openshift ironic güvenlik açıkları (CVE)

openshift ironic için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

10 sonuç

7.8Yüksek

CVE-2026-15809 4 ay önce

Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env

Red Hat Red Hat OpenShift Container Platform 4.12; Red Hat Red Hat OpenShift Container Platform 4.13; Red Hat Red Hat OpenShift Container Platform 4.14; Red Hat Red Hat OpenShift Container Platform 4.15

A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. T…

7.5Yüksek

CVE-2026-23490 10 ay önce

pyasn1 has a DoS vulnerability in decoder

pyasn1 pyasn1; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

8.1Yüksek

CVE-2025-9566 1 yıl önce

Podman: podman kube play command may overwrite host files

podman; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, …

1.2%EPSS

6.6Orta

CVE-2025-0750 1 yıl önce

Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting

cri-o; Red Hat Red Hat OpenShift Container Platform 4.17; Red Hat Red Hat OpenShift Container Platform 4.18

A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of…

8.6Yüksek

CVE-2024-11218 1 yıl önce

Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

buildah; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enume…

6.5Orta

CVE-2024-9676 2 yıl önce

Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)

containers/storage; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support

A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an au…

1.3%EPSS

7.8Yüksek

CVE-2024-9675 2 yıl önce

Buildah: buildah allows arbitrary directory mount

buildah; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) int…

5.4Orta

CVE-2024-9341 2 yıl önce

Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library

github.com/containers/common; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat OpenShift Container Platform 4.12

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the sy…

1.0%EPSS

8.3Yüksek

CVE-2024-3727 2 yıl önce

Containers/image: digest type does not guarantee valid type

image; Red Hat OADP-1.3-RHEL-9; Red Hat Red Hat Advanced Cluster Security 4.4; Red Hat Red Hat Advanced Cluster Security 4.5

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.

1.3%EPSS

8.0Yüksek

CVE-2023-1260 3 yıl önce

Kube-apiserver: privesc

github.com/openshift/apiserver-library-go; Red Hat Red Hat OpenShift Container Platform 4.10; Red Hat Red Hat OpenShift Container Platform 4.11; Red Hat Red Hat OpenShift Container Platform 4.12

An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would t…

1.6%EPSS