Red Hat Container Native Virtualization 4.20 vulnerabilities
7 known vulnerabilities in Red Hat Container Native Virtualization 4.20 from Red Hat. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Red Hat Container Native Virtualization 4.12: Improper Limitation of a Pathname to a Restricted Directory
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc/<pid>/root/ paths using net.Dial() without symlink protection. These so
- 7.7 High severity
Red Hat Container Native Virtualization 4.14: Authorization Bypass Through User-Controlled Key
In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting create on the datavolumes/source subresource. CDI's DataVolume clone authorization accepts th
- 7.3 High severity
Red Hat Container Native Virtualization 4.12: UNIX Symbolic Link (Symlink) Following
A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following syscalls. W
- 9.3 Critical severity
sanitize-html: Improper Neutralization of Input During Web Page Generation
ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Under the default configuration, versions of `sanitize-html` prior to 2.17.4 can turn attacker-controlled content inside a d
- 7.7 High severity
Red Hat Container Native Virtualization 4.17: Improper Link Resolution Before File Access
A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-level access can exploit a path traversal vulnerability in the VMExport directory endpoint. By placing a symbolic link (symlink) within an exported filesystem Persi
- 9.9 Critical severity
Red Hat Container Native Virtualization 4.12: Improper Link Resolution Before File Access
A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual machine console sockets. By replacing
- 9.1 Critical severity
grpc-go: Improper Authorization
gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests w