Red Hat Red Hat OpenShift Container Platform 4.14
76 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-114406 | | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-75888 | corrigé en 1791842061 | Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch | HIGH 7.7 | 0.4 % | ||
| CVE-2026-93017 | corrigé en 1791842870 | Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader | HIGH 7.7 | 0.4 % | ||
| CVE-2026-83589 | corrigé en 1791837363 | Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-75887 | corrigé en 1790606051 | Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler | HIGH 7.5 | 0.5 % | ||
| CVE-2026-75885 | corrigé en 1790606051 | Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint | CRITICAL 9.3 | 0.7 % | ||
| CVE-2026-49329 | corrigé en 1791839120 | Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login … | HIGH 7.5 | 0.7 % | ||
| CVE-2026-50236 | corrigé en 1787056403 | Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift … | HIGH 7.4 | 0.5 % | ||
| CVE-2026-50237 | corrigé en 1787056403 | Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthel… | HIGH 7.4 | 0.5 % | ||
| CVE-2026-15816 | | Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() | HIGH 7.5 | 0.5 % | ||
| CVE-2026-49332 | corrigé en 1785549818 | Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams | HIGH 8.5 | 0.5 % | ||
| CVE-2026-16242 | | Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates | CRITICAL 9.4 | 0.9 % | ||
| CVE-2026-15809 | corrigé en 0:1.27.8-22.rhaos4.14.git0633bf1.el8 | Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env | HIGH 7.8 | 0.2 % | ||
| CVE-2026-14476 | | Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypass | HIGH 8.0 | 0.7 % | ||
| CVE-2026-14474 | | Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation | HIGH 8.8 | 0.6 % | ||
| CVE-2026-58015 | | Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive | HIGH 7.5 | 0.8 % | ||
| CVE-2026-58014 | | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" | HIGH 8.6 | 0.6 % | ||
| CVE-2026-14164 | | Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() | HIGH 7.5 | 0.8 % | ||
| CVE-2026-6893 | | Dracut: dracut: root code execution via dhcp options command injection | HIGH 7.5 | 1.3 % | ||
| CVE-2026-1784 | corrigé en 1781870101 | Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection | HIGH 8.8 | 0.2 % | ||
| CVE-2026-46579 | corrigé en 1784587649 | Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend | HIGH 7.5 | 0.4 % | ||
| CVE-2026-4408 | | Samba: remote code execution in samr | CRITICAL 9.8 | 2.5 % | ||
| CVE-2026-1933 | | Samba: missing access check on reparse point operations | HIGH 7.1 | 0.9 % | ||
| CVE-2026-2340 | | Samba: vfs_worm does not block directory modification | MEDIUM 6.5 | 0.9 % | ||
| CVE-2026-3012 | | Samba: group policy certificate enrollment uses http:// without validation | HIGH 8.0 | 0.3 % | ||
| CVE-2026-5260 | | Gnutls: gnutls: information disclosure via heap overread in rsa key exchange | HIGH 8.2 | 0.8 % | ||
| CVE-2026-48864 | | Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data | HIGH 7.8 | 0.2 % | ||
| CVE-2026-42009 | | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability | HIGH 7.5 | 1.3 % | ||
| CVE-2026-42010 | | Gnutls: gnutls: authentication bypass via nul character in username | CRITICAL 9.8 | 1.1 % | ||
| CVE-2026-33846 | | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly | HIGH 7.5 | 1.3 % | ||
| CVE-2026-33845 | | Gnutls: gnutls: denial of service via dtls zero-length fragment | CRITICAL 9.1 | 2.1 % | ||
| CVE-2026-3833 | | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison | HIGH 7.4 | 0.6 % | ||
| CVE-2026-4878 | | Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() | HIGH 7.0 | 0.2 % | ||
| CVE-2026-5121 | | Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing | CRITICAL 9.8 | 1.1 % | ||
| CVE-2026-4424 | | Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing | HIGH 7.5 | 1.3 % | ||
| CVE-2026-4111 | | Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive | HIGH 7.5 | 0.7 % | ||
| CVE-2025-13601 | | Glib: integer overflow in in g_escape_uri_string() | HIGH 7.7 | 0.3 % | ||
| CVE-2025-61662 | | Grub2: missing unregister call for gettext command may lead to use-after-free | HIGH 7.8 | 0.2 % | ||
| CVE-2025-11561 | | Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems | HIGH 8.8 | 0.8 % | ||
| CVE-2025-4953 | | Podman: build context bind mount | HIGH 7.4 | 0.6 % | ||
| CVE-2025-9566 | | Podman: podman kube play command may overwrite host files | HIGH 8.1 | 1.2 % | ||
| CVE-2025-7425 | | Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr | HIGH 7.8 | 0.4 % | ||
| CVE-2025-5987 | | Libssh: invalid return code for chacha20 poly1305 with openssl backend | HIGH 8.1 | 1.7 % | ||
| CVE-2025-5318 | | Libssh: out-of-bounds read in sftp_handle() | HIGH 8.1 | 1.9 % | ||
| CVE-2025-49794 | | Libxml: heap use after free (uaf) leads to denial of service (dos) | CRITICAL 9.1 | 0.8 % | ||
| CVE-2025-49796 | | Libxml: type confusion leads to denial of service (dos) | CRITICAL 9.1 | 1.6 % | ||
| CVE-2025-6021 | | Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 | HIGH 7.5 | 1.4 % | ||
| CVE-2025-5914 | | Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c | HIGH 7.8 | 0.5 % | ||
| CVE-2025-5222 | | Icu: stack buffer overflow in the srbroot::addtag function | HIGH 7.0 | 0.4 % | ||
| CVE-2025-0624 | | Grub2: net: out-of-bounds write in grub_net_search_config_file() | HIGH 7.6 | 1.4 % | ||
| CVE-2024-11218 | | Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile | HIGH 8.6 | 0.4 % | ||
| CVE-2024-12085 | | Rsync: info leak via uninitialized stack contents | HIGH 7.5 | 8.6 % | ||
| CVE-2024-45497 | corrigé en v4.14.0-202506112307.p0.g700dc11.assembly.stream.el8 | Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials | HIGH 7.6 | 0.6 % | ||
| CVE-2024-6538 | | Openshift-console: openshift console: server-side request forgery | MEDIUM 5.3 | 0.6 % | ||
| CVE-2024-9676 | | Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) | MEDIUM 6.5 | 1.3 % | ||
| CVE-2024-9675 | | Buildah: buildah allows arbitrary directory mount | HIGH 7.8 | 0.4 % | ||
| CVE-2024-9341 | | Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library | HIGH 8.2 | 1.0 % | ||
| CVE-2024-45496 | corrigé en v4.14.0-202409130708.p1.g9020ea1.assembly.stream.el8 | Openshift-controller-manager: elevated build pods can lead to node compromise in openshift | CRITICAL 9.9 | 1.0 % | ||
| CVE-2024-7387 | corrigé en v4.14.0-202409111409.p1.g52565ca.assembly.stream.el8 | Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy | CRITICAL 9.1 | 2.3 % | ||
| CVE-2024-6508 | corrigé en v4.14.0-202411131205.p0.g839a801.assembly.stream.el8 | Openshift-console: oauth2 insufficient state parameter entropy | HIGH 8.0 | 0.7 % | ||
| CVE-2024-7409 | | Qemu: denial of service via improper synchronization in qemu nbd server during socket closure | HIGH 7.5 | 1.0 % | ||
| CVE-2024-6409 | | Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9 | HIGH 7.0 | 28 % | ||
| CVE-2024-6387 | | Openssh: regresshion - race condition in ssh allows rce/dos | HIGH 8.1 | 100 % | ||
| CVE-2024-5154 | corrigé en 0:1.27.7-3.rhaos4.14.git674563e.el8 | Cri-o: malicious container can create symlink on host | HIGH 8.1 | 1.2 % | ||
| CVE-2024-5037 | corrigé en v4.14.0-202407021509.p0.g1f72681.assembly.stream.el8 | Openshift/telemeter: iss check during jwt authentication can be bypassed | HIGH 7.5 | 0.8 % | ||
| CVE-2024-3727 | | Containers/image: digest type does not guarantee valid type | HIGH 8.3 | 1.3 % | ||
| CVE-2024-4369 | corrigé en v4.14.0-202406112008.p0.g36b3cca.assembly.stream.el8 | Cluster-image-registry-operator: exposes a secret via env variable in pod definition on azure | MEDIUM 6.8 | 0.7 % | ||
| CVE-2024-3154 | corrigé en 0:1.27.6-2.rhaos4.14.gitb3bd0bf.el9 | Cri-o: arbitrary command injection via pod annotation | HIGH 7.2 | 1.4 % | ||
| CVE-2024-1139 | corrigé en v4.14.0-202404161544.p0.gf350a68.assembly.stream.el8 | Cluster-monitoring-operator: credentials leak | HIGH 7.7 | 0.9 % | ||
| CVE-2024-0874 | corrigé en v4.14.0-202408260910.p0.gfdd6037.assembly.stream.el8 | Coredns: cd bit response is cached and served later | MEDIUM 5.3 | 0.8 % | ||
| CVE-2024-1394 | | Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads | HIGH 7.5 | 1.5 % | ||
| CVE-2024-1753 | | Buildah: buildah: container escape via improper bind mount validation | HIGH 8.6 | 0.5 % | ||
| CVE-2024-1725 | corrigé en v4.14.0-202404161544.p0.g48fafc4.assembly.stream.el8 | Kubevirt-csi: persistentvolume allows access to hcp's root node | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-6476 | corrigé en 0:1.27.2-7.rhaos4.14.git1cc7a64.el9 | Cri-o: pods are able to break out of resource confinement on cgroupv2 | HIGH 7.5 | 0.9 % | ||
| CVE-2023-5408 | corrigé en v4.14.0-202310201027.p0.g8b38d12.assembly.stream | Openshift: modification of node role labels | HIGH 7.2 | 1.5 % | ||
| CVE-2023-1260 | | Kube-apiserver: privesc | HIGH 8.0 | 1.6 % |