Advisories · Technology

Red Hat OpenShift Container Platform 4.

Every CVE that names Red Hat OpenShift Container Platform 4 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-45774 CVE record

CVSS 6.7 Medium

Grub2: reader/jpeg: heap oob write during jpeg parsing
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 10
- Memory corruption
Not analysed yet 18 Feb 2025
CVE-2024-12243 CVE record

CVSS 5.3 Medium

Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Denial of service
Not analysed yet 10 Feb 2025
CVE-2024-12133 CVE record

CVSS 5.3 Medium

Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
- Denial of service
Not analysed yet 10 Feb 2025
CVE-2025-0650 CVE record

CVSS 8.1 High

Ovn: egress acls may be bypassed via specially crafted udp packet
- Fast Datapath for Red Hat Enterprise Linux 8
- Fast Datapath for Red Hat Enterprise Linux 9
- Broken access control
Not analysed yet 23 Jan 2025
CVE-2024-12084 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Rsync: heap buffer overflow in rsync due to improper checksum length handling
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Memory corruption
Not analysed yet 15 Jan 2025
CVE-2024-12087 CVE record

CVSS 6.5 Medium

Rsync: path traversal vulnerability in rsync
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Path traversal
Not analysed yet 14 Jan 2025
CVE-2024-12747 CVE record

CVSS 5.6 Medium

Rsync: race condition in rsync handling symbolic links
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Race condition
Not analysed yet 14 Jan 2025
CVE-2024-12088 CVE record

CVSS 6.5 Medium

Rsync: --safe-links option bypass leads to path traversal
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Path traversal
Not analysed yet 14 Jan 2025
CVE-2024-12086 CVE record

CVSS 6.1 Medium

Rsync: rsync server leaks arbitrary client files
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- CWE-390
Not analysed yet 14 Jan 2025
CVE-2024-11614 CVE record

CVSS 7.4 High

Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library
- Fast Datapath for Red Hat Enterprise Linux 8
- Fast Datapath for Red Hat Enterprise Linux 9
- Memory corruption
Not analysed yet 18 Dec 2024
CVE-2024-52616 CVE record

CVSS 5.3 Medium

Avahi: avahi wide-area dns predictable transaction ids
- avahi
- Red Hat Enterprise Linux 9
- CWE-334
Not analysed yet 21 Nov 2024
CVE-2024-52615 CVE record

CVSS 5.3 Medium

Avahi: avahi wide-area dns uses constant source port
- avahi
- Red Hat Enterprise Linux 10
- Weak cryptography or TLS
Not analysed yet 21 Nov 2024
CVE-2020-25720 CVE record

CVSS 7.5 High

Samba: check attribute access rights for ldap adds of computers
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Privilege escalation
Not analysed yet 17 Nov 2024
CVE-2024-11217 CVE record

CVSS 4.9 Medium

Oauth-server-container: oauth-server-container logs client secret in debug level
- Red Hat OpenShift Container Platform 4
- CWE-1295
Not analysed yet 15 Nov 2024
CVE-2024-43168 CVE record

CVSS 4.8 Medium

Unbound: heap-buffer-overflow in unbound
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
Not analysed yet 8 Aug 2024
CVE-2024-43167 CVE record

CVSS 2.8 Low

Unbound: null pointer dereference in unbound
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
Not analysed yet 8 Aug 2024
CVE-2024-7409 CVE record

CVSS 7.5 High

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- CWE-662
Not analysed yet 5 Aug 2024
CVE-2024-7079 CVE record

CVSS 6.5 Medium

Openshift-console: unauthenticated installation of helm charts
- Red Hat OpenShift Container Platform 3.11
- Red Hat OpenShift Container Platform 4
- Authentication bypass
Not analysed yet 24 Jul 2024
CVE-2024-6501 CVE record

CVSS 3.1 Low

Networkmanager: denial of service
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 6
- Denial of service
Not analysed yet 9 Jul 2024
CVE-2024-6387 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Openssh: regresshion - race condition in ssh allows rce/dos
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
- CWE-364
Not analysed yet 1 Jul 2024
CVE-2024-2905 CVE record

CVSS 6.2 Medium

Rpm-ostree: world-readable /etc/shadow file
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Broken access control
Not analysed yet 25 Apr 2024
CVE-2023-6596 CVE record

CVSS 7.5 High

Openshift: incomplete fix for rapid reset (cve-2023-44487/cve-2023-39325)
- Red Hat OpenShift Container Platform 4.11
- Red Hat OpenShift Container Platform 4.12
- Denial of service
Not analysed yet 25 Apr 2024
CVE-2024-2182 CVE record

CVSS 6.5 Medium

Ovn: insufficient validation of bfd packets may lead to denial of service
- Fast Datapath for Red Hat Enterprise Linux 8
- Fast Datapath for Red Hat Enterprise Linux 9
- CWE-346
Not analysed yet 12 Mar 2024
CVE-2023-5366 CVE record

CVSS 7.1 High

Openvswitch don't match packets on nd_target field
- openvswitch
- Red Hat Fast Datapath for RHEL 7
- CWE-345
Not analysed yet 6 Oct 2023
CVE-2022-3248 CVE record

CVSS 4.4 Medium

Openshift api admission checks does not enforce "custom-host" permissions
- kubernetes
- Red Hat Advanced Cluster Management for Kubernetes 2
- Broken access control
Not analysed yet 5 Oct 2023
CVE-2022-4145 CVE record

CVSS 4.3 Medium

Content spoofing
- openshift
- Red Hat OpenShift Container Platform 4
- Other injection
Not analysed yet 5 Oct 2023
CVE-2023-3153 CVE record

CVSS 5.3 Medium

Service monitor mac flow is not rate limited
- ovn
- Red Hat Fast Datapath for RHEL 7
- Denial of service
Not analysed yet 4 Oct 2023
CVE-2023-3089 CVE record

CVSS 7.0 High

Ocp & fips mode
- openshift
- Red Hat OpenShift Serverless
- CWE-693
Not analysed yet 5 Jul 2023
CVE-2006-4339 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass
- Red Hat Enterprise Linux 3
- Red Hat Enterprise Linux 4
- Weak cryptography or TLS
Not analysed yet 5 Sept 2006