Red Hat OpenShift Virtualization 4/container-native-virtualization/multus-dynamic-networks-rhel9

Red Hat · Package

14 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	High	Fix reported	2026-10-03
Unbounded allocation when parsing GNU sparse map in archive/tarCVE-2025-58183 · GO-2025-4014	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9	GoRed Hat	Medium	Fix reported	2026-10-02
containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pullCVE-2026-53488 · GHSA-XHF5-7WJV-PQXPVersion ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	High	Fix reported	2026-09-10
containerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329 · GHSA-M6HQ-P25P-FFR2Version ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	Medium	Fix reported	2026-09-10
containerd affected by a local privilege escalation via wide permissions on CRI directoryCVE-2024-25621 · GHSA-PWHC-RPQ9-4C8WVersion ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	High	Fix reported	2026-09-10
go-git: Credential leak via cross-host redirect in smart HTTP transportCVE-2026-41506 · GHSA-3XC5-WRHM-F963Version ranges need review.	github.com/go-git/go-git/v5 github.com/go-git/go-git/v6	GoRed Hat	Medium	Fix reported	2026-09-10
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review.	google.golang.org/grpc Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Critical	Fix reported	2026-09-10
runc container escape and denial of service due to arbitrary write gadgets and procfs write redirectsCVE-2025-52881 · GHSA-CGRX-MC8F-2PRMVersion ranges need review.	github.com/opencontainers/runc github.com/opencontainers/selinux	GoRed Hat	High	Fix reported	2026-09-10
containerd has an integer overflow in User ID handlingCVE-2024-40635 · GHSA-265R-HFXG-FHMGVersion ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	Medium	Fix reported	2026-09-10
Supplementary groups are not set up properly in github.com/containerd/containerdCVE-2023-25173 · GHSA-HMFX-3PCX-653PVersion ranges need review.	github.com/containerd/containerd Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator	GoRed Hat	Medium	Fix reported	2026-09-10
Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	High	Fix reported	2026-08-14
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-02-17
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review.	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-02-04
squirrel: Squirrel: Heap-based buffer overflow allows local denial of serviceCVE-2026-8261	Deployment Validation Operator/dvo/deployment-validation-rhel8-operator MCP Server for Red Hat OpenShift/openshift-mcp-beta/openshift-mcp-server-rhel9	Red Hat	Medium	No fix reported	Not recorded