Red Hat OpenShift Virtualization 4/container-native-virtualization/vm-import-virtv2v-rhel8

Red Hat · Package

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Moby (Docker Engine) started with non-empty inheritable Linux process capabilitiesCVE-2022-24769 · GHSA-2MM7-X5H6-5PVQVersion ranges need review.	github.com/docker/docker github.com/moby/moby	GoRed Hat	Medium	Fix reported	2026-09-10
golang.org/x/text/language Out-of-bounds Read vulnerabilityCVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2Version ranges need review.	golang.org/x/text OpenShift Developer Tools and Services/odo	GoRed Hat	High	Fix reported	2026-09-10
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review.	github.com/prometheus/client_golang Cost Management Metrics Operator/costmanagement-metrics-operator-container	GoRed Hat	High	Fix reported	2026-09-10
Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictionsCVE-2022-36109 · GHSA-RC4R-WH2Q-Q6C4Version ranges need review.	github.com/docker/docker Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9	GoRed Hat	Medium	Fix reported	2026-03-03
Uncontrolled memory consumption in math/bigCVE-2022-23772 · GO-2021-0317	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Panic due to large inputs affecting P-256 curves in crypto/ellipticCVE-2022-28327 · GO-2022-0435	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Medium	Fix reported	2024-05-20
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531	stdlib Migration Toolkit for Containers/cpma	GoRed Hat	Low	Fix reported	2024-05-20