Critical OpenShift and OpenSSH Flaws Expose Linux Systems to Root Access

Authorities warned that Red Hat OpenShift Container Platform 4 contains two high-severity vulnerabilities that can lead to code execution and node takeover in enterprise container environments. CVE-2024-45496 in ose-openshift-controller-manager-container carries a CVSS 9.9 rating and can allow arbitrary code execution on an OpenShift node when a user with developer-level access exploits insufficient restrictions on elevated privileges. CVE-2024-7387 in openshift4/ose-docker-builder, rated CVSS 9.1, can enable arbitrary command execution on an OpenShift node and may allow privilege escalation and full control of the affected node. At the time of the alert, mitigations were available but vendor patches had not yet been released.

A separate alert highlighted the regreSSHion flaw in OpenSSH, which can give an attacker unrestricted root-level access on vulnerable Linux and FreeBSD-based systems. The issue affects OpenSSH versions from 8.5p1 up to but not including 9.8p1, as well as versions earlier than 4.4p1; OpenBSD-based systems were reported as not vulnerable. Successful exploitation has been confirmed on systems using glibc, while systems using musl libc were reported as not vulnerable, and the attack currently requires repeated attempts over hours or days. A fix is available in OpenSSH 9.8p1, though some distributors have backported the patch, meaning package version numbers alone may not reliably indicate exposure.