Known vulnerabilities in Red Hat OpenShift Container Platform 5

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-80048	Sssd: sssd-kcm: local denial of service via excessive memory preallocation	Not rated	Oct 6, 2026
CVE-2026-104045	Sssd: sssd: denial of service via race condition in autofs responder	4.7 Medium	Oct 6, 2026
CVE-2026-104046	Sssd: sssd: denial of service via incomplete identity provider authentication requests	6.2 Medium	Oct 6, 2026
CVE-2026-104048	Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation	6.8 Medium	Oct 6, 2026
CVE-2026-104047	Sssd: sssd: information disclosure via query injection in entra id lookups	5.3 Medium	Oct 6, 2026
CVE-2026-88252	Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion	4.7 Medium	Oct 6, 2026
CVE-2026-104044	Sssd: sssd: denial of service via crafted passkey kerberos authentication request	6.2 Medium	Oct 6, 2026
CVE-2026-104043	Sssd: sssd: denial of service via undersized packet parsing in nss responder	5.5 Medium	Oct 6, 2026
CVE-2026-104042	Sssd: sssd: denial of service via out-of-bounds read in pam responder	5.5 Medium	Oct 6, 2026
CVE-2026-104041	Sssd: sssd: denial of service via unbounded negative cache growth	5.5 Medium	Oct 6, 2026
CVE-2026-104039	Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder	4.7 Medium	Oct 6, 2026
CVE-2026-104038	Sssd: sssd: denial of service via missing sid extension in certificate mapping	5.9 Medium	Oct 6, 2026
CVE-2026-104037	Sssd: sssd: denial of service via packet length underflow in autofs responder	5.5 Medium	Oct 6, 2026
CVE-2026-92821	Sssd: sssd: access control bypass via premature ldap access rule evaluation	6.8 Medium	Oct 6, 2026
CVE-2026-104036	Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin	5.8 Medium	Oct 6, 2026
CVE-2026-104035	Sssd: sssd: denial of service via memory exhaustion in kcm responder	5.5 Medium	Oct 6, 2026
CVE-2026-104034	Sssd: sssd: denial of service via use-after-free in kcm ticket renewal	4.7 Medium	Oct 6, 2026
CVE-2026-104033	Sssd: sssd: access control bypass via improper ldap shadow expiration check	5.4 Medium	Oct 6, 2026
CVE-2026-104032	Sssd: sssd: denial of service via unprivileged autofs cache invalidation	5.5 Medium	Oct 6, 2026
CVE-2026-104031	Sssd: sssd: denial of service via memory exhaustion in autofs responder	5.5 Medium	Oct 6, 2026
CVE-2026-104029	Sssd: sssd: denial of service via out-of-bounds read in autofs responder	3.3 Low	Oct 5, 2026
CVE-2026-104030	Sssd: sssd: denial of service via out-of-bounds read during passkey parsing	5.5 Medium	Oct 5, 2026
CVE-2026-83589	A flaw was found in oauth-proxy	6.1 Medium	Oct 1, 2026
CVE-2026-101295	Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction	7.3 High	Sep 30, 2026
CVE-2026-62146	A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite…	7.8 High	Sep 30, 2026

Other Red Hat products