Red Hat OpenShift Container Platform 5.

Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Command injection

Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• CWE-61

Kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Memory corruption

Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env

• Red Hat OpenShift Container Platform 4.12
• Red Hat OpenShift Container Platform 4.13
• Memory corruption
• CWE-116

Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header

• Red Hat Enterprise Linux 10
• Red Hat Cost Management On-Premise 1
• Memory corruption

Sssd: use-after-free crash in sssd' 'sssd_pam' process

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Denial of service

Util-linux: util-linux: heap use-after-free in libblkid nested partition probing

• Red Hat Enterprise Linux 10
• Red Hat Cost Management On-Premise 1
• Memory corruption

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-923

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Memory corruption

Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Privilege escalation

Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Memory corruption

Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Memory corruption

Cloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on aws

• Red Hat OpenShift Container Platform 4
• Red Hat OpenShift Container Platform 5
• Privilege escalation

Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Command injection

Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-208

Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation

• Red Hat OpenShift Container Platform 4.17
• Red Hat OpenShift Container Platform 4.18
• Server-side request forgery (SSRF)