Openshift Container Platform (Redhat) - vulnerabilities (CVEs)

340 CVEs, 10 in the last 30 days, 1015 known versions, newest CVE from 2026-10-06. Vendor: Redhat.

CVEs of Openshift Container Platform

CVE-2026-104045 - CVSS 4.7 (medium), 2026-10-06: A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous…
CVE-2026-104046 - CVSS 6.2 (medium), 2026-10-06: A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state…
CVE-2026-104048 - CVSS 8.1 (high), 2026-10-06: A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain…
CVE-2026-104047 - CVSS 5.3 (medium), 2026-10-06: A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query…
CVE-2026-88252 - CVSS 5.5 (medium), 2026-10-06: A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available file descriptors (system handles…
CVE-2026-104040 - CVSS 6.1 (medium), 2026-10-06: A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes are not properly escaped before…
CVE-2026-104032 - CVSS 5.5 (medium), 2026-10-06: A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing…
CVE-2026-104031 - CVSS 5.5 (medium), 2026-10-06: A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request processing is not…
CVE-2026-104029 - CVSS 5.5 (medium), 2026-10-05: A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to…
CVE-2026-104030 - CVSS 5.5 (medium), 2026-10-05: A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication…
CVE-2026-90462 - CVSS 5.4 (medium), 2026-09-22: A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppolicy` or `lockout`, a fail-open condition in the…
CVE-2026-90996 - CVSS 5.5 (medium), 2026-09-14: A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Network Security Services (NSS)…
CVE-2026-90995 - CVSS 5.5 (medium), 2026-09-14: A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileges to connect to the PAM (Pluggable Authentication Modules)…
CVE-2026-13002 - CVSS 4.4 (medium), 2026-08-14: A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the…
CVE-2026-19617 - CVSS 5.5 (medium), 2026-08-14: A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager (LVM) metadata configuration with deeply nested structures. This…
CVE-2026-19548 - CVSS 5.5 (medium), 2026-08-12: Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils. The…
CVE-2026-71227 - CVSS 5.1 (medium), 2026-08-05: A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled…
CVE-2026-71226 - CVSS 7.3 (high), 2026-08-05: Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing…
CVE-2026-71225 - CVSS 6.5 (medium), 2026-08-05: A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in stateful modes such as Counter (CTR) or…
CVE-2026-68743 - CVSS 7.1 (high), 2026-08-04: A flaw was found in SSSD. The extract_authtok_v1() function in the PAM responder does not validate the auth_token_length field against the remaining buffer…
CVE-2026-68744 - CVSS 3.3 (low), 2026-08-04: A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all group entries but does not shrink…
CVE-2026-18477 - CVSS 4.4 (medium), 2026-08-03: A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a…
CVE-2026-18508 - CVSS 4.4 (medium), 2026-08-03: A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level…
CVE-2026-68742 - CVSS 5.5 (medium), 2026-08-03: A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in the NSS responder does not validate the addrlen field against the remaining packet…
CVE-2026-13757 - CVSS 6.2 (medium), 2026-06-29: A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form…
CVE-2026-13595 - CVSS 6.8 (medium), 2026-06-29: A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a…
CVE-2026-55653 - CVSS 6.5 (medium), 2026-06-23: A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This…
CVE-2026-12725 - CVSS 5.9 (medium), 2026-06-22: A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing…
CVE-2026-54100 - CVSS 8.3 (high), 2026-06-22: A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. WMCO establishes SSH connections to Windows worker…
CVE-2026-54099 - CVSS 8.8 (high), 2026-06-22: A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. The WICD CSR auto-approver validates that a…
CVE-2026-44495 - CVSS 7.7 (high), 2026-06-11: Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in…
CVE-2026-1784 - CVSS 8.8 (high), 2026-06-02: The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the…
CVE-2026-10533 - CVSS 5 (medium), 2026-06-01: A flaw was found in OpenShift Container Platform. Completed pods with restartPolicy: Never do not count toward ResourceQuota pod limits, and Kubernetes events…
CVE-2026-46579 - CVSS 7.5 (high), 2026-05-29: A flaw was found in the OpenShift Router. When a Route has `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend does not remove `X-SSL-Client-*`…
CVE-2026-42965 - CVSS 7.7 (high), 2026-05-29: A flaw was found in the OpenShift Router. A user with EndpointSlice write access can exploit this vulnerability by creating a Service backed by an FQDN (Fully…
CVE-2026-4408 - CVSS 9.8 (critical), 2026-05-28: A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password…
CVE-2026-1933 - CVSS 7.1 (high), 2026-05-27: A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks,…
CVE-2026-2340 - CVSS 6.5 (medium), 2026-05-27: A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files…
CVE-2026-3012 - CVSS 8 (high), 2026-05-27: A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA…
CVE-2026-48864 - CVSS 7.8 (high), 2026-05-26: A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to…
CVE-2026-4480 - CVSS 9.8 (critical), 2026-05-26: A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command"…
CVE-2026-9149 - CVSS 6.5 (medium), 2026-05-21: A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size…
CVE-2026-9150 - CVSS 6.5 (medium), 2026-05-20: A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted…
CVE-2026-42009 - CVSS 7.5 (high), 2026-05-18: A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator…
CVE-2026-42010 - CVSS 9.8 (critical), 2026-05-07: A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character…
CVE-2026-3833 - CVSS 7.4 (high), 2026-04-30: A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for…
CVE-2026-3832 - CVSS 3.7 (low), 2026-04-30: A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP)…
CVE-2026-33845 - CVSS 9.1 (critical), 2026-04-30: A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and…
CVE-2026-7309 - CVSS 4.3 (medium), 2026-04-28: A flaw was found in the OpenShift Container Platform build system. A user with the `edit` ClusterRole can inject arbitrary environment variables, such as…
CVE-2026-6732 - CVSS 7.5 (high), 2026-04-23: A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that…
CVE-2026-6846 - CVSS 7.8 (high), 2026-04-22: A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format)…
CVE-2026-6845 - CVSS 5 (medium), 2026-04-22: A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by…
CVE-2026-6844 - CVSS 5.5 (medium), 2026-04-22: A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a…
CVE-2026-6843 - CVSS 5.5 (medium), 2026-04-22: A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By creating a directory with a name…
CVE-2026-31431 - CVSS 7.8 (high), 2026-04-22: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit…
CVE-2026-6245 - CVSS 5.5 (medium), 2026-04-15: A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly…
CVE-2026-39979 - CVSS 8.2 (high), 2026-04-13: jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jv_parse_sized() API in libjq accepts a counted buffer…
CVE-2026-4878 - CVSS 7 (high), 2026-04-09: A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function.…
CVE-2026-5745 - CVSS 5.5 (medium), 2026-04-07: A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl()…
CVE-2026-5121 - CVSS 9.8 (critical), 2026-03-30: A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker…
CVE-2026-0966 - CVSS 8.2 (high), 2026-03-26: A flaw was found in libssh. The API function `ssh_get_hexa()` is vulnerable to a denial of service when processing zero-length input. This can be exploited…
CVE-2026-0964 - CVSS 6.3 (medium), 2026-03-26: A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be…
CVE-2026-4897 - CVSS 5.5 (medium), 2026-03-26: A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid…
CVE-2026-4647 - CVSS 6.1 (medium), 2026-03-23: A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs…
CVE-2026-4426 - CVSS 6.5 (medium), 2026-03-19: A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field…
CVE-2026-4424 - CVSS 7.5 (high), 2026-03-19: A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS…
CVE-2026-3442 - CVSS 7.1 (high), 2026-03-16: A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An…
CVE-2026-3441 - CVSS 7.1 (high), 2026-03-16: A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to…
CVE-2025-12801 - CVSS 6.5 (medium), 2026-03-04: A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges…
CVE-2026-0989 - CVSS 3.7 (low), 2026-01-15: A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion…
CVE-2026-0992 - CVSS 2.9 (low), 2026-01-15: A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated…
CVE-2026-0990 - CVSS 5.9 (medium), 2026-01-15: A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML…
CVE-2025-13601 - CVSS 7.7 (high), 2025-11-26: A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to…
CVE-2025-8283 - CVSS 3.7 (low), 2025-07-28: A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark…
CVE-2025-7519 - CVSS 6.7 (medium), 2025-07-14: A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be triggered. This issue can…
CVE-2025-7424 - CVSS 7.5 (high), 2025-07-10: A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML…
CVE-2025-32990 - CVSS 8.2 (high), 2025-07-10: A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain…
CVE-2025-32989 - CVSS 5.3 (medium), 2025-07-10: A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension…
CVE-2025-32988 - CVSS 8.2 (high), 2025-07-10: A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name…
CVE-2025-5351 - CVSS 6.5 (medium), 2025-07-04: A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into…
CVE-2025-5372 - CVSS 8.8 (high), 2025-07-04: A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to…
CVE-2025-5318 - CVSS 8.1 (high), 2025-06-24: A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect…
CVE-2025-6170 - CVSS 2.5 (low), 2025-06-16: A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program…
CVE-2025-6021 - CVSS 7.5 (high), 2025-06-12: A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This…
CVE-2025-5918 - CVSS 6.6 (medium), 2025-06-09: A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for…
CVE-2025-5917 - CVSS 5 (medium), 2025-06-09: A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file…
CVE-2025-5916 - CVSS 5.6 (medium), 2025-06-09: A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive…
CVE-2025-5915 - CVSS 6.6 (medium), 2025-06-09: A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially…
CVE-2025-5914 - CVSS 7.8 (high), 2025-06-09: A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an…
CVE-2025-4598 - CVSS 4.7 (medium), 2025-05-30: A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access…
CVE-2025-0678 - CVSS 7.8 (high), 2025-03-03: A flaw was found in grub2. When reading data from a squash4 filesystem, grub's squash4 fs module uses user-controlled parameters from the filesystem geometry…
CVE-2024-45782 - CVSS 7.8 (high), 2025-03-03: A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the…
CVE-2024-45778 - CVSS 5.5 (medium), 2025-03-03: A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash.
CVE-2025-26465 - CVSS 6.8 (medium), 2025-02-18: A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine…
CVE-2024-12085 - CVSS 7.5 (high), 2025-01-14: A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length…
CVE-2024-12088 - CVSS 7.5 (high), 2025-01-14: A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server…
CVE-2024-12086 - CVSS 6.8 (medium), 2025-01-14: A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are…
CVE-2024-50312 - CVSS 5.3 (medium), 2024-10-22: A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a…
CVE-2024-50311 - CVSS 6.5 (medium), 2024-10-22: A denial of service (DoS) vulnerability was found in OpenShift. This flaw allows attackers to exploit the GraphQL batching functionality. The vulnerability…
CVE-2024-9676 - CVSS 6.5 (medium), 2024-10-15: A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and…