeCVE-2024-3727Fix available8.3 High
- Show moreLoading…