Security
فارسی
All products

Red Hat Enterprise Linux 8/container-tools:rhel8/runc

Red Hat · Package
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database filesCVE-2026-61801 · GHSA-MJCV-P78Q-W5FWVersion ranges need review. github.com/moby/sys/userAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
HTTP/2 transport accepts malformed framing-related headers in net/httpCVE-2026-78660 · GO-2026-6610 golang.org/x/netstdlib GoRed Hat Medium Fix reported
HTTP/1 client connection desynchronization after CONNECT rejection in net/httpCVE-2026-56866 · GO-2026-6605 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
HTTP/2 server crash due to HPACK encoder race in net/httpCVE-2026-97032 · GO-2026-6617 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Double flow control refund on HTTP/2 server streams in net/httpCVE-2026-78663 · GO-2026-6612 golang.org/x/netstdlib GoRed Hat Medium Fix reported
HTTP/2 server memory exhaustion due to Trailer headers in net/httpCVE-2026-78659 · GO-2026-6603 golang.org/x/netstdlib GoRed Hat Medium Fix reported
HTTP/1 server connection desynchronization after 2xx CONNECT response in net/httpCVE-2026-94439 · GO-2026-6613 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
Invoking Encrypted Client Hello privacy leak in crypto/tlsCVE-2026-42505 · GO-2026-5856 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerabilityCVE-2024-9355 · GHSA-3H3X-2HWV-HR52Version ranges need review. github.com/golang-fips/opensslNBDE Tang Server/tang-operator-bundle-container GoRed Hat High No fix reported
runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations CVE-2026-41579 · GHSA-XJVP-4FHW-GC47Version ranges need review. github.com/opencontainers/runcRed Hat Enterprise Linux 8/container-tools:rhel8/runc GoRed Hat Medium Fix reported
runc can be confused to create empty files/directories on the hostCVE-2024-45310 · GHSA-JFVP-7X6P-H2PVVersion ranges need review. github.com/opencontainers/runcRed Hat Enterprise Linux 7/runc GoRed Hat Medium Fix reported
Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration in RunCCVE-2021-43784 · GHSA-V95C-P5HM-XQ8FVersion ranges need review. github.com/opencontainers/runcRed Hat Enterprise Linux 8/container-tools:2.0/runc GoRed Hat Medium Fix reported
Cilium node based network policies may incorrectly allow workload trafficCVE-2025-30163 · GHSA-C6PF-2V8J-96MCVersion ranges need review. github.com/cilium/ciliumNetwork Observability Operator/network-observability/network-observability-ebpf-agent-rhel9 GoRed Hat Low Fix reported
Quadratic complexity when parsing some invalid inputs in encoding/pemCVE-2025-61723 · GO-2025-4009 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
ALPN negotiation error contains attacker controlled information in crypto/tlsCVE-2025-58189 · GO-2025-4008 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Parsing DER payload can cause memory exhaustion in encoding/asn1CVE-2025-58185 · GO-2025-4011 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Improper access to parent directory of root in osCVE-2025-22873 · GO-2026-4403 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Cilium East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancersCVE-2025-30162 · GHSA-24QP-4XX8-3JVJVersion ranges need review. github.com/cilium/ciliumNetwork Observability Operator/network-observability/network-observability-ebpf-agent-rhel9 GoRed Hat Low Fix reported