Advisories · Technology
Red Hat OpenShift Container Platform 4.16.
Every CVE that names Red Hat OpenShift Container Platform 4.16 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Weak cryptography or TLS
- CVSS 7.7 High
Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.14
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.14
- Privilege escalation
- CVSS 6.1 Medium
Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.14
- Open redirect
- CVSS 7.8 High
Cri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socket
- Red Hat OpenShift Container Platform 4.16
- Red Hat OpenShift Container Platform 5
- CWE-501
- CVSS 7.5 High
Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Path traversal
- CVSS 9.3 CriticalCritical · CVSS 9+
Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Denial of service
- CVSS 7.4 High
Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Server-side request forgery (SSRF)
- CVSS 7.4 High
Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift console
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 7.6 High
Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Other injection
- CVSS 8.5 High
Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- CWE-436
- CVSS 9.4 CriticalCritical · CVSS 9+
Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates
- Red Hat multicluster engine for Kubernetes 2.1
- Red Hat multicluster engine for Kubernetes 2.11
- Authentication bypass
- CVSS 7.8 High
Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Memory corruption
- CWE-116
- CVSS 8.0 High
Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Path traversal
- CVSS 8.8 High
Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-1188
- CVSS 7.3 High
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
- GNOME GLib
- Red Hat Enterprise Linux 10
- CWE-193
- CVSS 7.5 High
Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.5 High
Dracut: dracut: root code execution via dhcp options command injection
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 8.8 High
Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- CWE-15
- CVSS 7.4 High
Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Authentication bypass
- CVSS 9.0 CriticalCritical · CVSS 9+
Samba: remote code execution in samr
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 7.1 High
Samba: missing access check on reparse point operations
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Broken access control
- CVSS 6.5 Medium
Samba: vfs_worm does not block directory modification
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-280
- CVSS 8.0 High
Samba: group policy certificate enrollment uses http:// without validation
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-345
- CVSS 8.2 High
Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Weak cryptography or TLS
- CVSS 8.2 High
Gnutls: gnutls: information disclosure via heap overread in rsa key exchange
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-126
- CVSS 7.8 High
Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.5 High
Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-475
- CVSS 7.4 High
Gnutls: gnutls: security bypass due to incorrect name constraint handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Weak cryptography or TLS
- CVSS 7.1 High
Gnutls: gnutls: authentication bypass via nul character in username
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-170
- CWE-626
- CVSS 7.5 High
Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-130
- CVSS 7.5 High
Gnutls: gnutls: denial of service via dtls zero-length fragment
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 6.5 Medium
Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-178
- CVSS 6.7 Medium
Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Race condition
- CVSS 7.5 High
Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 7.5 High
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Denial of service
- CVSS 6.5 Medium
Nfs-utils: rpc.mountd in the nfs-utils privilege escalation
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- CWE-279
- CVSS 7.5 High
Qemu-kvm: vnc websocket handshake use-after-free
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 8.1 High
Libssh: invalid return code for chacha20 poly1305 with openssl backend
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-393
- CVSS 5.4 Medium
Libssh: out-of-bounds read in sftp_handle()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 7.8 High
Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.0 High
Icu: stack buffer overflow in the srbroot::addtag function
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Memory corruption
- CVSS 7.6 High
Grub2: net: out-of-bounds write in grub_net_search_config_file()
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Enterprise Linux 8
- Memory corruption
- CVSS 7.6 High
Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Broken access control
- CVSS 7.4 High
Pam: improper hostname interpretation in pam_access leads to access control bypass
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Authentication bypass
- CVSS 6.5 Medium
Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Path traversal
- CVSS 7.5 High
Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- CWE-662
- CVSS 5.3 Medium
Openshift-console: unauthenticated data exposure
- Red Hat OpenShift Container Platform 4.16
- Red Hat OpenShift Container Platform 4.17
- Information disclosure
- CVSS 7.0 HighCritical · CVSS 7+ and EPSS
Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
- CWE-364
- CVSS 8.1 HighCritical · CVSS 7+ and EPSS
Openssh: regresshion - race condition in ssh allows rce/dos
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
- CWE-364