# Red Hat OpenShift Container Platform 4.

Every CVE that names Red Hat OpenShift Container Platform 4 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Grub2: reader/jpeg: heap oob write during jpeg parsing](https://agentprime.io/advisories/CVE-2024-45774.md)
  `CVE-2024-45774` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: Memory corruption
- [Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos](https://agentprime.io/advisories/CVE-2024-12243.md)
  `CVE-2024-12243` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: Denial of service
- [Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos](https://agentprime.io/advisories/CVE-2024-12133.md)
  `CVE-2024-12133` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: Denial of service
- [Ovn: egress acls may be bypassed via specially crafted udp packet](https://agentprime.io/advisories/CVE-2025-0650.md)
  `CVE-2025-0650` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 8 and 2 more · CVSS 8.1 High · Not analysed yet · Published 23 Jan 2025 · Tags: Broken access control
- [Rsync: heap buffer overflow in rsync due to improper checksum length handling](https://agentprime.io/advisories/CVE-2024-12084.md)
  `CVE-2024-12084` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.73 · Not analysed yet · Published 15 Jan 2025 · Tags: Memory corruption
- [Rsync: path traversal vulnerability in rsync](https://agentprime.io/advisories/CVE-2024-12087.md)
  `CVE-2024-12087` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal
- [Rsync: race condition in rsync handling symbolic links](https://agentprime.io/advisories/CVE-2024-12747.md)
  `CVE-2024-12747` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Race condition
- [Rsync: --safe-links option bypass leads to path traversal](https://agentprime.io/advisories/CVE-2024-12088.md)
  `CVE-2024-12088` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal
- [Rsync: rsync server leaks arbitrary client files](https://agentprime.io/advisories/CVE-2024-12086.md)
  `CVE-2024-12086` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-390
- [Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library](https://agentprime.io/advisories/CVE-2024-11614.md)
  `CVE-2024-11614` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 8 and 4 more · CVSS 7.4 High · Not analysed yet · Published 18 Dec 2024 · Tags: Memory corruption
- [Avahi: avahi wide-area dns predictable transaction ids](https://agentprime.io/advisories/CVE-2024-52616.md)
  `CVE-2024-52616` · CVE record: avahi and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Nov 2024 · Tags: CWE-334
- [Avahi: avahi wide-area dns uses constant source port](https://agentprime.io/advisories/CVE-2024-52615.md)
  `CVE-2024-52615` · CVE record: avahi avahi and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Nov 2024 · Tags: Weak cryptography or TLS
- [Samba: check attribute access rights for ldap adds of computers](https://agentprime.io/advisories/CVE-2020-25720.md)
  `CVE-2020-25720` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 17 Nov 2024 · Tags: Privilege escalation
- [Oauth-server-container: oauth-server-container logs client secret in debug level](https://agentprime.io/advisories/CVE-2024-11217.md)
  `CVE-2024-11217` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 · CVSS 4.9 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: CWE-1295
- [Unbound: heap-buffer-overflow in unbound](https://agentprime.io/advisories/CVE-2024-43168.md)
  `CVE-2024-43168` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 8 Aug 2024 · Tags: Memory corruption
- [Unbound: null pointer dereference in unbound](https://agentprime.io/advisories/CVE-2024-43167.md)
  `CVE-2024-43167` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 4 more · CVSS 2.8 Low · Not analysed yet · Published 8 Aug 2024 · Tags: Memory corruption
- [Qemu: denial of service via improper synchronization in qemu nbd server during socket closure](https://agentprime.io/advisories/CVE-2024-7409.md)
  `CVE-2024-7409` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2024 · Tags: CWE-662
- [Openshift-console: unauthenticated installation of helm charts](https://agentprime.io/advisories/CVE-2024-7079.md)
  `CVE-2024-7079` · CVE record: Red Hat Red Hat OpenShift Container Platform 3.11 and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Jul 2024 · Tags: Authentication bypass
- [Networkmanager: denial of service](https://agentprime.io/advisories/CVE-2024-6501.md)
  `CVE-2024-6501` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 9 Jul 2024 · Tags: Denial of service
- [Openssh: regresshion - race condition in ssh allows rce/dos](https://agentprime.io/advisories/CVE-2024-6387.md)
  `CVE-2024-6387` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 1.00 · Not analysed yet · Published 1 Jul 2024 · Tags: CWE-364
- [Rpm-ostree: world-readable /etc/shadow file](https://agentprime.io/advisories/CVE-2024-2905.md)
  `CVE-2024-2905` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 25 Apr 2024 · Tags: Broken access control
- [Openshift: incomplete fix for rapid reset (cve-2023-44487/cve-2023-39325)](https://agentprime.io/advisories/CVE-2023-6596.md)
  `CVE-2023-6596` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.11 and 2 more · CVSS 7.5 High · Not analysed yet · Published 25 Apr 2024 · Tags: Denial of service
- [Ovn: insufficient validation of bfd packets may lead to denial of service](https://agentprime.io/advisories/CVE-2024-2182.md)
  `CVE-2024-2182` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-346
- [Openvswitch don't match packets on nd_target field](https://agentprime.io/advisories/CVE-2023-5366.md)
  `CVE-2023-5366` · CVE record: openvswitch and 4 more · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2023 · Tags: CWE-345
- [Openshift api admission checks does not enforce "custom-host" permissions](https://agentprime.io/advisories/CVE-2022-3248.md)
  `CVE-2022-3248` · CVE record: kubernetes and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 5 Oct 2023 · Tags: Broken access control
- [Content spoofing](https://agentprime.io/advisories/CVE-2022-4145.md)
  `CVE-2022-4145` · CVE record: openshift and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 5 Oct 2023 · Tags: Other injection
- [Service monitor mac flow is not rate limited](https://agentprime.io/advisories/CVE-2023-3153.md)
  `CVE-2023-3153` · CVE record: ovn and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 4 Oct 2023 · Tags: Denial of service
- [Ocp & fips mode](https://agentprime.io/advisories/CVE-2023-3089.md)
  `CVE-2023-3089` · CVE record: openshift and 4 more · CVSS 7.0 High · Not analysed yet · Published 5 Jul 2023 · Tags: CWE-693
- [Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass](https://agentprime.io/advisories/CVE-2006-4339.md)
  `CVE-2006-4339` · CVE record: Red Hat Red Hat Enterprise Linux 3 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2006 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/technology/red-hat-openshift-container-platform-4.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-openshift-container-platform-4&cursor=WyIyMDI1LTAyLTE4VDE4OjI3OjE2Ljg0MzAwMFoiLCJDVkUtMjAyNS0yNjQ2NSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-openshift-container-platform-4/?cursor=WyIyMDI1LTAyLTE4VDE4OjI3OjE2Ljg0MzAwMFoiLCJDVkUtMjAyNS0yNjQ2NSJd>. Everything for agents: <https://agentprime.io/llms.txt>.