Red Hat OpenShift Virtualization 4/container-native-virtualization/vm-import-controller-rhel8

Red Hat · Package

13 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Moby (Docker Engine) started with non-empty inheritable Linux process capabilitiesCVE-2022-24769 · GHSA-2MM7-X5H6-5PVQVersion ranges need review.	github.com/docker/docker github.com/moby/moby	GoRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/text/language Out-of-bounds Read vulnerabilityCVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2Version ranges need review.	golang.org/x/text OpenShift Developer Tools and Services/odo	GoRed Hat	High	Fix reported	2026-09-10
Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictionsCVE-2022-36109 · GHSA-RC4R-WH2Q-Q6C4Version ranges need review.	github.com/docker/docker Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9	GoRed Hat	Medium	Fix reported	2026-03-03
Panic on inputs with large exponents in math/bigCVE-2021-33198 · GO-2021-0242	stdlib OpenShift Serverless/knative-eventing	GoRed Hat	Medium	Fix reported	2024-05-20
Improper sanitization when resolving values from DNS in netCVE-2021-33195 · GO-2021-0239	stdlib Migration Toolkit for Containers/rhmtc/openshift-migration-controller-rhel8	GoRed Hat	Medium	Fix reported	2024-05-20
Attacker can drop certain headers in net/http/httputilCVE-2021-33197 · GO-2021-0241	stdlib OpenShift Serverless/knative-serving	GoRed Hat	Medium	Fix reported	2024-05-20
Panic on certain certificates in crypto/tlsCVE-2021-34558 · GO-2021-0243	stdlib OpenShift Pipelines/golang	GoRed Hat	Medium	Fix reported	2024-05-20
Panic in ReverseProxy in net/http/httputilCVE-2021-36221 · GO-2021-0245	stdlib OpenShift Serverless/knative-eventing	GoRed Hat	Medium	Fix reported	2024-05-20
Misdirected I/O in syscallCVE-2021-44717 · GO-2022-0289	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Incorrect access control in the go command in cmd/go/internal/modfetchCVE-2022-23773 · GO-2022-0318	toolchain Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Stack exhaustion when compiling deeply nested expressions in regexpCVE-2022-24921 · GO-2021-0347	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
golang.org/x/net/http2 allows uncontrolled memory consumptionCVE-2021-44716 · GHSA-VC3P-29H2-GPCP	golang.org/x/net/http2 golang.org/x/net	GoRed Hat	High	Fix reported	2024-05-20
golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octetCVE-2021-29923	Migration Toolkit for Containers/rhmtc/openshift-migration-must-gather-rhel8 Migration Toolkit for Containers/rhmtc/openshift-migration-registry-rhel8	Red Hat	Medium	No fix reported	Not recorded