Red Hat OpenShift 4.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:openshift:4.0:*:*:*:*:*:*:*
part: a version: 4.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Openshift (c1e101a6-4198-51dc-8dd3-fad3fe32c7b8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/openshift/okd |
purl2cpe | 2026-06-01 10:12:54.190813 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-35092 |
vulnerable | 2026-06-08 07:59:13.638581 |
Corosync: corosync: denial of service via integer overflow in join message validation
HIGH (7.5)
A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.
Published: 2026-04-01T13:18:55.551Z
Updated: 2026-05-29T16:13:02.556Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35091 |
vulnerable | 2026-06-08 07:59:13.637407 |
Corosync: corosync: denial of service and information disclosure via crafted udp packet
HIGH (8.2)
A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents
Published: 2026-04-01T13:18:53.738Z
Updated: 2026-05-29T16:21:39.121Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14512 |
vulnerable | 2026-06-08 07:06:34.592787 |
Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
MEDIUM (6.5)
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.
Published: 2025-12-11T07:11:02.182Z
Updated: 2026-07-13T16:21:30.349Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45777 |
vulnerable | 2026-06-08 06:48:09.024440 |
Grub2: grub-core/gettext: integer overflow leads to heap oob write.
MEDIUM (6.7)
A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue can be leveraged by an attacker to overwrite grub2's sensitive heap data, eventually leading to the circumvention of secure boot protections.
Published: 2025-02-19T17:54:01.926Z
Updated: 2026-06-29T22:53:53.431Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1485 |
vulnerable | 2026-06-08 06:25:40.184851 |
Registry-support: decompress can delete files outside scope via relative paths
HIGH (8)
A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the `parent` or `plugin` keywords. This could download a malicious archive and cause the cleanup process to overwrite or delete files outside of the archive, which should not be allowed.
Published: 2024-02-13T23:31:14.427Z
Updated: 2026-03-24T11:28:01.684Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19355 |
vulnerable | 2026-06-08 05:13:22.199437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19351 |
vulnerable | 2026-06-08 05:13:22.193353 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19350 |
vulnerable | 2026-06-08 05:13:22.191973 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19349 |
vulnerable | 2026-06-08 05:13:22.190164 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19335 |
vulnerable | 2026-06-08 05:13:22.154181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.