kata-containers vulnerabilities

Known vulnerabilities in the kata-containers package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M HTTP Request Smuggling	<0:3.13.0-2.rhaos4.20.el9
M CVE-2025-4673	*
L Incorrect Authorization	*
L Incorrect Authorization	*
M Improper Input Validation	*
H Incorrect Privilege Assignment	*
M Improper Validation of Unsafe Equivalence in Input	*
H Link Following	*
M Double Free	*
M Allocation of Resources Without Limits or Throttling	*
M HTTP Request Smuggling	<0:3.13.0-2.rhaos4.20.el9
L Use After Free	*
M Incorrect Default Permissions	*
M Integer Overflow or Wraparound	*
L Improper Verification of Cryptographic Signature	*
H Resource Exhaustion	<0:3.1.3-4.rhaos4.14.el9
H Resource Exhaustion	<0:3.1.3-4.rhaos4.14.el9
H Cross-site Scripting (XSS)	<0:3.1.3-4.rhaos4.14.el9
H Resource Exhaustion	<0:3.1.3-4.rhaos4.14.el9
H Allocation of Resources Without Limits or Throttling	<0:3.1.3-4.rhaos4.14.el9
H CVE-2023-39321	<0:3.1.3-4.rhaos4.14.el9
H Cross-site Scripting (XSS)	<0:3.1.3-4.rhaos4.14.el9
H Cross-site Scripting (XSS)	<0:3.1.3-4.rhaos4.14.el9
H Resource Exhaustion	<0:3.1.3-4.rhaos4.14.el9
H Resource Exhaustion	<0:3.1.3-4.rhaos4.14.el9
H Use of a Broken or Risky Cryptographic Algorithm	<0:3.1.3-4.rhaos4.14.el9
H Use After Free	<0:3.1.3-4.rhaos4.14.el9
H CVE-2023-2728	<0:3.1.3-4.rhaos4.14.el9
H CVE-2023-2727	<0:3.1.3-4.rhaos4.14.el9
H Resource Exhaustion	<0:3.1.3-4.rhaos4.14.el9
M Improper Certificate Validation	<0:2.5.2-1.el9
M Incorrect Default Permissions	<0:2.5.2-1.el9
M Improper Initialization	<0:2.5.2-1.el9
M Server-Side Request Forgery (SSRF)	<0:2.5.2-1.el9
M Directory Traversal	<0:2.5.2-1.el9
M Improper Access Control	<0:2.5.2-1.el9
M Resource Exhaustion	<0:2.5.2-1.el9
M CVE-2022-41715	<0:2.5.2-1.el9
M Allocation of Resources Without Limits or Throttling	<0:2.5.2-1.el9
M HTTP Request Smuggling	<0:2.5.2-1.el9
M Directory Traversal	<0:2.5.2-1.el9
M Resource Exhaustion	<0:2.5.2-1.el9
M Resource Exhaustion	<0:2.5.2-1.el9
M Information Exposure	<0:2.5.2-1.el9
M Improperly Controlled Sequential Memory Allocation	<0:2.5.2-1.el9
M HTTP Request Smuggling	<0:2.5.2-1.el9
M Race Condition	*
L Improper Input Validation	*
M Resource Exhaustion	*
M Improper Input Validation	*
M Improper Input Validation	*
L Improper Input Validation	*

Vulnerability

Vulnerable Version

HTTP Request Smuggling

<0:3.13.0-2.rhaos4.20.el9

CVE-2025-4673