All products

Red Hat OpenShift Virtualization 4/container-native-virtualization/cnv-containernetworking-plugins

Red Hat · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
CNA Plugins Portmap nftables backend can intercept non-local trafficCVE-2025-67499 · GHSA-JV3W-X3R3-G6RMVersion ranges need review. github.com/containernetworking/pluginsRed Hat Enterprise Linux 8/container-tools:rhel8/containernetworking-plugins GoRed Hat Medium Fix reported
runc container escape and denial of service due to arbitrary write gadgets and procfs write redirectsCVE-2025-52881 · GHSA-CGRX-MC8F-2PRMVersion ranges need review. github.com/opencontainers/runcgithub.com/opencontainers/selinux GoRed Hat High Fix reported
Sensitive headers incorrectly sent after cross-domain redirect in net/httpCVE-2024-45336 · GO-2025-3420 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
Panic on certain certificates in crypto/tlsCVE-2021-34558 · GO-2021-0243 stdlibOpenShift Pipelines/golang GoRed Hat Medium Fix reported
Incorrect access control in the go command in cmd/go/internal/modfetchCVE-2022-23773 · GO-2022-0318 toolchainMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack exhaustion when compiling deeply nested expressions in regexpCVE-2022-24921 · GO-2021-0347 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Panic due to large inputs affecting P-256 curves in crypto/ellipticCVE-2022-28327 · GO-2022-0435 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531 stdlibMigration Toolkit for Containers/cpma GoRed Hat Low Fix reported
golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octetCVE-2021-29923 Migration Toolkit for Containers/rhmtc/openshift-migration-must-gather-rhel8Migration Toolkit for Containers/rhmtc/openshift-migration-registry-rhel8 Red Hat Medium No fix reported