Security
فارسی
All products

Red Hat OpenShift Container Platform 4/buildah

Red Hat · Package
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerabilityCVE-2024-9355 · GHSA-3H3X-2HWV-HR52Version ranges need review. github.com/golang-fips/opensslNBDE Tang Server/tang-operator-bundle-container GoRed Hat High No fix reported
Link Following in github.com/containers/commonCVE-2024-9341 · GHSA-MC76-5925-C5P6Version ranges need review. github.com/containers/commonRed Hat OpenShift Container Platform 4/buildah GoRed Hat Medium Fix reported
Supplementary groups are not set up properly in github.com/containerd/containerdCVE-2023-25173 · GHSA-HMFX-3PCX-653PVersion ranges need review. github.com/containerd/containerdCryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat Medium Fix reported
Non-empty default inheritable capabilities for linux container in BuildahCVE-2022-27651 · GHSA-C3G4-W6CV-6V7HVersion ranges need review. github.com/containers/buildahRed Hat Enterprise Linux 7/buildah GoRed Hat Medium Fix reported
Buildah processes using chroot isolation may leak environment values to intermediate processesCVE-2021-3602 · GHSA-7638-R9R3-RMJJVersion ranges need review. github.com/containers/buildahRed Hat Enterprise Linux 7/buildah GoRed Hat Medium Fix reported
golang.org/x/text Infinite loopCVE-2020-14040 · GHSA-5RCV-M4M3-HFH7Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/jenkins-operator-container GoRed Hat Medium Fix reported
github.com/ulikunitz/xz fixes readUvarint Denial of Service (DoS)CVE-2021-29482 · GHSA-25XM-HR59-7C27Version ranges need review. github.com/ulikunitz/xzMigration Toolkit for Containers/openshift-migration-plugin-container GoRed Hat High Fix reported
containernetworking/cni improper limitation of path nameCVE-2021-20206 · GHSA-XJQR-G762-PXWPVersion ranges need review. github.com/containernetworking/cniOpenShift Service Mesh 2.0/servicemesh-cni GoRed Hat High Fix reported
Buildah (as part of Podman) vulnerable to Link FollowingCVE-2022-4122 · GHSA-4CRW-W8PW-2HMFVersion ranges need review. github.com/containers/podman/v2github.com/containers/podman/v3 GoRed Hat Medium Fix reported
Large RSA keys can cause high CPU usage in crypto/tlsCVE-2023-29409 · GO-2023-1987 stdlibNode Maintenance Operator/workload-availability/node-maintenance-rhel8-operator GoRed Hat Medium Fix reported
Excessive resource consumption in net/http, net/textproto and mime/multipartCVE-2023-24536 · GO-2023-1705 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Buildah (as part of Podman) vulnerable to Path TraversalCVE-2022-4123 · GHSA-RPRG-4V7Q-87V7Version ranges need review. github.com/containers/podman/v4Red Hat Enterprise Linux 7/buildah GoRed Hat Low No fix reported
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Misdirected I/O in syscallCVE-2021-44717 · GO-2022-0289 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack exhaustion when compiling deeply nested expressions in regexpCVE-2022-24921 · GO-2021-0347 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Exposure of client IP addresses in net/httpCVE-2022-32148 · GO-2022-0520 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Panic when decoding Float and Rat types in math/bigCVE-2022-32189 · GO-2022-0537 stdlibCustom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8 GoRed Hat Low Fix reported