Security
فارسی
All products

Red Hat OpenShift Container Platform 4/openshift-security-profiles-operator-container

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325 · GHSA-4374-P667-P6C8Version ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795 · GHSA-45X7-PX36-X8W8Version ranges need review. russhgolang.org/x/crypto Rust / CargoGoPyPIRed Hat Medium Fix reported
Supplementary groups are not set up properly in github.com/containerd/containerdCVE-2023-25173 · GHSA-HMFX-3PCX-653PVersion ranges need review. github.com/containerd/containerdCryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat Medium Fix reported
goproxy Denial of Service vulnerabilityCVE-2023-37788 · GHSA-4R8X-2P26-976PVersion ranges need review. github.com/elazarl/goproxyLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat High Fix reported
Cosign vulnerable to possible endless data attack from attacker-controlled registryCVE-2023-46737 · GHSA-VFP6-JRW2-99G9Version ranges need review. github.com/sigstore/cosign/v2github.com/sigstore/cosign GoRed Hat Low Fix reported
Helm vulnerable to information disclosure via getHostByName Function CVE-2023-25165 · GHSA-PWCW-6F5G-GXF8Version ranges need review. helm.sh/helm/v3Cryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat Medium Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
Data Amplification in HashiCorp go-getterCVE-2023-0475 · GHSA-JPXJ-2JVG-6JV9Version ranges need review. github.com/hashicorp/go-getter/v2github.com/hashicorp/go-getter GoRed Hat Medium Fix reported
cosign's `cosign verify-attestaton --type` can report a false positive if any attestation existsCVE-2022-35929 · GHSA-VJXV-45G9-9296Version ranges need review. github.com/sigstore/cosignOpenShift Serverless/openshift-serverless-1/client-kn-rhel8 GoRed Hat High Fix reported
Etcd-io Improper Authentication vulnerabilityCVE-2021-28235 · GHSA-GMPH-WF7J-9GCM go.etcd.io/etcd/v3Logging Subsystem for Red Hat OpenShift/openshift-logging/lokistack-gateway-rhel8 GoRed Hat Critical No fix reported