Advisories · Technology
Red Hat OpenShift Container Platform 4.12.
Every CVE that names Red Hat OpenShift Container Platform 4.12 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Weak cryptography or TLS
- CVSS 7.7 High
Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.14
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.14
- Privilege escalation
- CVSS 6.1 Medium
Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.14
- Open redirect
- CVSS 7.5 High
Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Path traversal
- CVSS 9.3 CriticalCritical · CVSS 9+
Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Server-side request forgery (SSRF)
- CVSS 7.4 High
Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 7.6 High
Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Other injection
- CVSS 8.5 High
Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- CWE-436
- CVSS 7.5 High
Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
- Command injection
- CVSS 7.8 High
Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Memory corruption
- CWE-116
- CVSS 8.0 High
Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Path traversal
- CVSS 8.8 High
Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-1188
- CVSS 5.9 Medium
Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
- GNOME GLib
- Red Hat Enterprise Linux 10
- Path traversal
- CVSS 7.3 High
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
- GNOME GLib
- Red Hat Enterprise Linux 10
- CWE-193
- CVSS 7.5 High
Dracut: dracut: root code execution via dhcp options command injection
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 8.8 High
Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- CWE-15
- CVSS 7.4 High
Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Authentication bypass
- CVSS 9.0 CriticalCritical · CVSS 9+
Samba: remote code execution in samr
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 7.1 High
Samba: missing access check on reparse point operations
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Broken access control
- CVSS 6.5 Medium
Samba: vfs_worm does not block directory modification
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-280
- CVSS 8.0 High
Samba: group policy certificate enrollment uses http:// without validation
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-345
- CVSS 8.2 High
Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Weak cryptography or TLS
- CVSS 8.2 High
Gnutls: gnutls: information disclosure via heap overread in rsa key exchange
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-126
- CVSS 7.8 High
Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.5 High
Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-475
- CVSS 7.4 High
Gnutls: gnutls: security bypass due to incorrect name constraint handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Weak cryptography or TLS
- CVSS 7.1 High
Gnutls: gnutls: authentication bypass via nul character in username
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-170
- CWE-626
- CVSS 7.5 High
Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-130
- CVSS 7.5 High
Gnutls: gnutls: denial of service via dtls zero-length fragment
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 6.5 Medium
Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-178
- CVSS 6.7 Medium
Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Race condition
- CVSS 7.5 High
Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 7.5 High
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.7 High
Glib: integer overflow in in g_escape_uri_string()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.8 High
Grub2: missing unregister call for gettext command may lead to use-after-free
- GNU grub2
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 8.8 High
Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Privilege escalation
- CVSS 7.5 High
Qemu-kvm: vnc websocket handshake use-after-free
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 7.8 High
Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr
- GNOME libxml2
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.4 Medium
Libssh: out-of-bounds read in sftp_handle()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Libxml: heap use after free (uaf) leads to denial of service (dos)
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Libxml: type confusion leads to denial of service (dos)
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.5 High
Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.6 High
Grub2: net: out-of-bounds write in grub_net_search_config_file()
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 7.5 High
Rsync: info leak via uninitialized stack contents
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 7.6 High
Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Broken access control
- CVSS 6.5 Medium
Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Path traversal
- CVSS 7.5 High
Openshift: incomplete fix for rapid reset (cve-2023-44487/cve-2023-39325)
- Red Hat OpenShift Container Platform 4.11
- Red Hat OpenShift Container Platform 4.12
- Denial of service
- CVSS 7.2 High
Openshift: modification of node role labels
- Red Hat OpenShift Container Platform 4.11
- Red Hat OpenShift Container Platform 4.12
- Privilege escalation
- CVSS 4.8 Medium
Cri-o: security regression of cve-2022-27652
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 3.11
- Broken access control