IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API

Vulnerabilidades de openshift serverless (CVE)

Registros CVE publicados para openshift serverless, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1.36 51.33 31.30 1
9 resultados
7.8Alta
CVE-2025-7425

Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

GNOME libxml2; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attr…

7.8Alta
CVE-2025-6020

Linux-pam: linux-pam directory traversal

linux-pam; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

9.1Crítica
CVE-2025-49794

Libxml: heap use after free (uaf) leads to denial of service (dos)

libxml2; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML …

9.1Crítica
CVE-2025-49796

Libxml: type confusion leads to denial of service (dos)

libxml2; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of …

1.6%EPSS
7.8Alta
CVE-2025-5914

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

libarchive; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerabi…

6.0Media
CVE-2023-6717

Keycloak: xss via assertion consumer service url in saml post-binding flow

keycloak; Red Hat Red Hat AMQ Broker 7; Red Hat Red Hat build of Keycloak 22; Red Hat Red Hat build of Keycloak 22.0.10

A flaw was found in the SAML client registration in Keycloak that could allow an administrator to register malicious JavaScript URIs as Assertion Consumer Service POST Binding URLs (ACS), posing a Cross-Site Scripting (XSS) risk. This issue may allow a malici…

7.4Alta
CVE-2024-1249

Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos

keycloak; Red Hat Red Hat AMQ Broker 7; Red Hat Red Hat build of Keycloak 22; Red Hat Red Hat build of Keycloak 22.0.10

A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the applicati…

7.0Alta
CVE-2024-2700

Quarkus-core: leak of local configuration properties into quarkus applications

quarkus-core; Red Hat HawtIO 4.0.0 for Red Hat build of Apache Camel 4; Red Hat Red Hat AMQ Streams 2.7.0; Red Hat Red Hat build of Apicurio Registry 2.6.1 GA

A vulnerability was found in the quarkus-core component. Quarkus captures local environment variables from the Quarkus namespace during the application's build, therefore, running the resulting application inherits the values captured at build time. Some loca…

8.1Alta
CVE-2023-4853

Quarkus: http security policy bypass

Red Hat Openshift Serverless 1 on RHEL 8; Red Hat Red Hat build of OptaPlanner 8; Red Hat Red Hat build of Quarkus 2.13.8.SP2; Red Hat Red Hat Camel Extensions for Quarkus 2.13.3-1

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy al…

2.3%EPSS