Known vulnerabilities in Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-54770	Grub2: use-after-free in net_set_vlan	4.9 Medium	Nov 18, 2025
CVE-2025-61664	Grub2: missing unregister call for normal_exit command may lead to use-after-free	4.9 Medium	Nov 18, 2025
CVE-2025-61663	Grub2: missing unregister call for normal commands may lead to use-after-free	4.9 Medium	Nov 18, 2025
CVE-2025-61662	A Use-After-Free vulnerability has been discovered in GRUB's gettext module	7.8 High	Nov 18, 2025
CVE-2025-61661	Grub2: grub2: out-of-bounds write via malicious usb device	4.8 Medium	Nov 18, 2025
CVE-2025-54771	Grub2: use-after-free in grub_file_close()	4.9 Medium	Nov 18, 2025
CVE-2025-10230	Samba: command injection in wins server hook script	10.0 Critical	Nov 7, 2025
CVE-2025-12464	Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode	6.2 Medium	Oct 31, 2025
CVE-2025-11568	Luksmeta: data corruption when handling luks1 partitions with luksmeta	4.4 Medium	Oct 15, 2025
CVE-2025-9640	Samba: vfs_streams_xattr uninitialized memory write possible	4.3 Medium	Oct 15, 2025
CVE-2025-11731	Libxslt: type confusion in exsltfuncresultcompfunction of libxslt	3.1 Low	Oct 14, 2025
CVE-2025-11561	Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems	8.8 High	Oct 9, 2025
CVE-2025-11234	Qemu-kvm: vnc websocket handshake use-after-free	7.5 High	Oct 3, 2025
CVE-2025-10911	Libxslt: use-after-free with key data stored cross-rvt	5.5 Medium	Sep 25, 2025
CVE-2025-4953	Podman: build context bind mount	7.4 High	Sep 16, 2025
CVE-2025-8277	Libssh: memory exhaustion via repeated key exchange in libssh	3.1 Low	Sep 9, 2025
CVE-2025-9566	There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the…	8.1 High	Sep 5, 2025
CVE-2025-4877	Libssh: write beyond bounds in binary to base64 conversion functions	4.5 Medium	Aug 20, 2025
CVE-2025-4437	There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser…	5.7 Medium	Aug 20, 2025
CVE-2025-7195	Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used…	6.4 Medium	Aug 7, 2025
CVE-2025-8556	Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results	3.7 Low	Aug 6, 2025
CVE-2025-8283	Netavark: podman: netavark may resolve hostnames to unexpected hosts	3.7 Low	Jul 28, 2025
CVE-2025-5449	Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service	6.5 Medium	Jul 25, 2025
CVE-2025-8114	Libssh: null pointer dereference in libssh kex session id calculation	4.7 Medium	Jul 24, 2025
CVE-2025-4878	Libssh: use of uninitialized variable in privatekey_from_file()	3.6 Low	Jul 22, 2025

Other Red Hat products