Red Hat Red Hat OpenShift Container Platform 4

• CVE-2025-3576 Medium 5.9 Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions 0.4%
• CVE-2025-3416 Low 3.7 Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch` 0.5%
• CVE-2024-7631 Medium 4.3 Openshift-console: openshift console: path traversal 0.5%
• CVE-2024-8176 High 7.5 Libexpat: expat: improper restriction of xml entity expansion depth in libexpat 1.4%
• CVE-2025-0686 Medium 6.4 Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat 0.3%
• CVE-2025-0685 Medium 6.4 Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data 0.3%
• CVE-2025-0684 Medium 6.4 Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data 0.3%
• CVE-2025-0678 High 7.8 Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data 0.3%
• CVE-2024-45782 High 7.8 Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382) 0.2%
• CVE-2024-45778 Medium 4.1 Grub2: fs/bfs: integer overflow in the bfs parser. 0.3%
• CVE-2024-45779 Medium 6.0 Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser 0.3%
• CVE-2024-45780 Medium 6.7 Grub2: fs/tar: integer overflow causes heap oob write 0.3%
• CVE-2025-0689 High 7.8 Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution 0.5%
• CVE-2025-1125 High 7.8 Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write 0.5%
• CVE-2025-26466 Medium 5.9 Openssh: denial-of-service in openssh 38.7%
• CVE-2025-0690 Medium 6.1 Grub2: read: integer overflow may lead to out-of-bounds write 0.8%
• CVE-2025-0677 Medium 6.4 Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks 0.3%
• CVE-2025-1118 Medium 4.4 Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled 0.3%
• CVE-2024-45777 Medium 6.7 Grub2: grub-core/gettext: integer overflow leads to heap oob write. 0.3%
• CVE-2025-0622 Medium 6.4 Grub2: command/gpg: use-after-free due to hooks not being removed on module unload 0.3%
• CVE-2024-45783 Medium 4.4 Grub2: fs/hfs+: refcount can be decremented twice 0.3%
• CVE-2024-45781 Medium 6.7 Grub2: fs/ufs: oob write in the heap 0.3%
• CVE-2024-45776 Medium 6.7 Grub2: grub-core/gettext: integer overflow leads to heap oob write and read. 0.3%
• CVE-2024-45775 Medium 5.2 Grub2: commands/extcmd: missing check for failed allocation 0.3%
• CVE-2025-26465 Medium 6.8 Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled 7.7%
• CVE-2024-45774 Medium 6.7 Grub2: reader/jpeg: heap oob write during jpeg parsing 0.3%
• CVE-2024-12243 Medium 5.3 Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos 1.3%
• CVE-2024-12133 Medium 5.3 Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos 1.1%
• CVE-2025-0650 High 8.1 Ovn: egress acls may be bypassed via specially crafted udp packet 0.9%
• CVE-2024-12084 Critical 9.8 Rsync: heap buffer overflow in rsync due to improper checksum length handling 72.5%
• CVE-2024-12087 Medium 6.5 Rsync: path traversal vulnerability in rsync 2.3%
• CVE-2024-12747 Medium 5.6 Rsync: race condition in rsync handling symbolic links 0.4%
• CVE-2024-12088 Medium 6.5 Rsync: --safe-links option bypass leads to path traversal 4.6%
• CVE-2024-12086 Medium 6.1 Rsync: rsync server leaks arbitrary client files 1.8%
• CVE-2024-11614 High 7.4 Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library 0.6%
• CVE-2024-12401 Medium 4.4 Cert-manager: potential dos when parsing specially crafted pem inputs 0.7%
• CVE-2024-8676 High 7.4 Cri-o: checkpoint restore can be triggered from different namespaces 0.8%
• CVE-2024-52616 Medium 5.3 Avahi: avahi wide-area dns predictable transaction ids 0.7%
• CVE-2024-52615 Medium 5.3 Avahi: avahi wide-area dns uses constant source port 0.6%
• CVE-2024-0793 High 7.7 Kube-controller-manager: malformed hpa v1 manifest causes crash 0.6%
• CVE-2020-25720 High 7.5 Samba: check attribute access rights for ldap adds of computers 0.5%
• CVE-2024-11217 Medium 4.9 Oauth-server-container: oauth-server-container logs client secret in debug level 0.4%
• CVE-2024-9407 Medium 4.7 Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction 0.3%
• CVE-2024-8418 High 7.5 Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service 0.8%
• CVE-2024-43168 Medium 4.8 Unbound: heap-buffer-overflow in unbound 0.3%
• CVE-2024-43167 Low 2.8 Unbound: null pointer dereference in unbound 0.4%
• CVE-2024-7409 High 7.5 Qemu: denial of service via improper synchronization in qemu nbd server during socket closure 1.0%
• CVE-2024-3056 High 7.7 Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack 0.5%
• CVE-2024-7079 Medium 6.5 Openshift-console: unauthenticated installation of helm charts 0.4%
• CVE-2024-6501 Low 3.1 Networkmanager: denial of service 0.4%