VulnSea

openshift_container_platform vulnerabilities

CVEs whose affected-version data names the openshift_container_platform package (go, rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

485 CVEsRSS

CVE-2025-5914High· 7.8PoC
1y ago

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a…

Midnightlibarchive · libarchiveEPSS 0.44%via NVD
CVE-2025-4598Medium· 4.7
1y ago

A vulnerability was found in systemd-coredump

A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensit…

Sunlitsystemd_project · systemdEPSS 0.79%via NVD
CVE-2024-40635Medium· 4.6PoC
1y ago

containerd: containerd has an integer overflow in User ID handling (CVE-2024-40635)

A flaw was found in containerd package. Containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This issue could ca…

TwilightRed Hat · Red Hat Openshift Data Foundation 4.22EPSS 0.29%via CSAF
CVE-2024-45782High· 7.8
1y ago

A flaw was found in the HFS filesystem

A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name's length…

Twilightgnu · grub2EPSS 0.22%via NVD
CVE-2024-45778Medium· 4.1
1y ago

A stack overflow flaw was found when reading a BFS file system

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash.

Sunlitgnu · grub2EPSS 0.29%via NVD
CVE-2025-0678High· 7.8
1y ago

A flaw was found in grub2

A flaw was found in grub2. When reading data from a squash4 filesystem, grub's squash4 fs module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for intege…

Twilightgnu · grub2EPSS 0.28%via NVD
CVE-2025-26465Medium· 6.8PoC
1y ago

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error …

Twilightopenbsd · opensshEPSS 7.7%via NVD
CVE-2025-5791High· 7.1
1y ago

users: `root` appended to group listings (CVE-2025-5791)

A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in th…

TwilightRed Hat · Red Hat OpenShift Container Platform 4EPSS 0.20%via CSAF
CVE-2024-12088Medium· 6.5
1y ago

A flaw was found in rsync

A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vul…

Sunlitsamba · rsyncEPSS 4.7%via NVD
CVE-2024-12086Medium· 6.1
1y ago

A flaw was found in rsync

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server w…

Sunlitsamba · rsyncEPSS 1.8%via NVD
CVE-2024-12085High· 7.5PoC
1y ago

A flaw was found in rsync which could be triggered when rsync compares file checksums

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak o…

Midnightsamba · rsyncEPSS 8.8%via NVD
CVE-2024-51744Low· 3.1
1y ago

golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (CVE-2024-517…

A flaw was found in the golang-jwt package. Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where users are not checking errors in the way they should be. Especially, if a token is both expired and in…

SunlitRed Hat · Red Hat OpenShift Container Platform 4.16EPSS 0.51%via CSAF
CVE-2024-50312Medium· 5.3
1y ago

A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query

A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a comprehensive list of available queries and mutations. Exposure to this flaw incre…

Sunlitredhat · openshift_container_platformEPSS 0.56%via NVD
CVE-2024-9675High· 7.8⚖ disputed
1y ago

A vulnerability was found in Buildah

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the…

Twilightbuildah_project · buildahEPSS 0.39%via NVD
CVE-2024-9341Medium· 5.4
1y ago

A flaw was found in Go

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic …

Sunlitcontainers · commonEPSS 1.0%via NVD
CVE-2024-8883Medium· 6.1PoC
2y ago

A misconfiguration flaw was found in Keycloak

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as author…

Twilightredhat · build_of_keycloakEPSS 2.1%via NVD
CVE-2024-6387High· 8.1PoC
2y ago

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd)

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by f…

Midnightopenbsd · opensshEPSS 100%via NVD
CVE-2024-1132High· 8.1
2y ago

A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect

A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information withi…

Twilightredhat · build_of_keycloakEPSS 1.6%via NVD
CVE-2024-27304High· 8.1PoC
2y ago

pgx: SQL Injection via Protocol Message Size Overflow (CVE-2024-27304)

pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be…

MidnightRed Hat · RHACS 4.3 for RHEL 8EPSS 1.1%via CSAF
CVE-2024-1635High· 7.5
2y ago

A vulnerability was found in Undertow

A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the conne…

Twilightnetapp · active_iq_unified_managerEPSS 4.6%via NVD
CVE-2023-6291High· 7.1
2y ago

A flaw was found in the redirect_uri validation logic in Keycloak

A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to …

Twilightredhat · keycloakEPSS 0.95%via NVD
CVE-2023-6563High· 7.7
2y ago

An unconstrained memory consumption vulnerability was discovered in Keycloak

An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of offline tokens (> 500,000 users with each having at least 2 saved sessions). If an attacker creates …

Twilightredhat · keycloakEPSS 1.2%via NVD
CVE-2023-6134Medium· 4.6
2y ago

A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token

A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (X…

Sunlitredhat · single_sign-onEPSS 1.3%via NVD
CVE-2023-4853High· 8.1
3y ago

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass …

Twilightquarkus · quarkusEPSS 1.4%via NVD
CVE-2022-39324Medium· 6.7
3y ago

grafana: Spoofing of the originalUrl parameter of snapshots (CVE-2022-39324)

A flaw was found in the grafana package. While creating a snapshot, an attacker may manipulate a hidden HTTP parameter to inject a malicious URL in the "Open original dashboard" button.

SunlitRed Hat · Red Hat Enterprise Linux 8EPSS 0.83%via CSAF
CVE-2022-41721High· 7.5
3y ago

x/net/http2/h2c: request smuggling (CVE-2022-41721)

A request smuggling attack is possible when using MaxBytesHandler. When using MaxBytesHandler, the body of an HTTP request is not fully consumed. When the server attempts to read HTTP2 frames from the connection, it will instead read the b…

TwilightRed Hat · OpenShift Service Mesh 2.1EPSS 1.8%via CSAF
CVE-2022-23524High· 7.5⚖ disputed
3y ago

helm: Denial of service through string value parsing (CVE-2022-23524)

A flaw was found in Helm, a tool for managing Charts, a pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to Uncontrolled Resource Consumption. Input to functions in the _strvals_ package could cause a stack overflo…

TwilightRed Hat · RHACS 4.0 for RHEL 8EPSS 0.76%via CSAF
CVE-2022-23526High· 7.5⚖ disputed
3y ago

helm: Denial of service through schema file (CVE-2022-23526)

A flaw was found in Helm, a tool for managing Charts, a pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the_chartutil_ package that could cause a segmentation violation. The _chartut…

TwilightRed Hat · Red Hat OpenShift Container Platform 4EPSS 0.82%via CSAF
CVE-2022-23525High· 7.5⚖ disputed
3y ago

helm: Denial of service through through repository index file (CVE-2022-23525)

A flaw was found in Helm. Applications that use the _repo_ package in Helm SDK to parse an index file may suffer a denial of service when that input causes a panic that cannot be recovered from. The Helm Client will panic with an index fil…

TwilightRed Hat · Red Hat OpenShift Container Platform 4.14EPSS 0.82%via CSAF
CVE-2022-39307Medium· 5.3
3y ago

grafana: User enumeration via forget password (CVE-2022-39307)

An information leak was discovered in Grafana. Remote unauthenticated users could exploit the forget password feature to discover which user accounts exist.

SunlitRed Hat · Red Hat Enterprise Linux 8EPSS 0.75%via CSAF
openshift_container_platform vulnerabilities (CVEs) — page 16 · VulnSea