Known vulnerabilities in Red Hat OpenShift Container Platform 5

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-68744	Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply	3.3 Low	Aug 4, 2026
CVE-2026-18477	Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape	4.4 Medium	Aug 3, 2026
CVE-2026-18508	Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite	4.4 Medium	Aug 3, 2026
CVE-2026-68742	Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr	5.5 Medium	Aug 3, 2026
CVE-2026-16531	Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet	5.3 Medium	Jul 30, 2026
CVE-2026-16530	Pcp: pcp: remote denial of service and information leakage	6.5 Medium	Jul 30, 2026
CVE-2026-16529	Pcp: pcp: denial of service due to signed integer overflow	7.5 High	Jul 30, 2026
CVE-2026-16527	Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules	7.3 High	Jul 30, 2026
CVE-2026-16526	Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability	8.8 High	Jul 30, 2026
CVE-2026-16524	Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection	7.8 High	Jul 30, 2026
CVE-2026-18107	Criu: criu: container escape via rseq critical section hijack during checkpoint/restore	7.8 High	Jul 28, 2026
CVE-2026-16313	Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export	7.6 High	Jul 28, 2026
CVE-2026-15003	Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service	5.6 Medium	Jul 27, 2026
CVE-2026-16730	Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup	5.5 Medium	Jul 24, 2026
CVE-2026-6390	Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.	6.8 Medium	Jul 23, 2026
CVE-2026-16517	Libarchive: libarchive: signed integer overflow in archive_write_zip_header	2.9 Low	Jul 21, 2026
CVE-2026-16445	Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module	7.5 High	Jul 21, 2026
CVE-2026-16461	Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting	6.5 Medium	Jul 21, 2026
CVE-2026-15811	Kronosnet: kronosnet: encryption key exposure in memory after cryptographic configuration changes	5.8 Medium	Jul 21, 2026
CVE-2026-15812	Kronosnet: kronosnet: access control list bypass via link id spoofing on unencrypted dynamic links	4.8 Medium	Jul 21, 2026
CVE-2026-16277	Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()	6.5 Medium	Jul 20, 2026
CVE-2026-12080	Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys	7.3 High	Jul 20, 2026
CVE-2026-15588	Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering	5.3 Medium	Jul 20, 2026
CVE-2026-15813	Kronosnet: kronosnet: memory corruption and out-of-bounds access via malformed network packet defragmentation	6.5 Medium	Jul 20, 2026
CVE-2026-15809	A flaw was found in CRI-O	7.8 High	Jul 15, 2026

Other Red Hat products