Advisories · Technology
Red Hat Advanced Cluster Security 4.
Every CVE that names Red Hat Advanced Cluster Security 4 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.3 Low
Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers
- Red Hat Confidential Compute Attestation
- Red Hat DPU kit for NVIDIA
- Denial of service
- CVSS 4.3 Medium
Claircore: claircore: denial of service via unchecked type assertion in rpm header parser
- Red Hat Advanced Cluster Security 4
- Red Hat Quay 3
- Denial of service
- CVSS 6.8 Medium
Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m role mappings
- Red Hat Advanced Cluster Security 4
- CWE-625
- CVSS 8.5 High
Stackrox: stackrox: deploy-time policy enforcement and visibility bypass via label injection
- Red Hat Advanced Cluster Security 4
- CWE-345
- CVSS 4.3 Medium
Claircore: claircore: denial of service via out-of-bounds slice in claircore's apk installed-database parser
- Red Hat Advanced Cluster Security 4
- Red Hat Quay 3
- Memory corruption
- CVSS 7.7 High
Stackrox: stackrox: unbounded graphql query depth allows authenticated denial of service
- Red Hat Advanced Cluster Security 4.9
- Red Hat Advanced Cluster Security for Kubernetes 4.10
- Denial of service
- CVSS 5.0 Medium
Stackrox: xss in stackrox
- Red Hat Advanced Cluster Security 4
- Cross-site scripting (XSS)