Advisories · Technology
Red Hat OpenShift Container Platform 4.15.
Every CVE that names Red Hat OpenShift Container Platform 4.15 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.14
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.14
- Privilege escalation
- CVSS 6.1 Medium
Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.14
- Open redirect
- CVSS 7.5 High
Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Path traversal
- CVSS 9.3 CriticalCritical · CVSS 9+
Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Denial of service
- CVSS 7.4 High
Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Server-side request forgery (SSRF)
- CVSS 7.4 High
Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 8.5 High
Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- CWE-436
- CVSS 9.4 CriticalCritical · CVSS 9+
Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates
- Red Hat multicluster engine for Kubernetes 2.1
- Red Hat multicluster engine for Kubernetes 2.11
- Authentication bypass
- CVSS 7.8 High
Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Memory corruption
- CWE-116
- CVSS 8.0 High
Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Path traversal
- CVSS 8.8 High
Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-1188
- CVSS 5.9 Medium
Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
- GNOME GLib
- Red Hat Enterprise Linux 10
- Path traversal
- CVSS 7.3 High
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
- GNOME GLib
- Red Hat Enterprise Linux 10
- CWE-193
- CVSS 7.5 High
Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.5 High
Dracut: dracut: root code execution via dhcp options command injection
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 8.8 High
Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- CWE-15
- CVSS 7.4 High
Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Authentication bypass
- CVSS 9.0 CriticalCritical · CVSS 9+
Samba: remote code execution in samr
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 7.1 High
Samba: missing access check on reparse point operations
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Broken access control
- CVSS 6.5 Medium
Samba: vfs_worm does not block directory modification
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-280
- CVSS 8.0 High
Samba: group policy certificate enrollment uses http:// without validation
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-345
- CVSS 8.2 High
Gnutls: gnutls: information disclosure via heap overread in rsa key exchange
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-126
- CVSS 7.8 High
Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.5 High
Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-475
- CVSS 7.1 High
Gnutls: gnutls: authentication bypass via nul character in username
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-170
- CWE-626
- CVSS 7.5 High
Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-130
- CVSS 7.5 High
Gnutls: gnutls: denial of service via dtls zero-length fragment
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 6.5 Medium
Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-178
- CVSS 6.7 Medium
Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Race condition
- CVSS 7.5 High
Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 7.5 High
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Denial of service
- CVSS 8.8 High
Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Privilege escalation
- CVSS 7.8 High
Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr
- GNOME libxml2
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 8.1 High
Libssh: invalid return code for chacha20 poly1305 with openssl backend
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-393
- CVSS 5.4 Medium
Libssh: out-of-bounds read in sftp_handle()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Libxml: heap use after free (uaf) leads to denial of service (dos)
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Libxml: type confusion leads to denial of service (dos)
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.5 High
Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.8 High
Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.0 High
Icu: stack buffer overflow in the srbroot::addtag function
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Memory corruption
- CVSS 7.6 High
Grub2: net: out-of-bounds write in grub_net_search_config_file()
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 7.5 High
Rsync: info leak via uninitialized stack contents
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Memory corruption
- CVSS 6.5 Medium
Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Path traversal
- CVSS 7.5 High
Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- CWE-662
- CVSS 7.0 HighCritical · CVSS 7+ and EPSS
Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
- CWE-364
- CVSS 8.1 HighCritical · CVSS 7+ and EPSS
Openssh: regresshion - race condition in ssh allows rce/dos
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
- CWE-364
- CVSS 6.8 Medium
Cluster-image-registry-operator: exposes a secret via env variable in pod definition on azure
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- CWE-526