Skip to content
COOEY

FAIL › dossier

openshift container platform

PRODUCT

· dossier confidence 20%

Red Hat OpenShift is a leading container platform with a strong security track record, but its reliance on third-party components like Samba and GnuTLS introduces critical vulnerabilities that require vigilant patching and supply chain monitoring.

Failure events
16
Zero-days
1
RCEs
1
On KEV
0
Critical
14
Worst shame
50
PROFILE
Categorycontainer platformWhat they doRed Hat OpenShift is a Kubernetes-based container platform for deploying, managing, and scaling containerized applications. Websitehttps://www.openshift.com ↗
SECURITY POSTURE

Red Hat OpenShift maintains a mature security posture with active CVE tracking and rapid patching, though its supply chain relies on third-party components like Samba and GnuTLS that occasionally introduce critical vulnerabilities.

Notable failures
  • CVE-2026-4408: Samba RCE0day via misconfigured check password script
  • CVE-2026-42010: GnuTLS RSA-PSK NUL character username matching flaw
  • CVE-2026-33845: GnuTLS DTLS integer underflow via malformed fragments
Patterns: third-party component vulnerabilities; critical RCE0day exploits in supply chain dependencies
FAILURE HISTORY · 16
DATEEVENTSEVSUMMARY
2026-05-28 CVE-2026-4408 critical A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed
2026-05-07 CVE-2026-42010 high A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authe
2026-04-30 CVE-2026-33845 high A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of
2020-03-02 CVE-2019-14892 critical CVE-2019-14892: A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 an
2019-07-29 CVE-2019-14379 critical CVE-2019-14379: SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles de
2019-07-09 CVE-2018-11307 critical CVE-2018-11307: An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use o
2019-03-08 CVE-2019-9636 critical CVE-2019-9636: Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handl
2019-01-02 CVE-2018-14720 critical CVE-2018-14720: FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct ext
2019-01-02 CVE-2018-14719 critical CVE-2018-14719: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to exec
2019-01-02 CVE-2018-14718 critical CVE-2018-14718: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to exec
2019-01-02 CVE-2018-19361 critical CVE-2018-19361: FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspec
2019-01-02 CVE-2018-19360 critical CVE-2018-19360: FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspec
2019-01-02 CVE-2018-14721 critical CVE-2018-14721: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to cond
2019-01-02 CVE-2018-19362 critical CVE-2018-19362: FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspec
2018-02-06 CVE-2017-15095 critical CVE-2017-15095: A deserialization flaw was discovered in the jackson-databind in versions before
2018-02-06 CVE-2017-7525 critical CVE-2017-7525: A deserialization flaw was discovered in the jackson-databind, versions before 2
DOSSIER SOURCES
Open questions: What is the founding year of Red Hat OpenShift Container Platform? · What is the headquarters location of Red Hat OpenShift Container Platform? · What is the corporate size of Red Hat OpenShift Container Platform? · What is the ownership structure of Red Hat OpenShift Container Platform? · What is the official website URL for Red Hat OpenShift Container Platform? · Are there any internal failure history events directly related to Red Hat OpenShift Container Platform?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-20 19:10:38.962545+00:00