Red Hat Red Hat OpenShift Container Platform 3.11

• CVE-2024-7631 Medium 4.3 Openshift-console: openshift console: path traversal 0.5%
• CVE-2024-8676 High 7.4 Cri-o: checkpoint restore can be triggered from different namespaces 0.8%
• CVE-2024-3056 High 7.7 Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack 0.5%
• CVE-2024-7128 Medium 5.3 Openshift-console: unauthenticated data exposure 0.4%
• CVE-2024-7079 Medium 6.5 Openshift-console: unauthenticated installation of helm charts 0.4%
• CVE-2024-5154 High 8.1 Cri-o: malicious container can create symlink on host 1.2%
• CVE-2024-3154 High 7.2 Cri-o: arbitrary command injection via pod annotation 1.4%
• CVE-2024-1753 High 8.6 Buildah: buildah: container escape via improper bind mount validation 0.5%
• CVE-2023-3966 High 7.5 Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet 1.3%
• CVE-2024-0567 High 7.5 Gnutls: rejects certificate chain with distributed trust 1.4%
• CVE-2023-6476 Medium 6.5 Cri-o: pods are able to break out of resource confinement on cgroupv2 0.9%
• CVE-2023-5366 High 7.1 Openvswitch don't match packets on nd_target field 0.4%
• CVE-2022-3248 Medium 4.4 Openshift api admission checks does not enforce "custom-host" permissions 0.5%
• CVE-2022-3466 Medium 4.8 Cri-o: security regression of cve-2022-27652 0.2%
• CVE-2023-3089 High 7.0 Ocp & fips mode 0.5%