Red Hat Red Hat OpenShift Container Platform 4.18

• CVE-2025-5987 High 8.1 Libssh: invalid return code for chacha20 poly1305 with openssl backend 1.7%
• CVE-2025-5318 Medium 5.4 Libssh: out-of-bounds read in sftp_handle() 1.9%
• CVE-2025-6032 High 8.3 Podman: podman missing tls verification 0.5%
• CVE-2025-49794 Critical 9.1 Libxml: heap use after free (uaf) leads to denial of service (dos) 0.8%
• CVE-2025-49796 Critical 9.1 Libxml: type confusion leads to denial of service (dos) 1.6%
• CVE-2025-6021 High 7.5 Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 1.4%
• CVE-2025-5914 High 7.8 Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c 0.5%
• CVE-2025-5222 High 7.0 Icu: stack buffer overflow in the srbroot::addtag function 0.4%
• CVE-2025-0624 High 7.6 Grub2: net: out-of-bounds write in grub_net_search_config_file() 1.4%
• CVE-2025-0750 Medium 6.6 Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting 0.3%
• CVE-2024-11218 High 8.6 Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile 0.4%
• CVE-2024-12085 High 7.5 Rsync: info leak via uninitialized stack contents 8.6%
• CVE-2024-45497 High 7.6 Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentials 0.6%
• CVE-2024-12698 Medium 6.5 Ose-olm-catalogd-container: incomplete fix for rapid reset (cve-2023-39325/cve-2023-44487) 0.5%
• CVE-2024-8676 High 7.4 Cri-o: checkpoint restore can be triggered from different namespaces 0.8%
• CVE-2024-6538 Medium 5.3 Openshift-console: openshift console: server-side request forgery 0.6%
• CVE-2024-10963 High 7.4 Pam: improper hostname interpretation in pam_access leads to access control bypass 0.8%
• CVE-2024-50312 Medium 5.3 Graphql: information disclosure via graphql introspection in openshift 0.6%
• CVE-2024-50311 Medium 6.5 Graphql: denial of service (dos) vulnerability via graphql batching 0.6%
• CVE-2024-9676 Medium 6.5 Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) 1.3%
• CVE-2024-9675 High 7.8 Buildah: buildah allows arbitrary directory mount 0.4%
• CVE-2024-9341 Medium 5.4 Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library 1.0%
• CVE-2024-45496 Critical 9.9 Openshift-controller-manager: elevated build pods can lead to node compromise in openshift 1.0%
• CVE-2024-7387 Critical 9.1 Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy 2.3%
• CVE-2024-6508 High 8.0 Openshift-console: oauth2 insufficient state parameter entropy 0.7%
• CVE-2024-7128 Medium 5.3 Openshift-console: unauthenticated data exposure 0.4%
• CVE-2024-0406 Medium 6.1 Mholt/archiver: path traversal vulnerability 0.9%