Skip to contentRedhat Openshift vulnerabilities
- redhat openshiftAn input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants...CVE-2017-75173.5 Low
- buildah project buildah, redhat enterprise linux, openshift container platform +2 moreBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modificationCVE-2022-2990Fix available7.1 High
- containers podman, redhat enterprise linux, openshift container platform +2 morePodman's incorrect handling of the supplementary groups may lead to data disclosure, modificationCVE-2022-2989Fix available7.1 High
- redhat openshiftA credentials leak was found in the OpenShift Container Platform. The private key for the...CVE-2022-24036.5 Medium
- redhat openshift container platformIn OpenShift Container Platform, a user with permissions to create or modify Routes can craft a...CVE-2022-16776.3 Medium
- fedoraproject fedora, redhat ansible automation platform, openshift container platform +2 moreAn Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with...CVE-2022-16326.5 Medium
- red hat undertow, netapp active iq unified manager, cloud secure agent +4 more +6 moreA flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response...CVE-2022-1319Fix available7.5 High
- red hat undertow, netapp active iq unified manager, cloud secure agent +7 more +9 moreA flaw was found in Undertow. A potential security issue in flow control handling by the browser...CVE-2022-12597.5 High
- [unknown] dpdk, debian linux, dpdk data plane development kit +6 more +8 moreA permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker...CVE-2022-2132Fix available8.6 High
- serverless, redhat openshift serverless +1 moreIt was found that the CVE-2021-27918, CVE-2021-31525 and CVE-2021-33196 have been incorrectly...CVE-2021-37037.5 High
- redhat smallrye health, build of quarkus, openshift application runtimes +2 moreSmallRye Health UI Cross-site Scripting vulnerabilityCVE-2021-3914Fix available6.1 Medium
- redhat openshiftIt was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift...CVE-2021-41258.1 High
- redhat servicemesh-operator, openshift service mesh +1 moreA flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do...CVE-2021-3586Fix available9.8 Critical
- redhat openshift api managementA flaw was found in the Red Hat OpenShift API Management product. User input is not validated...CVE-2021-34425.4 Medium
- redhat openshift container platformA flaw was found in cluster-ingress-operator. A change to how the router-default service allows only certain IP source ranges could allow an attacker to access resources that would otherwise be restri…CVE-2020-278369.8 Critical
- red hat undertow, redhat fuse, integration camel k +4 more +6 moreUndertow vulnerable to memory exhaustion due to buffer leakCVE-2021-3690Fix available7.5 High
- redhat a-mq streams, build of quarkus, descision manager +6 more +8 morefabric8 kubernetes-client vulnerableCVE-2021-4178Public exploitFix available6.7 Medium
- redhat openshift-origin-node-utilIt was reported that watchman in openshift node-utils creates /var/run/watchman.pid and /var/log...CVE-2014-00685.5 Medium
- redhat openshiftIn a openshift node, there is a cron job to update mcollective facts that mishandles a temporary...CVE-2013-45619.1 Critical
- gnu grub2, redhat codeready linux builder, developer tools +9 more +11 moreA crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user...CVE-2021-3697Fix available7.0 High
- gnu grub2, netapp ontap select deploy administration utility, redhat codeready linux builder +10 more +12 moreA heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader....CVE-2021-3696Fix available4.5 Medium
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +11 more +13 moreA crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An...CVE-2021-3695Fix available4.5 Medium
- kubernetes cri-o, fedoraproject fedora, redhat enterprise linux +1 more +3 moreNode DOS by way of memory exhaustion through ExecSync request in CRI-OCVE-2022-1708Fix available7.5 High
- red hat undertow, netapp active iq unified manager, oncommand insight +5 more +7 moreundertow Race Condition vulnerabilityCVE-2021-3597Fix available5.9 Medium
- redhat ignition, fedoraproject fedora, redhat enterprise linux +1 more +3 moreIgnition config accessible to unprivileged software on VMwareCVE-2022-1706Fix available6.5 Medium
- podman project podman, fedoraproject fedora, psgo project psgo +13 more +15 morePodman publishes a malicious image to public registriesCVE-2022-1227Public exploitFix available8.8 High
- [unknown] dpdk, dpdk data plane development kit, openvswitch +1 more +3 moreA flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected...CVE-2022-0669Fix available6.5 Medium
- keycloak, redhat openshift container platform, single sign-on +2 moreECP SAML binding bypasses authentication flowsCVE-2021-3827Fix available6.8 Medium
- kubernetes cri-o, mobyproject moby, fedoraproject fedora +1 more +3 moreIncorrect Default Permissions in CRI-OCVE-2022-27652Fix available5.3 Medium
- redhat openshiftThe release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch...CVE-2021-4047Fix available7.5 High
- containers crun, fedoraproject fedora, redhat enterprise linux +1 more +3 moreImportant: container-tools:rhel8 security, bug fix, and enhancement updateCVE-2022-27650Fix available7.5 High
- redhat openshift container platform, openshift machine-config-operator +1 moreIt was found in OpenShift Container Platform 4 that ignition config, served by the Machine Config Server, can be accessed externally from clusters without authentication. The MCS endpoint (port 22623)…CVE-2021-202383.7 Low
- containers podman, fedoraproject fedora, redhat developer tools +11 more +13 morePodman's default inheritable capabilities for linux container not emptyCVE-2022-27649Fix available7.5 High
- debian linux, openstack oslo.utils, redhat openshift container platform +1 more +3 morepython-oslo-utils has improper password parsingCVE-2022-0718Fix available4.9 Medium
- haproxy, debian linux, redhat enterprise linux +2 more +4 moreA flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header....CVE-2022-0711Fix availableEPSS 16.6%7.5 High
- ceph, redhat ceph storage, fedoraproject fedora +5 more +7 moreA key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the...CVE-2021-3979Fix available6.5 Medium
- argoproj argo cd, redhat openshift gitops +1 moreA flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and...CVE-2021-35576.5 Medium
- kubernetes cri-o, redhat openshift container platform +1 moreIncorrect Permission Assignment for Critical Resource in CRI-OCVE-2022-0532Fix available4.2 Medium
- apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 moreDeserialization of untrusted data in JMSAppender in Apache Log4j 1.2CVE-2021-4104Public exploitFix availableEPSS 80.6%7.5 High
- lapack project lapack, openblas project openblas, fedoraproject fedora +5 more +7 moreAn out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in...CVE-2021-4048Fix available9.1 Critical
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreA flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with...CVE-2021-3669Fix available5.5 Medium
- redhat wildfly elytron, quarkus, redhat build of quarkus +11 more +13 moreObservable Discrepancy in Wildfly ElytronCVE-2021-3642Fix available5.3 Medium
- redhat openshiftIt was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster...CVE-2021-36364.6 Medium
- redhat libvirt, netapp ontap select deploy administration utility, redhat enterprise linux +1 more +3 moreA flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels...CVE-2021-3631Fix available6.3 Medium
- linux kernel, netapp h300e firmware, h300s firmware +29 more +31 more.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker...CVE-2021-3609Fix available7.0 High
- nmstate kubernetes-nmstate, redhat openshift virtualization +1 moreWithdrawn Advisory: kubernetes-nmstate Insecure Privilege ManagementCVE-2020-17427.0 High
- polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that polkit could be tricked into bypassing the credential checks for D-Bus requests...CVE-2021-3560In KEVPublic exploitFix availableEPSS 21.8%7.8 High
- redhat noobaa-operator, openshift container platform +1 moreA flaw was found in noobaa-core in versions before 5.7.0. This flaw results in the name of an...CVE-2021-35297.1 High
- redhat openshiftAn insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift. This flaw allows an attacker with access to a running container which mounts /etc/kubernetes or has local a…CVE-2020-355147.0 High
- redhat openshift container platformA flaw was found in the Restricted Security Context Constraints (SCC), where it allows pods to...CVE-2020-143366.5 Medium
- Show moreLoading…