Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.13:*:*:*:*:*:*:*

part: a version: 4.13 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductOpenshift Container Platform For Linuxone (1fb73b3f-6a9c-5c5b-a22b-8998bd8e4c9d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6021 vulnerable 2026-06-08 07:43:14.064391 Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
HIGH (7.5)
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.
Published: 2025-06-12T12:49:16.157Z
Updated: 2026-06-30T10:40:18.068Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9676 vulnerable 2026-06-08 07:00:28.503213 Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)
MEDIUM (6.5)
A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers/storage library will read /etc/passwd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host.
Published: 2024-10-15T15:27:33.665Z
Updated: 2026-04-24T15:07:44.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1725 vulnerable 2026-06-08 06:27:14.216269 Kubevirt-csi: persistentvolume allows access to hcp's root node
MEDIUM (6.5)
A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.
Published: 2024-03-07T20:09:11.616Z
Updated: 2025-11-14T01:32:09.565Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.