Search for packages
| purl | pkg:rpm/redhat/runc@4:1.1.6-4.rhaos4.13?arch=el8 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-e44x-a9xm-6ke9
Aliases: CVE-2022-41724 |
Multiple vulnerabilities have been discovered in Go, the worst of which could lead to remote code execution. | There are no reported fixed by versions. |
|
VCID-jc1e-8tt4-xqdn
Aliases: CVE-2023-27561 GHSA-vpvm-3wq2-2wvm |
Opencontainers runc Incorrect Authorization vulnerability runc 1.0.0-rc95 through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to `libcontainer/rootfs_linux.go`. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. NOTE: this issue exists because of a CVE-2019-19921 regression. | There are no reported fixed by versions. |
|
VCID-sdd3-35ng-g7a3
Aliases: CVE-2022-41723 GHSA-vvpx-j8f3-3w6h |
golang.org/x/net vulnerable to Uncontrolled Resource Consumption A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T13:55:20.693198+00:00 | RedHat Importer | Affected by | VCID-e44x-a9xm-6ke9 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41724.json | 38.0.0 |
| 2026-04-01T13:55:15.044018+00:00 | RedHat Importer | Affected by | VCID-sdd3-35ng-g7a3 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41723.json | 38.0.0 |
| 2026-04-01T13:55:13.630199+00:00 | RedHat Importer | Affected by | VCID-jc1e-8tt4-xqdn | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-27561.json | 38.0.0 |