Red Hat Red Hat OpenShift Container Platform 4.13

• CVE-2024-6508 High 8.0 Openshift-console: oauth2 insufficient state parameter entropy 0.7%
• CVE-2024-7409 High 7.5 Qemu: denial of service via improper synchronization in qemu nbd server during socket closure 1.0%
• CVE-2024-6409 High 7.0 Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9 27.9%
• CVE-2024-6387 High 8.1 Openssh: regresshion - race condition in ssh allows rce/dos 99.5%
• CVE-2024-5154 High 8.1 Cri-o: malicious container can create symlink on host 1.2%
• CVE-2024-5037 High 7.5 Openshift/telemeter: iss check during jwt authentication can be bypassed 0.8%
• CVE-2024-3727 High 8.3 Containers/image: digest type does not guarantee valid type 1.3%
• CVE-2024-3154 High 7.2 Cri-o: arbitrary command injection via pod annotation 1.4%
• CVE-2024-1139 High 7.7 Cluster-monitoring-operator: credentials leak 0.9%
• CVE-2024-0874 Medium 5.3 Coredns: cd bit response is cached and served later 0.8%
• CVE-2024-1394 High 7.5 Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads 1.5%
• CVE-2024-1753 High 8.6 Buildah: buildah: container escape via improper bind mount validation 0.5%
• CVE-2024-1725 Medium 6.5 Kubevirt-csi: persistentvolume allows access to hcp's root node 0.6%
• CVE-2023-6476 Medium 6.5 Cri-o: pods are able to break out of resource confinement on cgroupv2 0.9%
• CVE-2023-5408 High 7.2 Openshift: modification of node role labels 1.5%
• CVE-2023-1260 High 8.0 Kube-apiserver: privesc 1.6%