Advisories · Technology
Red Hat Container Native Virtualization 4.20.
Every CVE that names Red Hat Container Native Virtualization 4.20 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host
- Red Hat Container Native Virtualization 4.12
- Red Hat Container Native Virtualization 4.13
- Path traversal
- CVSS 7.7 High
Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone
- Red Hat Container Native Virtualization 4.14
- Red Hat Container Native Virtualization 4.16
- Broken access control
- CVSS 7.3 High
Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption
- Red Hat Container Native Virtualization 4.12
- Red Hat Container Native Virtualization 4.13
- CWE-61