openshift 4.11 Schwachstellen (CVE)

Für openshift 4.11 veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse
8.6Hoch
CVE-2024-21626

runc container breakout through process.cwd trickery and leaked fds

opencontainers runc; Red Hat OCP-Tools-4.15-RHEL-8; Red Hat Red Hat Enterprise Linux 7 Extras; Red Hat Red Hat Enterprise Linux 8

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a worki…

19%EPSS
7.8Hoch
CVE-2022-4318

Cri-o: /etc/passwd tampering privesc

Red Hat Red Hat OpenShift Container Platform 4.11; Red Hat Red Hat OpenShift Container Platform 4.12; Red Hat Red Hat Enterprise Linux 9

A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.

8.0Hoch
CVE-2023-1260

Kube-apiserver: privesc

github.com/openshift/apiserver-library-go; Red Hat Red Hat OpenShift Container Platform 4.10; Red Hat Red Hat OpenShift Container Platform 4.11; Red Hat Red Hat OpenShift Container Platform 4.12

An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would t…

1.6%EPSS