Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

OpenShift File Integrity Operator - FIO 1

Source -

CNA

CNA CVEs -

4

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

0
Related CVEsRelated VendorsRelated AssignersReports
4Vulnerabilities found

CVE-2025-7425
Assigner-Red Hat, Inc.
ShareView Details
Assigner-Red Hat, Inc.
CVSS Score-7.8||HIGH
EPSS-0.19% / 41.02%
||
7 Day CHG~0.00%
Published-10 Jul, 2025 | 13:53
Updated-06 Jun, 2026 | 07:56
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.

Action-Not Available
Vendor-Siemens AGRed Hat, Inc.The GNOME Project
Product-Red Hat OpenShift Container Platform 4.19Red Hat Hardened ImagesRed Hat OpenShift distributed tracing 3.5.1Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionscert-manager operator for Red Hat OpenShift 1.16Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsRHOSS-1.36-RHEL-8Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnRed Hat OpenShift Container Platform 4.13Red Hat OpenShift Container Platform 4.14Red Hat Enterprise Linux 8Red Hat Insights proxy 1.5Red Hat Enterprise Linux 9.4 Extended Update SupportRed Hat OpenShift Container Platform 4.16Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceRed Hat Enterprise Linux 10Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat Enterprise Linux 6Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRed Hat Enterprise Linux 7 Extended Lifecycle SupportRed Hat Web Terminal 1.11 on RHEL 9Red Hat Discovery 2Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat OpenShift Container Platform 4.18Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsOpenShift File Integrity Operator - FIO 1OpenShift Compliance Operator 1libxml2Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceRed Hat OpenShift Container Platform 4.17Red Hat Web Terminal 1.12 on RHEL 9Red Hat Enterprise Linux 8.2 Advanced Update SupportRed Hat Enterprise Linux 9Red Hat OpenShift Container Platform 4.15Red Hat OpenShift Container Platform 4.12SIMATIC CN 4100RUGGEDCOM ROX RX1500RUGGEDCOM ROX RX1511SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPRUGGEDCOM ROX MX5000RUGGEDCOM ROX RX1524RUGGEDCOM ROX RX1501RUGGEDCOM ROX RX1512RUGGEDCOM ROX MX5000RERUGGEDCOM ROX RX1536SIMATIC S7-1500 TM MFP - GNU/Linux subsystemSIMATIC S7-1500 CPU 1518-4 PN/DP MFPRUGGEDCOM ROX RX1510SIPLUS S7-1500 CPU 1518-4 PN/DP MFPRUGGEDCOM ROX RX5000RUGGEDCOM ROX RX1400
CWE ID-CWE-416
Use After Free
CVE-2025-49794
Assigner-Red Hat, Inc.
ShareView Details
Assigner-Red Hat, Inc.
CVSS Score-9.1||CRITICAL
EPSS-0.45% / 63.80%
||
7 Day CHG~0.00%
Published-16 Jun, 2025 | 15:24
Updated-03 Jun, 2026 | 17:02
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Libxml: heap use after free (uaf) leads to denial of service (dos)

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.

Action-Not Available
Vendor-Red Hat, Inc.Siemens AG
Product-Red Hat OpenShift Container Platform 4.19Red Hat Hardened ImagesRed Hat Enterprise Linux 9.0 Update Services for SAP Solutionscert-manager operator for Red Hat OpenShift 1.16Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsRHOSS-1.36-RHEL-8Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnRed Hat OpenShift Container Platform 4.13Red Hat OpenShift Container Platform 4.14Red Hat Enterprise Linux 8Red Hat Insights proxy 1.5Red Hat Enterprise Linux 9.4 Extended Update SupportRed Hat Enterprise Linux 8.6 Telecommunications Update ServiceRed Hat Enterprise Linux 10Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat Enterprise Linux 6Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRed Hat Enterprise Linux 7 Extended Lifecycle SupportRed Hat Web Terminal 1.11 on RHEL 9Red Hat JBoss Core Services 2.4.62.SP2Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat OpenShift Container Platform 4.18Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsOpenShift File Integrity Operator - FIO 1Red Hat OpenShift Container Platform 4.20Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceRed Hat OpenShift Container Platform 4.17Red Hat Web Terminal 1.12 on RHEL 9Red Hat Enterprise Linux 8.2 Advanced Update SupportRed Hat Enterprise Linux 9Red Hat OpenShift Container Platform 4.12RUGGEDCOM ROX RX1536RUGGEDCOM ROX RX1500RUGGEDCOM ROX RX1511RUGGEDCOM ROX RX5000RUGGEDCOM ROX RX1510RUGGEDCOM ROX MX5000RUGGEDCOM RST2428PRUGGEDCOM ROX RX1524RUGGEDCOM ROX RX1501RUGGEDCOM ROX RX1512RUGGEDCOM ROX MX5000RERUGGEDCOM ROX RX1400
CWE ID-CWE-825
Expired Pointer Dereference
CVE-2025-49796
Assigner-Red Hat, Inc.
ShareView Details
Assigner-Red Hat, Inc.
CVSS Score-9.1||CRITICAL
EPSS-1.78% / 83.06%
||
7 Day CHG~0.00%
Published-16 Jun, 2025 | 15:14
Updated-03 Jun, 2026 | 17:02
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Libxml: type confusion leads to denial of service (dos)

A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.

Action-Not Available
Vendor-Red Hat, Inc.Siemens AG
Product-Red Hat OpenShift Container Platform 4.19Red Hat Hardened ImagesRed Hat Enterprise Linux 9.0 Update Services for SAP Solutionscert-manager operator for Red Hat OpenShift 1.16Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsRHOSS-1.36-RHEL-8Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnRed Hat OpenShift Container Platform 4.13Red Hat OpenShift Container Platform 4.14Red Hat Enterprise Linux 8Red Hat Insights proxy 1.5Red Hat Enterprise Linux 9.4 Extended Update SupportRed Hat Enterprise Linux 8.6 Telecommunications Update ServiceRed Hat Enterprise Linux 10Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat Enterprise Linux 6Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRed Hat Enterprise Linux 7 Extended Lifecycle SupportRed Hat Web Terminal 1.11 on RHEL 9Red Hat Discovery 2Red Hat JBoss Core Services 2.4.62.SP2Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat OpenShift Container Platform 4.18Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsOpenShift File Integrity Operator - FIO 1Red Hat OpenShift Container Platform 4.20Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceRed Hat OpenShift Container Platform 4.17Red Hat Web Terminal 1.12 on RHEL 9Red Hat Enterprise Linux 8.2 Advanced Update SupportRed Hat Enterprise Linux 9Red Hat OpenShift Container Platform 4.12RUGGEDCOM ROX RX1536RUGGEDCOM ROX RX1500RUGGEDCOM ROX RX1511RUGGEDCOM ROX RX5000RUGGEDCOM ROX RX1510RUGGEDCOM ROX MX5000RUGGEDCOM RST2428PRUGGEDCOM ROX RX1524RUGGEDCOM ROX RX1501RUGGEDCOM ROX RX1512RUGGEDCOM ROX MX5000RERUGGEDCOM ROX RX1400
CWE ID-CWE-125
Out-of-bounds Read
CVE-2025-5914
Assigner-Red Hat, Inc.
ShareView Details
Assigner-Red Hat, Inc.
CVSS Score-7.8||HIGH
EPSS-0.11% / 29.67%
||
7 Day CHG~0.00%
Published-09 Jun, 2025 | 19:53
Updated-05 Jun, 2026 | 00:13
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

Action-Not Available
Vendor-Red Hat, Inc.libarchive
Product-openshift_container_platformlibarchiveenterprise_linuxRed Hat OpenShift Container Platform 4.19Red Hat OpenShift distributed tracing 3.5.1Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionscert-manager operator for Red Hat OpenShift 1.16Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsRHOSS-1.36-RHEL-8Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnRed Hat OpenShift Container Platform 4.14Red Hat Enterprise Linux 8Red Hat Insights proxy 1.5Red Hat Enterprise Linux 9.4 Extended Update SupportRed Hat OpenShift Container Platform 4.16Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceRed Hat Enterprise Linux 10Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat Enterprise Linux 6Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRed Hat Enterprise Linux 7 Extended Lifecycle SupportRed Hat Web Terminal 1.11 on RHEL 9Red Hat Discovery 2Red Hat OpenShift sandboxed containers 1.1Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat OpenShift Container Platform 4.18Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsOpenShift File Integrity Operator - FIO 1Red Hat OpenShift Container Platform 4.20OpenShift Compliance Operator 1Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceRed Hat Web Terminal 1.12 on RHEL 9Red Hat Enterprise Linux 8.2 Advanced Update SupportRed Hat Enterprise Linux 9Red Hat OpenShift Container Platform 4.15Red Hat OpenShift Container Platform 4.17
CWE ID-CWE-190
Integer Overflow or Wraparound