104 matches found
CLEANSTART-2026-EL85268 Security fixes in multus-cni-fips 3.9.3-r2
Package multus-cni-fips version 3.9.3-r2 fixes 14 vulnerabilities: ghsa-v778-237x-gjrc, ghsa-3vm4-22fp-5rfm, ghsa-4374-p667-p6c8, ghsa-69cg-p879-7622, ghsa-69ch-w2m2-3vjp...
CLEANSTART-2026-SV56553 Security fixes in multus-cni-fips 4.0.2-r3
Package multus-cni-fips version 4.0.2-r3 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-UW06838 Security fixes in multus-cni-fips 4.2.3-r1
Package multus-cni-fips version 4.2.3-r1 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
PT-2026-85864
Package multus-cni-fips version 3.9.3-r2 fixes 14 vulnerabilities: ghsa-v778-237x-gjrc, ghsa-3vm4-22fp-5rfm, ghsa-4374-p667-p6c8, ghsa-69cg-p879-7622, ghsa-69ch-w2m2-3vjp...
CVE-2026-56852 affecting package multus for versions less than 4.0.2-10
CVE-2026-56852 affecting package multus for versions less than 4.0.2-10. A patched version of the package is available...
AZL-93267 CVE-2026-56852 affecting package multus for versions less than 4.0.2-10
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
CVE-2026-25681 affecting package multus for versions less than 4.0.2-9
CVE-2026-25681 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...
CVE-2026-42502 affecting package multus for versions less than 4.0.2-9
CVE-2026-42502 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...
CVE-2026-25680 affecting package multus for versions less than 4.0.2-9
CVE-2026-25680 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...
SUSE CVE-2026-13434
A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...
CVE-2026-13434
A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...
CVE-2026-13434 Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled
A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...
CVE-2026-13434
CVE-2026-13434 affects KubeVirt’s network annotation generator used when provisioning VirtualMachineInstance with Multus networks. The flaw writes the supplied networkName verbatim into the v1.multus-cni.io/default-network annotation without format validation or sanitization, with only an empty-s...
CVE-2026-13434 Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled
A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...
CVE-2026-13434
A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...
EUVD-2026-39796
A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...
CVE-2026-13434
A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...
CVE-2026-13434: Improper Input Validation
A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-network annotation without format validation or...
PT-2026-52848
Name of the Vulnerable Software and Affected Versions KubeVirt versions 1.8.0 and later Description A flaw exists in the network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the networkName value is written directly into the launcher...