VDB
RHSA-2025%3A8284
RHSA-2025%3A8284
PUBLISHED
CVSS 8.800000190734863 HIGH
A vulnerability was discovered in the inftrees.c file of zlib. Pointer arithmetic operations violate the C standard by subtracting an offset from an array pointer before its allocated memory, leading to undefined behavior.
Risk Scores
CVSS 3.0
8.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/azure-kms-encryption-provider-rhel9@sha256:3dfba853ba93140da5ed9159f8edd54aed9b22970b7f4bb71df5c0df36a0541f_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | *, *, * |
| Red Hat | openshift4/insights-runtime-extractor-rhel9@sha256:afb95f0f545830d26287be0304207e04624988e0da2ea4e3bf19706855687506_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/insights-runtime-extractor-rhel9@sha256:afb95f0f545830d26287be0304207e04624988e0da2ea4e3bf19706855687506_ppc64le, openshift4/insights-runtime-extractor-rhel9@sha256:afb95f0f545830d26287be0304207e04624988e0da2ea4e3bf19706855687506_ppc64le, openshift4/insights-runtime-extractor-rhel9@sha256:afb95f0f545830d26287be0304207e04624988e0da2ea4e3bf19706855687506_ppc64le |
| Red Hat | openshift4/ose-cluster-bootstrap-rhel9@sha256:b5a5c9a2d7ed4debe168b169966ae6d5996137714a36ecdc00d0c72c98c66499_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-cluster-bootstrap-rhel9@sha256:b5a5c9a2d7ed4debe168b169966ae6d5996137714a36ecdc00d0c72c98c66499_amd64, *, openshift4/ose-cluster-bootstrap-rhel9@sha256:b5a5c9a2d7ed4debe168b169966ae6d5996137714a36ecdc00d0c72c98c66499_amd64 |
| Red Hat | openshift4/ose-cluster-kube-scheduler-rhel9-operator@sha256:182524689949044ddc1e32bf6cced3d932f655da195a843041e059e4719bf619_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-cluster-kube-scheduler-rhel9-operator@sha256:182524689949044ddc1e32bf6cced3d932f655da195a843041e059e4719bf619_s390x, *, * |
| Red Hat | openshift4/ose-installer-rhel9@sha256:cf3358dc7c418d2f69625b44e39bd6af1b447024fe85ed8223506d8b859819f9_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, openshift4/ose-installer-rhel9@sha256:cf3358dc7c418d2f69625b44e39bd6af1b447024fe85ed8223506d8b859819f9_arm64, openshift4/ose-installer-rhel9@sha256:cf3358dc7c418d2f69625b44e39bd6af1b447024fe85ed8223506d8b859819f9_arm64 |
| Red Hat | openshift4/ose-installer-artifacts-rhel9@sha256:01fc3544b778039455eded4b21fc3cf53d613653a124e49e2eed9de915c29cc0_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-installer-artifacts-rhel9@sha256:01fc3544b778039455eded4b21fc3cf53d613653a124e49e2eed9de915c29cc0_ppc64le, openshift4/ose-installer-artifacts-rhel9@sha256:01fc3544b778039455eded4b21fc3cf53d613653a124e49e2eed9de915c29cc0_ppc64le, openshift4/ose-installer-artifacts-rhel9@sha256:01fc3544b778039455eded4b21fc3cf53d613653a124e49e2eed9de915c29cc0_ppc64le |
| Red Hat | openshift4/ose-cluster-kube-cluster-api-rhel9-operator@sha256:367a109cb020c8195012d74c85424b1fe2b4011810227c683142d899ff830b26_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | *, *, * |
| Red Hat | openshift4/ose-cluster-bootstrap-rhel9@sha256:656befc6644a1f189b76b919c6b74d46e68645326243fd7d4b9bca959dd32e5e_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, *, openshift4/ose-cluster-bootstrap-rhel9@sha256:656befc6644a1f189b76b919c6b74d46e68645326243fd7d4b9bca959dd32e5e_arm64 |
| Red Hat | openshift4/ose-cluster-update-keys-rhel9@sha256:544aadd0cc71f400a0bfeb8ac03f491020d33484ef3dad21022c28ec0db2d42b_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | *, *, openshift4/ose-cluster-update-keys-rhel9@sha256:544aadd0cc71f400a0bfeb8ac03f491020d33484ef3dad21022c28ec0db2d42b_ppc64le |
| Red Hat | openshift4/ose-installer-rhel9@sha256:8ce073215e82fc574865ef35532e61d89545bd9bef200b4b4f3ecd11d00bfed0_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-installer-rhel9@sha256:8ce073215e82fc574865ef35532e61d89545bd9bef200b4b4f3ecd11d00bfed0_s390x, openshift4/ose-installer-rhel9@sha256:8ce073215e82fc574865ef35532e61d89545bd9bef200b4b4f3ecd11d00bfed0_s390x, openshift4/ose-installer-rhel9@sha256:8ce073215e82fc574865ef35532e61d89545bd9bef200b4b4f3ecd11d00bfed0_s390x |
| Red Hat | openshift4/ose-cluster-config-rhel9-operator@sha256:53a2dbaf6f56d7b5f0548056b9366269065ad091dc0888a270af15dfe10ed6c3_s390x as a component of Red Hat OpenShift Container Platform 4.18 | *, openshift4/ose-cluster-config-rhel9-operator@sha256:53a2dbaf6f56d7b5f0548056b9366269065ad091dc0888a270af15dfe10ed6c3_s390x, * |
| Red Hat | openshift4/ose-cluster-samples-rhel9-operator@sha256:d7bc45bffeedcab73c6e2f4e32666ad7d2c22b09ab4715e17d605b406082f73e_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, *, * |
| Red Hat | openshift4/ose-openshift-apiserver-rhel9@sha256:9eae95fd35c2dd18032cbfabbb9c4a374a4f6dc22ab86b20a94d5308cf8c1e0c_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-openshift-apiserver-rhel9@sha256:9eae95fd35c2dd18032cbfabbb9c4a374a4f6dc22ab86b20a94d5308cf8c1e0c_amd64, *, * |
| Red Hat | openshift4/ose-cluster-image-registry-rhel9-operator@sha256:65d254338832d3bb0ceaf25b863a9da11bc8e63cb913d73c6581b6578788afc1_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-cluster-image-registry-rhel9-operator@sha256:65d254338832d3bb0ceaf25b863a9da11bc8e63cb913d73c6581b6578788afc1_arm64, *, * |
| Red Hat | openshift4/ose-aws-ebs-csi-driver-rhel9@sha256:1d0a1e72ba2c204cab2c4937a07d0b1ac387eb84ced03129250ee2b1035f0485_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | *, openshift4/ose-aws-ebs-csi-driver-rhel9@sha256:1d0a1e72ba2c204cab2c4937a07d0b1ac387eb84ced03129250ee2b1035f0485_amd64, openshift4/ose-aws-ebs-csi-driver-rhel9@sha256:1d0a1e72ba2c204cab2c4937a07d0b1ac387eb84ced03129250ee2b1035f0485_amd64 |
| Red Hat | openshift4/ose-powervs-block-csi-driver-rhel9@sha256:afd4cc0342927478df2f5f90244b3894659e615b5ba83e6915cb61d3256ad4bf_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-powervs-block-csi-driver-rhel9@sha256:afd4cc0342927478df2f5f90244b3894659e615b5ba83e6915cb61d3256ad4bf_amd64, openshift4/ose-powervs-block-csi-driver-rhel9@sha256:afd4cc0342927478df2f5f90244b3894659e615b5ba83e6915cb61d3256ad4bf_amd64, openshift4/ose-powervs-block-csi-driver-rhel9@sha256:afd4cc0342927478df2f5f90244b3894659e615b5ba83e6915cb61d3256ad4bf_amd64 |
| Red Hat | openshift4/ose-csi-driver-manila-rhel9@sha256:d61d026f52c3c0c0f2cd3e4a6b85c98002bc1f297875e7c24f49b103fc79be1c_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | *, *, openshift4/ose-csi-driver-manila-rhel9@sha256:d61d026f52c3c0c0f2cd3e4a6b85c98002bc1f297875e7c24f49b103fc79be1c_amd64 |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel9@sha256:879ed8b11b4ec386187422b53b51bb2aa1796acb45bd7d13c6a2371249e2177c_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-agent-installer-node-agent-rhel9@sha256:879ed8b11b4ec386187422b53b51bb2aa1796acb45bd7d13c6a2371249e2177c_arm64, openshift4/ose-agent-installer-node-agent-rhel9@sha256:879ed8b11b4ec386187422b53b51bb2aa1796acb45bd7d13c6a2371249e2177c_arm64, openshift4/ose-agent-installer-node-agent-rhel9@sha256:879ed8b11b4ec386187422b53b51bb2aa1796acb45bd7d13c6a2371249e2177c_arm64 |
| Red Hat | openshift4/ose-cluster-dns-rhel9-operator@sha256:88254a2078c714a675847b8039386f875f8f892466a45c8dcb85c2a94c3cd70a_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-cluster-dns-rhel9-operator@sha256:88254a2078c714a675847b8039386f875f8f892466a45c8dcb85c2a94c3cd70a_s390x, *, * |
| Red Hat | openshift4/ose-cli-artifacts-rhel9@sha256:cdacf7c6db21f7dac55cfd953cfee3b9cfdb249934942dbdbaf1edcd34e5d8a1_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-cli-artifacts-rhel9@sha256:cdacf7c6db21f7dac55cfd953cfee3b9cfdb249934942dbdbaf1edcd34e5d8a1_amd64, openshift4/ose-cli-artifacts-rhel9@sha256:cdacf7c6db21f7dac55cfd953cfee3b9cfdb249934942dbdbaf1edcd34e5d8a1_amd64, openshift4/ose-cli-artifacts-rhel9@sha256:cdacf7c6db21f7dac55cfd953cfee3b9cfdb249934942dbdbaf1edcd34e5d8a1_amd64 |
…and 1306 more
Timeline
- Jun 3, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jun 18, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:8284 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1402345 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2348366 issue
- https://issues.redhat.com/browse/OCPBUGS-52189 advisory
- https://issues.redhat.com/browse/OCPBUGS-53142 advisory
- https://issues.redhat.com/browse/OCPBUGS-54337 advisory
- https://issues.redhat.com/browse/OCPBUGS-54532 advisory
- https://issues.redhat.com/browse/OCPBUGS-55638 advisory
- https://issues.redhat.com/browse/OCPBUGS-55840 advisory
- https://issues.redhat.com/browse/OCPBUGS-56043 advisory
- https://issues.redhat.com/browse/OCPBUGS-56097 advisory
- https://issues.redhat.com/browse/OCPBUGS-56217 advisory
- https://issues.redhat.com/browse/OCPBUGS-56401 advisory
- https://issues.redhat.com/browse/OCPBUGS-56431 advisory
- https://issues.redhat.com/browse/OCPBUGS-56524 advisory
- https://issues.redhat.com/browse/OCPBUGS-56627 advisory
- https://issues.redhat.com/browse/OCPBUGS-56654 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8284.json advisory
- https://access.redhat.com/security/cve/CVE-2016-9840 advisory
…and 10 more