rhcos vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the rhcos package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Resource Exhaustion	*
M Out-of-bounds Read	*
H Out-of-bounds Read	*
M Out-of-bounds Read	*
M Unrestricted Externally Accessible Lock	*
M Improper Use of Validation Framework	*
L Algorithmic Complexity	*
H Heap-based Buffer Overflow	*
H Out-of-bounds Read	*
M Out-of-bounds Read	*
M Integer Overflow or Wraparound	*
M Incorrect Calculation of Buffer Size	*
M CVE-2025-61662	*
M Expired Pointer Dereference	*
M Expired Pointer Dereference	*
M Expired Pointer Dereference	*
M Expired Pointer Dereference	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M Key Exchange without Entity Authentication	*
H Use After Free	*
M Resource Exhaustion	*
M Resource Exhaustion	*
H Link Following	*
H Link Following	*
H Link Following	*
M Stack-based Buffer Overflow	*
L Improper Resource Shutdown or Release	*
L Improper Resource Shutdown or Release	*
M Out-of-Bounds	*
M Integer Overflow or Wraparound	*
M Acceptance of Extraneous Untrusted Data With Trusted Data	*
H Resource Exhaustion	*
H Improper Verification of Cryptographic Signature	*
H Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	*
L Out-of-Bounds	*
L Unchecked Return Value	*
M Improper Validation of Specified Quantity in Input	*
H Use of Uninitialized Resource	*
L Access of Resource Using Incompatible Type ('Type Confusion')	*
H Double Free	*
L Out-of-Bounds	*
L Out-of-Bounds	*
H Improper Privilege Management	*
L Out-of-Bounds	*
L Out-of-Bounds	*
L Out-of-Bounds	*
M Improper Neutralization of Null Byte or NUL Character	*
M Failure to Sanitize Special Element	*
M Resource Exhaustion	*
M Use After Free	*
L Out-of-bounds Read	*
M Information Exposure	*
M Out-of-bounds Write	*
M Improper Check for Unusual or Exceptional Conditions	*
M Out-of-Bounds	*
M Out-of-Bounds	*
M Out-of-Bounds	*
M Expired Pointer Dereference	*
H Allocation of Resources Without Limits or Throttling	*
M Out-of-bounds Read	*
M NULL Pointer Dereference	*
H Improper Authentication	*
L Memory Leak	*
H Directory Traversal	*
M Unchecked Input for Loop Condition	*
H Out-of-bounds Read	*
H Expired Pointer Dereference	*
L Out-of-Bounds	*
L Reachable Assertion	*
M Out-of-Bounds	*
L Reachable Assertion	*
M Integer Overflow or Wraparound	*
L External Control of System or Configuration Setting	*
M NULL Pointer Dereference	*
M Double Free	*
M Insufficiently Protected Credentials	*
H Acceptance of Extraneous Untrusted Data With Trusted Data	*
M Directory Traversal	*
H Numeric Truncation Error	*
M Directory Traversal	*
L Arbitrary Argument Injection	*
M Directory Traversal	*
M Out-of-Bounds	*
M Out-of-Bounds	*
M Out-of-bounds Write	*
H Use After Free	*
M Double Free	*
M Improper Certificate Validation	*
M NULL Pointer Dereference	*
M Heap-based Buffer Overflow	*
M OS Command Injection	*
H External Control of File Name or Path	*
H Interpretation Conflict	*
M Buffer Overflow	*
M Incorrect Calculation	*
M Return of Wrong Status Code	*
L Use After Free	*
M Double Free	*
H Incorrect Authorization	*
M Allocation of Resources Without Limits or Throttling	*
M Out-of-bounds Read	*
M Uncontrolled Recursion	*
L Resource Exhaustion	*
L Stack-based Buffer Overflow	*
M Directory Traversal	*
M Integer Overflow or Wraparound	*
L Integer Overflow or Wraparound	*
L Heap-based Buffer Overflow	*
L Out-of-bounds Read	*
H Integer Overflow or Wraparound	*
L Off-by-one Error	*
L Out-of-bounds Read	*
M Race Condition	*
M Race Condition	*
M Stack-based Buffer Overflow	*
M Out-of-Bounds	*
M Out-of-Bounds	*
M Buffer Overflow	*
M Buffer Over-read	*
M Integer Overflow or Wraparound	*
M Untrusted Search Path	*
M Stack-based Buffer Overflow	*
M Incorrect Privilege Assignment	*
M Missing Authentication for Critical Function	*
M Integer Overflow or Wraparound	*
M Out-of-bounds Read	*
M Reversible One-Way Hash	*
M Expected Behavior Violation	*
M Out-of-bounds Read	*
M Return of Wrong Status Code	*
L Memory Leak	*
H NULL Pointer Dereference	*
M Uncontrolled Recursion	*
M Arbitrary Argument Injection	*
H Use After Free	*
H Use After Free	*
H Out-of-bounds Write	*
M Use of Uninitialized Resource	*
H Buffer Overflow	*
M Information Exposure	*
M Unchecked Return Value	*
L Improper Resource Shutdown or Release	*
H Directory Traversal	*
H Out-of-bounds Write	*
M Use After Free	*
H Stack-based Buffer Overflow	*
M Trust Boundary Violation	*
M Improper Update of Reference Count	*
M Integer Overflow or Wraparound	*
M Unchecked Return Value	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
H Use After Free	*
M Out-of-bounds Write	*
L Use After Free	*
L NULL Pointer Dereference	*
M Out-of-bounds Write	*
M Out-of-bounds Write	*
M Detection of Error Condition Without Action	*
L Out-of-Bounds	*
L Out-of-Bounds	*
L Memory Leak	*
L Memory Leak	*
L Memory Leak	*
H Resource Exhaustion	*
M Out-of-bounds Write	*
H Out-of-bounds Write	*
M Incorrect Calculation of Buffer Size	*
H Resource Exhaustion	*
M Algorithmic Complexity	*
M Algorithmic Complexity	*
M Use After Free	*
M Improper Encoding or Escaping of Output	*
M Information Exposure	*
M Directory Traversal	*
L Improper Encoding or Escaping of Output	*
M Detection of Error Condition Without Action	*
L Heap-based Buffer Overflow	*
H Use of Uninitialized Resource	*
M Race Condition	*
L Improper Encoding or Escaping of Output	*
L Out-of-bounds Write	*
L Covert Timing Channel	*
L Improper Check for Unusual or Exceptional Conditions	*
M Directory Traversal	*
H Symlink Following	*
L Insecure Default Initialization of Resource	*
M NULL Pointer Dereference	*
M Out-of-Bounds	*
L Information Exposure	*
M Insecure Temporary File	*
M Use of Insufficiently Random Values	*
L Comparison Using Wrong Factors	*
M Symlink Following	*
M Small Space of Random Values	*
H Improper Authentication	*
L Improper Certificate Validation	*
L Use After Free	*
M Unchecked Input for Loop Condition	*
M Improper Input Validation	*
H Out-of-bounds Write	*
M Improper Finite State Machines (FSMs) in Hardware Logic	*
M Improper Certificate Validation	*
M Heap-based Buffer Overflow	*
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
L Directory Traversal	*
L Heap-based Buffer Overflow	*
M Double Free	*
L Heap-based Buffer Overflow	*
L Use After Free	*
L Use After Free	*
H Use After Free	*
L Double Free	*
L NULL Pointer Dereference	*
L Heap-based Buffer Overflow	*
L Out-of-bounds Read	*
M Improper Synchronization	*
H CVE-2024-4076	*
H Resource Exhaustion	*
H Resource Exhaustion	*
H Arbitrary Code Injection	*
M Race Condition	*
H Race Condition	*
L Information Exposure	*
M CVE-2024-26602	*

Vulnerability

Vulnerable Version

Resource Exhaustion