17796 matches found
Important: Red Hat Security Advisory: container-tools:rhel8 security update
An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
The software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, is vulnerable. This vulnerability allows attackers to escalate their privileges or execute arbitrary code.
The vulnerability of software for creating and running NVIDIA Container Toolkit containers, as well as software for managing NVIDIA GPU resources, is related to the assignment of a zero pointer due to concurrent access to resources. Exploiting this vulnerability allows a malicious actor to enhanc...
Link Following
github.com/containers/common is vulnerable to Link Following. The vulnerability is due to incorrect handling of symbolic links in FIPS mode, allowing an attacker to exploit symbolic links and mount sensitive host directories inside a container, bypassing the isolation between containers and the...
Moderate: Red Hat Bug Fix Advisory: updated rhel8/support-tools container image
Updated rhel8/support-tools container image is now available for Red Hat Enterprise Linux 8. The rhel8/support-tools container image has been updated for Red Hat Enterprise Linux 8 to address the following security advisory: RHSA-2024:7000 see References Users of rhel8/support-tools container...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.14.38 security update
Red Hat OpenShift Container Platform release 4.14.38 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
SUSE CVE-2024-9341
A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host...
NVIDIA Container Toolkit Installed (Linux)
Binary data nvidiacontainertoolkitnixinstalled.nbin...
RHEL 8 / 9 : OpenShift Container Platform 4.14.38 (RHSA-2024:7187)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7187 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...
The vulnerability of the openshift4/ose-docker-builder component of the Red Hat OpenShift Container Platform allows a attacker to enhance their privileges on the node where containers are executed.
The vulnerability of the openshift4/ose-docker-builder component of the Red Hat OpenShift Container Platform is related to errors in privilege management. This allows a malicious actor to escalate their privileges on the node where containers are executed...
NVIDIA Container Toolkit < 1.16.2 Multiple Vulnerabilities
The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.16.2. It is, therefore, affected by multiple vulnerabilities as referenced in the September 2024 Security Bulletin. - NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU...
CVE-2024-20444
A vulnerability in Cisco Nexus Dashboard Fabric Controller NDFC, formerly Cisco Data Center Network Manager DCNM, could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device. This vulnerability is due to insufficient...
RHSA-2023:6840 Red Hat Security Advisory: OpenShift Container Platform 4.14.2 packages and security update
Bulletin has no description...
RHSA-2023:5717 Red Hat Security Advisory: OpenShift Container Platform 4.11.52 packages and security update
Bulletin has no description...
RHSA-2023:5009 Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security update
Bulletin has no description...
RHSA-2023:5679 Red Hat Security Advisory: OpenShift Container Platform 4.12.39 packages and security update
Bulletin has no description...
RHSA-2023:5675 Red Hat Security Advisory: OpenShift Container Platform 4.13.17 packages and security update
Bulletin has no description...
RHSA-2024:5442 Red Hat Security Advisory: OpenShift Container Platform 4.15.28 packages and security update
Bulletin has no description...
RHSA-2024:4159 Red Hat Security Advisory: OpenShift Container Platform 4.16.1 packages and security update
Bulletin has no description...