Skip to contentRedhat Openshift vulnerabilities
- elastic kibana, redhat openshift container platform +1 moreKibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console...CVE-2018-17246Public exploitEPSS 84.3%9.8 Critical
- haproxy, canonical ubuntu linux, redhat openshift container platform +2 moreAn issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer,...CVE-2018-20103Fix available7.5 High
- haproxy, canonical ubuntu linux, redhat openshift container platform +2 moreAn out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8...CVE-2018-20102Fix available7.5 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for...CVE-2018-18397Fix available5.5 Medium
- jenkins pipeline\, redhat openshift container platform +1 moreJenkins Script Security and Pipeline Groovy Plugins Sandbox BypassCVE-2018-1000866Fix available8.8 High
- jenkins script security, redhat openshift container platform +1 moreImproper Privilege Management in JenkinsCVE-2018-1000865Fix available8.8 High
- jenkins, redhat openshift container platform +1 moreLoop with Unreachable Exit Condition in JenkinsCVE-2018-1000864Fix available6.5 Medium
- jenkins, redhat openshift container platform +1 moreImproper Limitation of a Pathname to a Restricted Directory in JenkinsCVE-2018-1000863Fix available8.2 High
- jenkins, redhat openshift container platform +1 moreExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2018-1000862Fix available4.3 Medium
- jenkins, jenkins stapler web framework, redhat openshift container platform +2 moreDeserialization of Untrusted Data in JenkinsCVE-2018-1000861In KEVPublic exploitFix availableEPSS 98.3%9.8 Critical
- kubernetes, netapp trident, redhat openshift container platform +2 morePrivilege Escalation in KubernetesCVE-2018-1002105Public exploitFix availableEPSS 87.0%9.8 Critical
- perl, apple mac os x, canonical ubuntu linux +15 more +17 morePerl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular...CVE-2018-18311Fix availableEPSS 11.7%9.8 Critical
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...CVE-2018-19477Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access...CVE-2018-19476Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...CVE-2018-19475Fix available7.8 High
- linux kernel, redhat enterprise linux desktop, enterprise linux server +6 more +8 moreIn the Linux kernel through 4.19, a use-after-free can occur due to a race condition between...CVE-2018-18559Fix available8.1 High
- [unknown] haproxy, canonical ubuntu linux, redhat enterprise linux +2 more +4 moreA flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An...CVE-2018-14645Fix available7.5 High
- elastic kibana, redhat openshift container platform +1 moreKibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source...CVE-2018-38306.1 Medium
- red hat openshift container platformA cross site scripting flaw exists in the tetonic-console component of Openshift Container...CVE-2018-109374.6 Medium
- kubernetes, red hat openshift +1 moreIt was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509...CVE-2016-7075Fix available7.5 High
- redhat openshift container platform, starcounter-jack json-patch, red hat atomic-openshift +2 moreJSON-Patch Out-of-bounds Write vulnerabilityCVE-2018-14632Fix available7.7 High
- salesforce tough-cookie, ibm api connect, redhat openshift container platform +2 moreReDoS via long string of semicolons in tough-cookieCVE-2016-1000232Fix available5.3 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +8 more +10 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the...CVE-2018-16540Fix available7.8 High
- node.js, redhat openshift container platform +1 moreIn all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ...CVE-2018-12115Fix available7.5 High
- [unknown] atomic-openshift, redhat openshift container platform +1 moreThe OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker...CVE-2017-151385.0 Medium
- redhat openshift, red hat openshift enterprise, redhat openshift container platform +2 moreAn input validation flaw was found in the way OpenShift 3 handles requests for images. A user,...CVE-2016-8651Fix available3.1 Low
- red hat openshift enterprise, redhat openshift +1 moreThe OpenShift Enterprise 3 router does not properly sort routes when processing newly added...CVE-2016-8631Fix available6.3 Medium
- red hat openshift, redhat openshift container platform +1 moreA flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin....CVE-2017-12195Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +5 more +7 morePoppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory...CVE-2018-13988Fix available6.5 Medium
- redhat openshift, [unknown] atomic-openshift, redhat openshift container platform +2 moreThe OpenShift image import whitelist failed to enforce restrictions correctly when running...CVE-2017-151374.3 Medium
- [unknown] ansible, canonical ubuntu linux, debian linux +8 more +10 moreAnsible Arbitrary Code ExecutionCVE-2018-10875Fix available7.8 High
- [unknown] atomic-openshift, redhat openshift +1 moreIn atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause...CVE-2018-108856.5 Medium
- [unknown] source-to-image, redhat openshift container platform +1 moresource-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53...CVE-2018-108438.5 High
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30,...CVE-2018-13033Fix available5.5 Medium
- gnome libsoup, canonical ubuntu linux, debian linux +6 more +8 moreThe get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have...CVE-2018-12910Fix available9.8 Critical
- [unknown] openshift-ansible, redhat openshift container platform +1 moreopenshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes...CVE-2018-10859.0 Critical
- [unknown] routing, redhat openshift container platform +1 morerouting before version 3.10 is vulnerable to an improper input validation of the Openshift...CVE-2018-10706.5 Medium
- pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 moreDenial of Service in org.springframework:spring-coreCVE-2018-1257Fix available6.5 Medium
- jenkins, redhat openshift +1 moreIncorrect Authorization in Jenkins CoreCVE-2017-2611Fix available4.3 Medium
- redhat openshift, red hat atomic-openshift +1 moreA flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An...CVE-2018-1102Fix available8.8 High
- google guava, oracle banking payments, communications ip service activator +14 more +16 moreDenial of Service in Google GuavaCVE-2018-10237Fix available5.9 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +7 more +9 moreThe DPDK vhost-user interface does not check to verify that all the requested guest physical...CVE-2018-1059Fix available6.1 Medium
- redhat openshiftopenshift before versions 3.3.1.11, 3.2.1.23, 3.4 is vulnerable to a flaw when a volume fails to...CVE-2016-95924.3 Medium
- red hat, inc. openshiftOpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The...CVE-2017-75345.4 Medium
- red hat, inc. openshift enterprise, redhat openshift +1 moreRed Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container...CVE-2018-10697.1 High
- fasterxml jackson-databind, debian linux, netapp e-series santricity os controller +6 more +8 moreDeserialization of Untrusted Data in jackson-databindCVE-2018-5968Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp e-series santricity os controller +5 more +7 morejackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypassCVE-2017-17485Public exploitFix availableEPSS 49.7%9.8 Critical
- redhat openshift(1) oo-analytics-export and (2) oo-analytics-import in the openshift-origin-broker-util package...CVE-2013-43647.8 High
- fasterxml jackson-databind, debian linux, netapp oncommand balance +21 more +23 morejackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code executionCVE-2017-15095Fix available9.8 Critical
- redhat openshiftselinux-policy as packaged in Red Hat OpenShift 2 allows attackers to obtain process listing...CVE-2015-02383.3 Low
- Show moreLoading…