Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

Red Hat Red Hat OpenShift Container Platform 4.16

77 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2026-114406Ca-certificates: distrust emudhra intermediate ca certificates due to security concernsMEDIUM 6.80.3 %
CVE-2026-75888corrigé en 1792882312Openshift/console: openshift/console: authenticated ssrf via helm chart url fetchHIGH 7.70.4 %
CVE-2026-93017corrigé en 1792879727Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-readerHIGH 7.70.4 %
CVE-2026-83589corrigé en 1792878232Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirectMEDIUM 6.10.3 %
CVE-2026-62146corrigé en 0:1.29.13-16.rhaos4.16.git84cfdc6.el8Cri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socketHIGH 7.80.2 %
CVE-2026-75887corrigé en 1790636171Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handlerHIGH 7.50.5 %
CVE-2026-75885corrigé en 1790636171Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpointCRITICAL 9.30.7 %
CVE-2026-49329corrigé en 1792883889Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login …HIGH 7.50.7 %
CVE-2026-50236corrigé en 1787054159Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift …HIGH 7.40.5 %
CVE-2026-50237corrigé en 1787054159Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthel…HIGH 7.40.5 %
CVE-2026-15816Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()HIGH 7.50.5 %
CVE-2026-16313Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --exportHIGH 7.60.3 %
CVE-2026-49332corrigé en 1785544039Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreamsHIGH 8.50.5 %
CVE-2026-16242Hypershift: konnectivity proxy-server accepts agent connections without validating client certificatesCRITICAL 9.40.9 %
CVE-2026-15809corrigé en 0:1.29.13-14.rhaos4.16.git84cfdc6.el8Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home envHIGH 7.80.2 %
CVE-2026-14476Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypassHIGH 8.00.7 %
CVE-2026-14474Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalationHIGH 8.80.6 %
CVE-2026-58014Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"HIGH 8.60.6 %
CVE-2026-14164Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()HIGH 7.50.8 %
CVE-2026-6893Dracut: dracut: root code execution via dhcp options command injectionHIGH 7.51.3 %
CVE-2026-1784corrigé en 1780962617Ose-cluster-ingress-operator: remote code execution through haproxy configuration injectionHIGH 8.80.2 %
CVE-2026-46579corrigé en 1784331638Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontendHIGH 7.50.4 %
CVE-2026-4408Samba: remote code execution in samrCRITICAL 9.82.5 %
CVE-2026-1933Samba: missing access check on reparse point operationsHIGH 7.10.9 %
CVE-2026-2340Samba: vfs_worm does not block directory modificationMEDIUM 6.50.9 %
CVE-2026-3012Samba: group policy certificate enrollment uses http:// without validationHIGH 8.00.3 %
CVE-2026-42013Gnutls: gnutls: certificate validation bypass due to oversized subject alternative nameHIGH 8.20.4 %
CVE-2026-5260Gnutls: gnutls: information disclosure via heap overread in rsa key exchangeHIGH 8.20.8 %
CVE-2026-48864Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page dataHIGH 7.80.2 %
CVE-2026-42009Gnutls: gnutls: denial of service via dtls packet reordering vulnerabilityHIGH 7.51.3 %
CVE-2026-42011Gnutls: gnutls: security bypass due to incorrect name constraint handlingHIGH 7.40.5 %
CVE-2026-42010Gnutls: gnutls: authentication bypass via nul character in usernameCRITICAL 9.81.1 %
CVE-2026-33846Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyHIGH 7.51.3 %
CVE-2026-33845Gnutls: gnutls: denial of service via dtls zero-length fragmentCRITICAL 9.12.1 %
CVE-2026-3833Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparisonHIGH 7.40.6 %
CVE-2026-4878Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()HIGH 7.00.2 %
CVE-2026-5121Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processingCRITICAL 9.81.1 %
CVE-2026-4424Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processingHIGH 7.51.3 %
CVE-2026-4111Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchiveHIGH 7.50.7 %
CVE-2025-12801Nfs-utils: rpc.mountd in the nfs-utils privilege escalationMEDIUM 6.50.5 %
CVE-2025-13601Glib: integer overflow in in g_escape_uri_string()HIGH 7.70.3 %
CVE-2025-61662Grub2: missing unregister call for gettext command may lead to use-after-freeHIGH 7.80.2 %
CVE-2025-11561Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systemsHIGH 8.80.8 %
CVE-2025-11234Qemu-kvm: vnc websocket handshake use-after-freeHIGH 7.50.9 %
CVE-2025-4953Podman: build context bind mountHIGH 7.40.6 %
CVE-2025-9566Podman: podman kube play command may overwrite host filesHIGH 8.11.2 %
CVE-2025-7425Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptrHIGH 7.80.4 %
CVE-2025-5987Libssh: invalid return code for chacha20 poly1305 with openssl backendHIGH 8.11.7 %
CVE-2025-5318Libssh: out-of-bounds read in sftp_handle()HIGH 8.11.9 %
CVE-2025-6032Podman: podman missing tls verificationHIGH 8.30.5 %
CVE-2025-49794Libxml: heap use after free (uaf) leads to denial of service (dos)CRITICAL 9.10.8 %
CVE-2025-49796Libxml: type confusion leads to denial of service (dos)CRITICAL 9.11.6 %
CVE-2025-6021Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2HIGH 7.51.4 %
CVE-2025-5914Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.cHIGH 7.80.5 %
CVE-2025-5222Icu: stack buffer overflow in the srbroot::addtag functionHIGH 7.00.4 %
CVE-2025-0624Grub2: net: out-of-bounds write in grub_net_search_config_file()HIGH 7.61.4 %
CVE-2024-11218Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfileHIGH 8.60.4 %
CVE-2024-12085Rsync: info leak via uninitialized stack contentsHIGH 7.58.6 %
CVE-2024-45497corrigé en v4.16.0-202506062300.p0.gd26f300.assembly.stream.el9Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentialsHIGH 7.60.6 %
CVE-2024-8676corrigé en 0:1.29.11-3.rhaos4.16.git16d9bd6.el8Cri-o: checkpoint restore can be triggered from different namespacesHIGH 7.40.8 %
CVE-2024-6538corrigé en v4.16.0-202506020836.p0.g94ae640.assembly.stream.el9Openshift-console: openshift console: server-side request forgeryMEDIUM 5.30.6 %
CVE-2024-10963Pam: improper hostname interpretation in pam_access leads to access control bypassHIGH 7.40.8 %
CVE-2024-50312corrigé en v4.16.0-202501080105.p0.g6fe3e8b.assembly.stream.el9Graphql: information disclosure via graphql introspection in openshiftMEDIUM 5.30.6 %
CVE-2024-9676Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)MEDIUM 6.51.3 %
CVE-2024-9675Buildah: buildah allows arbitrary directory mountHIGH 7.80.4 %
CVE-2024-9407Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instructionMEDIUM 4.70.3 %
CVE-2024-9341Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go libraryHIGH 8.21.0 %
CVE-2024-45496Openshift-controller-manager: elevated build pods can lead to node compromise in openshiftCRITICAL 9.91.0 %
CVE-2024-7387Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategyCRITICAL 9.12.3 %
CVE-2024-6508Openshift-console: oauth2 insufficient state parameter entropyHIGH 8.00.7 %
CVE-2024-7409Qemu: denial of service via improper synchronization in qemu nbd server during socket closureHIGH 7.51.0 %
CVE-2024-7128corrigé en v4.16.0-202508060805.p0.gc145016.assembly.stream.el9Openshift-console: unauthenticated data exposureMEDIUM 5.30.4 %
CVE-2024-6409Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9HIGH 7.028 %
CVE-2024-6387Openssh: regresshion - race condition in ssh allows rce/dosHIGH 8.1100 %
CVE-2024-5154Cri-o: malicious container can create symlink on hostHIGH 8.11.2 %
CVE-2024-5037Openshift/telemeter: iss check during jwt authentication can be bypassedHIGH 7.50.8 %
CVE-2024-0874corrigé en v4.16.0-202406131906.p0.g04d84f7.assembly.stream.el9Coredns: cd bit response is cached and served laterMEDIUM 5.30.8 %