RedHat Openshift Container Platform For Linuxone vulnerabilities

17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Latest RedHat Openshift Container Platform For Linuxone vulnerabilities

CVE-2025-13601 — Glib: integer overflow in in g_escape_uri_string() (CVSS 7.7)
CVE-2025-6021 — Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 (CVSS 7.5)
CVE-2024-9676 — Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) (CVSS 6.5)
CVE-2024-8883 — Keycloak: vulnerable redirect uri validation results in open redirec (CVSS 6.1)
CVE-2024-4629 — Keycloak: potential bypass of brute force protection (CVSS 6.5)
CVE-2024-1132 — Keycloak: path transversal in redirection validation (CVSS 8.1)
CVE-2024-1725 — Kubevirt-csi: persistentvolume allows access to hcp's root node (CVSS 6.5)
CVE-2024-1635 — Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol (CVSS 7.5)
CVE-2023-6291 — Keycloak: redirect_uri validation bypass (CVSS 7.1)
CVE-2023-2585 — Keycloak: client access via device auth request spoof (CVSS 8.1)
CVE-2023-5625 — Python-eventlet: patch regression for cve-2021-21419 in some red hat builds (CVSS 7.5)
CVE-2022-4318 — Cri-o: /etc/passwd tampering privesc (CVSS 7.8)
CVE-2022-4039 — Rhsso-container-image: unsecured management interface exposed to adjecent network (CVSS 9.8)
CVE-2022-3916 — Keycloak: session takeover with oidc offline refreshtokens (CVSS 6.8)
CVE-2023-1108 — Undertow: infinite loop in sslconduit during close (CVSS 7.5)
CVE-2023-3089 — Ocp & fips mode (CVSS 7.5)
CVE-2020-8945 — (CVSS 7.5)