Vulnérabilités connues pour Red Hat OpenShift Container Platform 4

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-87114	A flaw was found in kube-compare	7.1 Élevée	28 sept. 2026
CVE-2026-93834	Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape	8.8 Élevée	25 sept. 2026
CVE-2026-75887	A flaw was found in the OpenShift console	7.5 Élevée	23 sept. 2026
CVE-2026-75886	A flaw was found in openshift/console	7.2 Élevée	23 sept. 2026
CVE-2026-90462	Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization	5.4 Moyenne	22 sept. 2026
CVE-2026-94640	Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service	7.5 Élevée	22 sept. 2026
CVE-2026-95619	Gcc: libstdc++ integer overflow in `new` operator	7.7 Élevée	22 sept. 2026
CVE-2026-95508	Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu	7.4 Élevée	22 sept. 2026
CVE-2026-75939	Openshift/oc-mirror: release signature verification: openpgp signatureerror checked before signed body is consumed	7.4 Élevée	21 sept. 2026
CVE-2026-92574	Cri-o: cri-o checkpoint restore bypasses destination security context	8.8 Élevée	21 sept. 2026
CVE-2026-15801	Cri-o: cri-o: insufficient validation during container checkpoint restore	8.0 Élevée	21 sept. 2026
CVE-2026-75885	A flaw was found in the OpenShift console	9.3 Critique	18 sept. 2026
CVE-2026-81627	Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram	8.2 Élevée	18 sept. 2026
CVE-2026-76781	Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute	5.5 Moyenne	17 sept. 2026
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 Élevée	17 sept. 2026
CVE-2026-42784	Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion	7.4 Élevée	16 sept. 2026
CVE-2025-11395	Podman: arbitrary file write when importing oci archive	5.5 Moyenne	15 sept. 2026
CVE-2026-79699	Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory	4.4 Moyenne	15 sept. 2026
CVE-2026-79705	Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers	4.5 Moyenne	15 sept. 2026
CVE-2026-90996	Sssd: sssd: denial of service in nss responder via crafted zero-length requests	4.0 Moyenne	14 sept. 2026
CVE-2026-90995	Sssd: sssd: local denial of service due to null pointer dereference in pam responder	5.5 Moyenne	14 sept. 2026
CVE-2026-90994	Sssd: sssd: denial of service via malformed pam v1 requests	4.0 Moyenne	14 sept. 2026
CVE-2026-90463	Sssd: local oob read in nss service request parsers (`sss_nss_protocol_parse_svc_name` / `sss_nss_protocol_parse_svc_port`)	4.0 Moyenne	14 sept. 2026
CVE-2026-89329	Device-mapper-multipath: local denial of service via blocking ipc send operations	6.2 Moyenne	11 sept. 2026
CVE-2026-84828	Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token	6.5 Moyenne	10 sept. 2026

Autres produits Red Hat