Security
فارسی
All products

Red Hat OpenShift Container Platform 3.11/podman

Red Hat · Package
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Podman vulnerable to memory-based denial of serviceCVE-2024-3056 · GHSA-RPCC-P8XM-RC6PVersion ranges need review. github.com/containers/podman/v2github.com/containers/podman/v3 GoRed Hat High No fix reported
Authz zero length regressionCVE-2024-41110 · GHSA-V23V-6JW2-98FQVersion ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Critical Fix reported
github.com/containers/image allows unexpected authenticated registry accessesCVE-2024-3727 · GHSA-6WVF-F2VW-3425Version ranges need review. github.com/containers/image/v5github.com/containers/image GoRed Hat High Fix reported
yaml package for Go can consume excessive amounts of CPU or memoryCVE-2022-3064 · GHSA-6Q6Q-88XP-6F2RVersion ranges need review. gopkg.in/yaml.v2Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat High Fix reported
Path Traversal in BuildahCVE-2020-10696 · GHSA-FX8W-MJVM-HVPCVersion ranges need review. github.com/containers/buildahRed Hat OpenShift Container Platform 3.11/atomic-openshift GoRed Hat High Fix reported
Buildah processes using chroot isolation may leak environment values to intermediate processesCVE-2021-3602 · GHSA-7638-R9R3-RMJJVersion ranges need review. github.com/containers/buildahRed Hat Enterprise Linux 7/buildah GoRed Hat Medium Fix reported
Podman's default inheritable capabilities for linux container not emptyCVE-2022-27649 · GHSA-QVF8-P83W-V58JVersion ranges need review. github.com/containers/podman/v2github.com/containers/podman/v3 GoRed Hat High Fix reported
Improper Authorization in github.com/containers/libpodCVE-2021-20188 · GHSA-9H63-7QF6-MV6RVersion ranges need review. github.com/containers/libpodRed Hat OpenShift Container Platform 3.11/podman GoRed Hat High Fix reported
Podman's incorrect handling of the supplementary groups may lead to data disclosure, modificationCVE-2022-2989 · GHSA-4WJJ-JWC9-2X96 github.com/containers/podman/v3github.com/containers/podman/v4 GoRed Hat High Fix reported
Podman affected by CVE-2024-1753 container escape at build time CVE-2024-1753 · GHSA-874V-PJ72-92F3 github.com/containers/podman/v4github.com/containers/podman/v5 GoRed Hat Medium Fix reported
Podman Time-of-check Time-of-use (TOCTOU) Race ConditionCVE-2023-0778 · GHSA-QWQV-RQGF-8QH8Version ranges need review. github.com/containers/podman/v4Red Hat Enterprise Linux 7/podman GoRed Hat Medium Fix reported
golang.org/x/net/http vulnerable to a reset floodCVE-2019-9514 · GHSA-39QC-96H7-956F golang.org/x/netRed Hat AMQ Broker 7/jetty GoRed Hat High Fix reported
golang.org/x/net/http vulnerable to ping floodsCVE-2019-9512 · GHSA-HGR8-6H9X-F7Q9 golang.org/x/netRed Hat AMQ Broker 7/jetty GoRed Hat High Fix reported
Request smuggling due to accepting invalid headers in net/http via net/textprotoCVE-2019-16276 · GO-2022-0212 stdlibRed Hat Ceph Storage 2/golang GoRed Hat Medium Fix reported
Data race and crash in net/httpCVE-2020-15586 · GO-2021-0224 stdlibOpenShift Service Mesh 1/jaeger-operator GoRed Hat Medium Fix reported
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
GPGME Go wrapper contains Use After FreeCVE-2020-8945 · GHSA-M6WG-2MWG-4RFQVersion ranges need review. github.com/proglottis/gpgmeRed Hat Enterprise Linux 8/container-tools:1.0/buildah GoRed Hat High Fix reported
golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputsCVE-2020-16845 OpenShift Service Mesh 1/jaeger-operatorOpenShift Service Mesh 1/jaeger Red Hat Medium No fix reported