CVE-2024-12698mediumCWE-400

CVE-2024-12698: medium-severity vulnerability in catalogd

Ose-olm-catalogd-container: incomplete fix for rapid reset (cve-2023-39325/cve-2023-44487)

Published · Updated

Follow this CVE+ Monitor Red Hat OpenShift Container Platform+ Monitor catalogd

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.5%
An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability (CVE-2023-39325/CVE-2023-44487) where only unauthenticated streams were protected, not streams created by authenticated sources.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
catalogdRed Hat · Red Hat OpenShift Container Platform 4.18
Related CVEs — catalogd

In the same product, most dangerous first.

CVE-2024-12085HIGHRsync: info leak via uninitialized stack contentsEPSS 8.6%CVE-2026-4408CRITICALSamba: remote code execution in samrEPSS 2.5%CVE-2024-7387CRITICALOpenshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategyEPSS 2.3%CVE-2026-33845HIGHGnutls: gnutls: denial of service via dtls zero-length fragmentEPSS 2.1%CVE-2025-5318MEDIUMLibssh: out-of-bounds read in sftp_handle()EPSS 1.9%CVE-2025-5987HIGHLibssh: invalid return code for chacha20 poly1305 with openssl backendEPSS 1.7%