Openshift Ironic (Redhat) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2026-07-15. Vendor: Redhat.
CVEs of Openshift Ironic
- CVE-2026-15809 - CVSS 7.8 (high), 2026-07-15: A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting…
- CVE-2026-23490 - CVSS 7.5 (high), 2026-01-16: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed…
- CVE-2025-9566 - CVSS 8.1 (high), 2025-09-05: There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a…
- CVE-2024-11218 - CVSS 8.6 (high), 2025-01-22: A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a…
- CVE-2024-9676 - CVSS 6.5 (medium), 2024-10-15: A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and…
- CVE-2024-9341 - CVSS 8.2 (high), 2024-10-01: A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the…
- CVE-2024-3727 - CVSS 8.3 (high), 2024-05-14: A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a…
- CVE-2023-5625 - CVSS 7.5 (high), 2023-11-01: A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419…
- CVE-2023-1260 - CVSS 8 (high), 2023-09-24: An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given…
- CVE-2022-3466 - CVSS 5.3 (medium), 2023-09-15: The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658,…
