Vulnérabilités connues pour Red Hat OpenShift Container Platform 5

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-92822	Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml	6.2 Moyenne	21 oct. 2026
CVE-2026-92823	Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml	6.2 Moyenne	21 oct. 2026
CVE-2026-114038	Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string	5.1 Moyenne	21 oct. 2026
CVE-2026-16460	Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization	7.4 Élevée	19 oct. 2026
CVE-2026-89096	Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd	5.9 Moyenne	16 oct. 2026
CVE-2026-85977	Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding	5.3 Moyenne	16 oct. 2026
CVE-2026-85231	Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding	6.5 Moyenne	16 oct. 2026
CVE-2026-89098	Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd	5.5 Moyenne	16 oct. 2026
CVE-2026-111555	Luksmeta: missing slot-range validation permits out-of-gap device i/o	6.0 Moyenne	16 oct. 2026
CVE-2026-104715	Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass	7.8 Élevée	16 oct. 2026
CVE-2026-92982	A flaw was found in Ansible Operator Plugins	8.5 Élevée	15 oct. 2026
CVE-2026-109968	Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file	5.5 Moyenne	14 oct. 2026
CVE-2026-104795	The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for…	8.8 Élevée	14 oct. 2026
CVE-2026-109971	Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool	4.7 Moyenne	14 oct. 2026
CVE-2026-109970	Clevis: clevis: pkcs#11 token pin written to world-readable file	4.7 Moyenne	14 oct. 2026
CVE-2026-109969	Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask	4.7 Moyenne	14 oct. 2026
CVE-2026-110036	Device-mapper-persistent-data: device-mapper-persistent-data: denial of service via crafted block indices	3.3 Faible	13 oct. 2026
CVE-2026-109976	Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daemon on unbound client connection	4.7 Moyenne	13 oct. 2026
CVE-2026-75888	A flaw was found in the OpenShift console	7.7 Élevée	12 oct. 2026
CVE-2026-107935	Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose	9.3 Critique	9 oct. 2026
CVE-2026-89091	Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution	8.8 Élevée	8 oct. 2026
CVE-2026-107565	Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption	5.1 Moyenne	8 oct. 2026
CVE-2026-93017	The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core…	7.7 Élevée	8 oct. 2026
CVE-2026-107176	Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret	6.8 Moyenne	7 oct. 2026
CVE-2026-107161	Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients	7.5 Élevée	7 oct. 2026

Autres produits Red Hat