Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

openshift_container_platform Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Published	Severity
`CVE-2026-13002`Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing	Exploitation statusNot known exploited	FixNot confirmed	Published08/14/2026	SeverityMedium
`CVE-2026-19617`Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser	Exploitation statusNot known exploited	FixNot confirmed	Published08/14/2026	SeverityMedium
`CVE-2026-19548`Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing	Exploitation statusNot known exploited	FixNot confirmed	Published08/12/2026	SeverityMedium
`CVE-2026-71227`Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return	Exploitation statusNot known exploited	FixYes	Published08/05/2026	SeverityMedium
`CVE-2026-71226`Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path	Exploitation statusNot known exploited	FixYes	Published08/05/2026	SeverityHigh
`CVE-2026-71225`Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries	Exploitation statusNot known exploited	FixYes	Published08/05/2026	SeverityMedium
`CVE-2026-68743`Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1	Exploitation statusNot known exploited	FixNot confirmed	Published08/04/2026	SeverityMedium
`CVE-2026-68744`Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply	Exploitation statusNot known exploited	FixNot confirmed	Published08/04/2026	SeverityLow
`CVE-2026-18477`Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape	Exploitation statusNot known exploited	FixNot confirmed	Published08/03/2026	SeverityMedium
`CVE-2026-18508`Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite	Exploitation statusNot known exploited	FixNot confirmed	Published08/03/2026	SeverityMedium
`CVE-2026-68742`Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr	Exploitation statusNot known exploited	FixNot confirmed	Published08/03/2026	SeverityMedium
`CVE-2026-13757`P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing	Exploitation statusNot known exploited	FixNot confirmed	Published06/29/2026	SeverityMedium
`CVE-2026-13595`Util-linux: util-linux: heap use-after-free in libblkid nested partition probing	Exploitation statusNot known exploited	FixNot confirmed	Published06/29/2026	SeverityMedium
`CVE-2026-55653`Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service	Exploitation statusNot known exploited	FixNot confirmed	Published06/23/2026	SeverityMedium
`CVE-2026-12725`Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies	Exploitation statusNot known exploited	FixNot confirmed	Published06/22/2026	SeverityMedium
`CVE-2026-54100`Windows-machine-config-operator: windows-machine-config-operator: ssh host key not verified enables credential theft	Exploitation statusNot known exploited	FixNot confirmed	Published06/22/2026	SeverityHigh
`CVE-2026-54099`Windows-machine-config-operator: windows-machine-config-operator: wicd csr extra-organization allows privilege escalation to system:masters	Exploitation statusNot known exploited	FixNot confirmed	Published06/22/2026	SeverityHigh
`CVE-2026-44495`Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge	Exploitation statusPublic exploit	FixYes	Published06/11/2026	SeverityHigh
`CVE-2026-1784`Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection	Exploitation statusNot known exploited	FixNot confirmed	Published06/02/2026	SeverityHigh
`CVE-2026-10533`Openshift: openshift: non-admin user can bypass resourcequota and flood etcd with events causing cluster-wide api degradation	Exploitation statusNot known exploited	FixNot confirmed	Published06/01/2026	SeverityMedium
`CVE-2026-42965`Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation	Exploitation statusNot known exploited	FixNot confirmed	Published05/29/2026	SeverityHigh
`CVE-2026-46579`Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontend	Exploitation statusNot known exploited	FixNot confirmed	Published05/29/2026	SeverityHigh
`CVE-2026-4408`Samba: remote code execution in samr	Exploitation statusNot known exploited	FixNot confirmed	Published05/28/2026	SeverityCritical
`CVE-2026-1933`Samba: missing access check on reparse point operations	Exploitation statusNot known exploited	FixNot confirmed	Published05/27/2026	SeverityHigh
`CVE-2026-2340`Samba: vfs_worm does not block directory modification	Exploitation statusNot known exploited	FixNot confirmed	Published05/27/2026	SeverityMedium
`CVE-2026-3012`Samba: group policy certificate enrollment uses http:// without validation	Exploitation statusNot known exploited	FixNot confirmed	Published05/27/2026	SeverityHigh
`CVE-2026-48864`Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data	Exploitation statusNot known exploited	FixNot confirmed	Published05/26/2026	SeverityHigh
`CVE-2026-4480`Samba: samba: remote code execution in printing subsystem via unescaped job description	Exploitation statusNot known exploited	FixNot confirmed	Published05/26/2026	SeverityCritical
`CVE-2026-9149`Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file	Exploitation statusPublic exploit	FixNot confirmed	Published05/20/2026	SeverityMedium
`CVE-2026-9150`Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums	Exploitation statusNot known exploited	FixNot confirmed	Published05/20/2026	SeverityMedium
`CVE-2026-42009`Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Published05/18/2026	SeverityHigh
`CVE-2026-42010`Gnutls: gnutls: authentication bypass via nul character in username	Exploitation statusNot known exploited	FixNot confirmed	Published05/07/2026	SeverityHigh
`CVE-2026-33845`Gnutls: gnutls: denial of service via dtls zero-length fragment	Exploitation statusNot known exploited	FixYes	Published04/30/2026	SeverityHigh
`CVE-2026-3832`Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response	Exploitation statusPublic exploit	FixYes	Published04/30/2026	SeverityLow
`CVE-2026-3833`Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison	Exploitation statusPublic exploit	FixYes	Published04/30/2026	SeverityMedium
`CVE-2026-7309`Openshift-controller-manager: openshift container platform: information disclosure via environment variable injection	Exploitation statusNot known exploited	FixNot confirmed	Published04/28/2026	SeverityMedium
`CVE-2026-6732`Libxml2: libxml2: denial of service via crafted xsd-validated document	Exploitation statusNot known exploited	FixNot confirmed	Published04/23/2026	SeverityMedium
`CVE-2026-6846`Binutils: binutils: arbitrary code execution via malformed xcoff object file processing	Exploitation statusNot known exploited	FixYes	Published04/22/2026	SeverityHigh
`CVE-2026-6844`Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files	Exploitation statusNot known exploited	FixNot confirmed	Published04/22/2026	SeverityMedium
`CVE-2026-6843`Nano: nano: format string vulnerability leads to denial of service	Exploitation statusNot known exploited	FixNot confirmed	Published04/22/2026	SeverityMedium
`CVE-2026-31431`crypto: algif_aead - Revert to operating out-of-place	Exploitation statusKEV	FixYes	Published04/22/2026	SeverityHigh
`CVE-2026-6845`Binutils: binutils: denial of service via crafted elf file	Exploitation statusNot known exploited	FixNot confirmed	Published04/22/2026	SeverityMedium
`CVE-2026-6245`Sssd: out-of-bounds read in the sssd	Exploitation statusNot known exploited	FixNot confirmed	Published04/15/2026	SeverityMedium
`CVE-2026-4878`Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()	Exploitation statusNot known exploited	FixNot confirmed	Published04/09/2026	SeverityMedium
`CVE-2026-5745`Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive	Exploitation statusNot known exploited	FixNot confirmed	Published04/07/2026	SeverityMedium
`CVE-2026-5121`Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing	Exploitation statusNot known exploited	FixNot confirmed	Published03/30/2026	SeverityCritical
`CVE-2026-0964`Libssh: improper sanitation of paths received from scp servers	Exploitation statusNot known exploited	FixNot confirmed	Published03/26/2026	SeverityMedium
`CVE-2026-0966`Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()	Exploitation statusNot known exploited	FixNot confirmed	Published03/26/2026	SeverityMedium
`CVE-2026-4897`Polkit: polkit: denial of service via unbounded input processing through standard input	Exploitation statusNot known exploited	FixNot confirmed	Published03/26/2026	SeverityMedium
`CVE-2026-4647`Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library	Exploitation statusNot known exploited	FixNot confirmed	Published03/23/2026	SeverityMedium
`CVE-2026-4426`Libarchive: libarchive: denial of service via malformed iso file processing	Exploitation statusNot known exploited	FixNot confirmed	Published03/19/2026	SeverityMedium
`CVE-2026-4424`Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing	Exploitation statusNot known exploited	FixNot confirmed	Published03/19/2026	SeverityHigh
`CVE-2026-3441`Binutils: gnu binutils: information disclosure via specially crafted xcoff object file	Exploitation statusNot known exploited	FixNot confirmed	Published03/15/2026	SeverityMedium
`CVE-2026-3442`Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker	Exploitation statusNot known exploited	FixNot confirmed	Published03/15/2026	SeverityMedium
`CVE-2025-12801`Nfs-utils: rpc.mountd in the nfs-utils privilege escalation	Exploitation statusNot known exploited	FixNot confirmed	Published03/04/2026	SeverityMedium
`CVE-2026-0992`Libxml2: libxml2: denial of service via crafted xml catalogs	Exploitation statusNot known exploited	FixNot confirmed	Published01/15/2026	SeverityLow
`CVE-2026-0989`Libxml2: unbounded relaxng include recursion leading to stack overflow	Exploitation statusNot known exploited	FixNot confirmed	Published01/15/2026	SeverityLow
`CVE-2026-0990`Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing	Exploitation statusNot known exploited	FixNot confirmed	Published01/15/2026	SeverityMedium
`CVE-2025-13601`Glib: integer overflow in in g_escape_uri_string()	Exploitation statusNot known exploited	FixYes	Published11/26/2025	SeverityHigh
`CVE-2025-8283`Netavark: podman: netavark may resolve hostnames to unexpected hosts	Exploitation statusNot known exploited	FixYes	Published07/28/2025	SeverityLow
`CVE-2025-7519`Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write	Exploitation statusNot known exploited	FixYes	Published07/14/2025	SeverityMedium
`CVE-2025-7424`Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes	Exploitation statusNot known exploited	FixYes	Published07/10/2025	SeverityHigh
`CVE-2025-32990`Gnutls: vulnerability in gnutls certtool template parsing	Exploitation statusNot known exploited	FixYes	Published07/10/2025	SeverityMedium
`CVE-2025-32989`Gnutls: vulnerability in gnutls sct extension parsing	Exploitation statusNot known exploited	FixYes	Published07/10/2025	SeverityMedium
`CVE-2025-32988`Gnutls: vulnerability in gnutls othername san export	Exploitation statusNot known exploited	FixYes	Published07/10/2025	SeverityMedium
`CVE-2025-5351`Libssh: double free vulnerability in libssh key export functions	Exploitation statusNot known exploited	FixYes	Published07/04/2025	SeverityMedium
`CVE-2025-5372`Libssh: incorrect return code handling in ssh_kdf() in libssh	Exploitation statusNot known exploited	FixYes	Published07/04/2025	SeverityMedium
`CVE-2025-5318`Libssh: out-of-bounds read in sftp_handle()	Exploitation statusNot known exploited	FixYes	Published06/24/2025	SeverityMedium
`CVE-2025-6170`Libxml2: stack buffer overflow in xmllint interactive shell command handling	Exploitation statusNot known exploited	FixYes	Published06/16/2025	SeverityLow
`CVE-2025-6021`Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2	Exploitation statusPublic exploit	FixYes	Published06/12/2025	SeverityHigh
`CVE-2025-5914`Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c	Exploitation statusPublic exploit	FixYes	Published06/09/2025	SeverityHigh
`CVE-2025-5918`Libarchive: reading past eof may be triggered for piped file streams	Exploitation statusNot known exploited	FixYes	Published06/09/2025	SeverityLow
`CVE-2025-5917`Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c	Exploitation statusNot known exploited	FixYes	Published06/09/2025	SeverityLow
`CVE-2025-5916`Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c	Exploitation statusNot known exploited	FixYes	Published06/09/2025	SeverityLow
`CVE-2025-5915`Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c	Exploitation statusNot known exploited	FixYes	Published06/09/2025	SeverityMedium
`CVE-2025-4598`Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump	Exploitation statusPublic exploit	FixYes	Published05/30/2025	SeverityMedium
`CVE-2025-0678`Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data	Exploitation statusNot known exploited	FixYes	Published03/03/2025	SeverityHigh
`CVE-2024-45782`Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)	Exploitation statusNot known exploited	FixYes	Published03/03/2025	SeverityHigh
`CVE-2024-45778`Grub2: fs/bfs: integer overflow in the bfs parser.	Exploitation statusNot known exploited	FixYes	Published03/03/2025	SeverityMedium
`CVE-2025-26465`Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled	Exploitation statusPublic exploit	FixYes	Published02/18/2025	SeverityMedium
`CVE-2024-12088`Rsync: --safe-links option bypass leads to path traversal	Exploitation statusPublic exploit	FixYes	Published01/14/2025	SeverityMedium
`CVE-2024-12086`Rsync: rsync server leaks arbitrary client files	Exploitation statusPublic exploit	FixYes	Published01/14/2025	SeverityMedium
`CVE-2024-12085`Rsync: info leak via uninitialized stack contents	Exploitation statusPublic exploit	FixYes	Published01/14/2025	SeverityHigh
`CVE-2024-50312`Graphql: information disclosure via graphql introspection in openshift	Exploitation statusNot known exploited	FixNot confirmed	Published10/22/2024	SeverityMedium
`CVE-2024-50311`Graphql: denial of service (dos) vulnerability via graphql batching	Exploitation statusNot known exploited	FixNot confirmed	Published10/22/2024	SeverityMedium
`CVE-2024-9676`Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)	Exploitation statusNot known exploited	FixYes	Published10/15/2024	SeverityMedium
`CVE-2024-9675`Buildah: buildah allows arbitrary directory mount	Exploitation statusNot known exploited	FixYes	Published10/09/2024	SeverityHigh
`CVE-2024-9341`Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library	Exploitation statusNot known exploited	FixYes	Published10/01/2024	SeverityMedium
`CVE-2024-8883`Keycloak: vulnerable redirect uri validation results in open redirec	Exploitation statusNot known exploited	FixYes	Published09/19/2024	SeverityMedium
`CVE-2024-4629`Keycloak: potential bypass of brute force protection	Exploitation statusNot known exploited	FixNot confirmed	Published09/03/2024	SeverityMedium
`CVE-2024-3056`Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack	Exploitation statusNot known exploited	FixNot confirmed	Published08/02/2024	SeverityHigh
`CVE-2024-7079`Openshift-console: unauthenticated installation of helm charts	Exploitation statusNot known exploited	FixNot confirmed	Published07/24/2024	SeverityMedium
`CVE-2024-6387`Openssh: regresshion - race condition in ssh allows rce/dos	Exploitation statusPublic exploit	FixYes	Published07/01/2024	SeverityHigh
`CVE-2024-5154`Cri-o: malicious container can create symlink on host	Exploitation statusNot known exploited	FixYes	Published06/12/2024	SeverityHigh
`CVE-2024-5037`Openshift/telemeter: iss check during jwt authentication can be bypassed	Exploitation statusNot known exploited	FixYes	Published06/05/2024	SeverityHigh
`CVE-2024-1132`Keycloak: path transversal in redirection validation	Exploitation statusPublic exploit	FixYes	Published04/17/2024	SeverityHigh
`CVE-2024-0406`Mholt/archiver: path traversal vulnerability	Exploitation statusNot known exploited	FixNot confirmed	Published04/06/2024	SeverityMedium
`CVE-2024-1725`Kubevirt-csi: persistentvolume allows access to hcp's root node	Exploitation statusNot known exploited	FixNot confirmed	Published03/07/2024	SeverityMedium
`CVE-2024-1635`Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol	Exploitation statusNot known exploited	FixNot confirmed	Published02/19/2024	SeverityHigh
`CVE-2023-6291`Keycloak: redirect_uri validation bypass	Exploitation statusNot known exploited	FixNot confirmed	Published01/26/2024	SeverityHigh

100 / 326 Results

Security vulnerabilities in openshift_container_platform

openshift_container_platform

Verify to analyze this security profile

How many security vulnerabilities does openshift_container_platform have?

Does the latest openshift_container_platform version have known vulnerabilities?

Run an in-depth assessment with complete web risk management