Vulnérabilités connues pour Red Hat OpenShift Container Platform 4

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-123876	Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation	4.4 Moyenne	6 nov. 2026
CVE-2026-123037	Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)	6.7 Moyenne	6 nov. 2026
CVE-2026-82976	Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret	7.1 Élevée	3 nov. 2026
CVE-2026-120831	Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service	6.5 Moyenne	3 nov. 2026
CVE-2026-120830	Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure	7.4 Élevée	3 nov. 2026
CVE-2026-120194	Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step	7.5 Élevée	31 oct. 2026
CVE-2026-115456	Gcc: out-of-bounds read in std::from_chars	3.7 Faible	30 oct. 2026
CVE-2026-115455	Gcc: stack overflow in std::bitset on libstdc++	6.5 Moyenne	30 oct. 2026
CVE-2026-114691	Gcc: integer wrap in `std	5.9 Moyenne	30 oct. 2026
CVE-2026-114690	Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std	6.2 Moyenne	30 oct. 2026
CVE-2026-118593	Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)	5.9 Moyenne	30 oct. 2026
CVE-2026-92092	A flaw was found in openshift-ansible	7.4 Élevée	29 oct. 2026
CVE-2026-93009	Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder	4.3 Moyenne	29 oct. 2026
CVE-2026-93010	Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check	4.3 Moyenne	29 oct. 2026
CVE-2026-93006	Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content	6.8 Moyenne	29 oct. 2026
CVE-2026-93007	Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation	5.3 Moyenne	29 oct. 2026
CVE-2026-93011	Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms	5.3 Moyenne	29 oct. 2026
CVE-2026-93008	Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations	6.8 Moyenne	29 oct. 2026
CVE-2026-85498	Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow	3.5 Faible	29 oct. 2026
CVE-2026-109411	Samba: access control bypass via vfs_ceph_rgw case-insensitive open	8.1 Élevée	28 oct. 2026
CVE-2026-116497	Gssproxy: gssproxy: null pointer dereference in gssx_init_sec_context crashes daemon	5.5 Moyenne	26 oct. 2026
CVE-2026-115449	Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest	3.5 Faible	22 oct. 2026
CVE-2026-115424	A flaw was found in the OpenShift client oc	5.5 Moyenne	22 oct. 2026
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Moyenne	21 oct. 2026
CVE-2026-114236	Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers	3.3 Faible	21 oct. 2026

Autres produits Red Hat