TI-2024-06847 CVE-2024-7387 · GHSA-qqv8-ph7f-h3f7
Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy
Priority HIGH 74
A flaw was found in openshift/builder.
RHSA-2024:3718
OpenShift Container Platform 4.17.0 bug fix and security update
Released 2024-10-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.17 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
Fixes 11 records
TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
TI-2024-16848 CVE-2024-25620 · GHSA-v53g-5gjp-272r
Dependency management path traversal in helm
Priority MEDIUM 62
Helm is a tool for managing Charts.
TI-2024-16306 CVE-2024-24789 · GHSA-236w-p7wf-5ph8
Mishandling of corrupt central directory record in archive/zip
Priority MEDIUM 58
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations.
TI-2024-30536 CVE-2024-45496 · GHSA-j8gh-87rx-c7w9
Openshift-controller-manager: elevated build pods can lead to node compromise in openshift
Priority MEDIUM 45
A flaw was found in OpenShift.
TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
Priority MEDIUM 41
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.
TI-2024-03473 CVE-2024-3727 · GHSA-6wvf-f2vw-3425
Containers/image: digest type does not guarantee valid type
Priority LOW 39
A flaw was found in the github.com/containers/image library.
TI-2023-04672 CVE-2023-5077 · GHSA-86c6-3g63-5w64
Vault's Google Cloud Secrets Engine Removed Existing IAM Conditions When Creating / Updating Rolesets
Priority LOW 36
The Vault and Vault Enterprise ("Vault") Google Cloud secrets engine did not preserve existing Google Cloud IAM Conditions upon creating or updating rolesets.
TI-2023-05485 CVE-2023-5954 · GHSA-4qhc-v8r6-8vwm
Vault Requests Triggering Policy Checks May Lead To Unbounded Memory Consumption
Priority LOW 34
HashiCorp Vault and Vault Enterprise inbound client requests triggering a policy check can lead to an unbounded consumption of memory.
TI-2024-18756 CVE-2024-28180 · GHSA-c5q2-7r4c-mv6g
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
Priority LOW 26
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.
TI-2023-03528 CVE-2023-3775 · GHSA-37gg-8xjr-m6x4
Vault Enterprise's Sentinel RGP Policies Allowed For Cross-Namespace Denial of Service
Priority LOW 23
A Vault Enterprise Sentinel Role Governing Policy created by an operator to restrict access to resources in one namespace can be applied to requests outside in another non-descendant namespace, potentially resulting in d…