All products

Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/agent-service-rhel8

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Moby (Docker Engine) Insufficiently restricted permissions on data directoryCVE-2021-41091 · GHSA-3FWX-PJGW-3558Version ranges need review. github.com/docker/dockergithub.com/moby/moby GoRed Hat Medium Fix reported
golang.org/x/text/language Out-of-bounds Read vulnerabilityCVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/odo GoRed Hat High Fix reported
golang.org/x/text/language Denial of service via crafted Accept-Language headerCVE-2022-32149 · GHSA-69CH-W2M2-3VJPVersion ranges need review. golang.org/x/textOpenShift Developer Tools and Services/odo GoRed Hat High Fix reported
x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 GoRed Hat High Fix reported
kubectl ANSI escape characters not filteredCVE-2021-25743 · GHSA-F9JG-8P32-2F55Version ranges need review. k8s.io/kubernetesRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/agent-service-rhel8 GoRed Hat Low Fix reported
Incorrect Authorization in NATS nats-serverCVE-2022-24450 · GHSA-G6W6-R76C-28J7Version ranges need review. github.com/nats-io/nats-server/v2github.com/nats-io/nats-server GoRed Hat High Fix reported
golang.org/x/sys/unix has Incorrect privilege reporting in syscallCVE-2022-29526 · GHSA-P782-XGP4-8HR8Version ranges need review. golang.org/x/sysstdlib GoRed Hat Medium Fix reported
Incorrect computation for some invalid field elements in crypto/ellipticCVE-2022-23806 · GO-2021-0319 stdlibLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat Medium Fix reported
Panic due to large inputs affecting P-256 curves in crypto/ellipticCVE-2022-28327 · GO-2022-0435 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531 stdlibMigration Toolkit for Containers/cpma GoRed Hat Low Fix reported
kubernetes: OpenShift API admission checks does not enforce "custom-host" permissionsCVE-2022-3248 Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/agent-service-rhel8Red Hat OpenShift Container Platform 3.11/atomic-openshift Red Hat Low No fix reported