Red Hat OpenShift Container Platform 4.

Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Windows-machine-config-operator: windows-machine-config-operator: ssh host key not verified enables credential theft

• Red Hat OpenShift for Windows Containers 10.19
• Red Hat OpenShift for Windows Containers 10.20
• Weak cryptography or TLS

Windows-machine-config-operator: windows-machine-config-operator: wicd csr extra-organization allows privilege escalation to system:masters

• Red Hat OpenShift for Windows Containers 10.19
• Red Hat OpenShift for Windows Containers 10.20
• Privilege escalation

Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Privilege escalation

Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Samba: denial of service against ad dc wins server

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Cloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on aws

• Red Hat OpenShift Container Platform 4
• Red Hat OpenShift Container Platform 5
• Privilege escalation

Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Command injection

Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-208

Openshift: openshift: non-admin user can bypass resourcequota and flood etcd with events causing cluster-wide api degradation

• Red Hat OpenShift Container Platform 4
• Denial of service

Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation

• Red Hat OpenShift Container Platform 4.17
• Red Hat OpenShift Container Platform 4.18
• Server-side request forgery (SSRF)

Samba: samba: remote code execution in printing subsystem via unescaped job description

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Command injection

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Openvswitch: open vswitch: denial of service via malformed ftp epasv command

• Red Hat Fast Datapath for RHEL 7
• Red Hat Fast Datapath for RHEL 8
• Memory corruption

Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-179

Openshift-controller-manager: openshift container platform: information disclosure via environment variable injection

• Red Hat OpenShift Container Platform 4
• CWE-426

Ovn: ovn: information disclosure via crafted dhcpv6 packets

• Fast Datapath for Red Hat Enterprise Linux 10
• Fast Datapath for Red Hat Enterprise Linux 8
• CWE-130

Libxml2: libxml2: denial of service via crafted xsd-validated document

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Efivar: efivar: denial of service due to stack overflow in device path node parsing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Denial of service

Nano: nano: format string vulnerability leads to denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Binutils: binutils: denial of service via crafted elf file

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Broken access control

Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Sssd: out-of-bounds read in the sssd

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• CWE-427

Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Util-linux: util-linux: access control bypass due to improper hostname canonicalization

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• CWE-289

Corosync: corosync: denial of service via integer overflow in join message validation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Corosync: corosync: denial of service and information disclosure via crafted udp packet

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-253

Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-279

Libssh: libssh: denial of service via improper configuration file handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Path traversal

Libssh: libssh: denial of service via inefficient regular expression processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Denial of service

Libssh: libssh: denial of service due to malformed sftp message

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Libssh: improper sanitation of paths received from scp servers

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Path traversal

Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

P11-kit: null dereference via c_derivekey with specific null parameters

• p11-glue p11-kit
• Red Hat Enterprise Linux 10
• Memory corruption

Polkit: polkit: denial of service via unbounded input processing through standard input

• Red Hat Enterprise Linux 10
• Red Hat Hardened Images
• Denial of service

Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Libarchive: libarchive: denial of service via malformed iso file processing

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• CWE-1335

Binutils: gnu binutils: information disclosure via specially crafted xcoff object file

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Broken access control

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• CWE-279

Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-212

Qemu-kvm: unbounded allocation in virtio-crypto

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Kernel: secure boot does not automatically enable kernel lockdown

• Fedora Project Fedora Linux
• Red Hat Enterprise Linux 9
• Authentication bypass

Libxml2: memory leak leading to local denial of service in xmllint interactive shell

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Networkmanager: networkmanager file access

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• CWE-281

Libxml2: libxml2: denial of service via crafted xml catalogs

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Denial of service