Red Hat Security AdvisoryRHSA-2019:2769
OpenShift Container Platform 3.9 security update
Released 2019-10-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 3.9 ansible-service-broker-1.1.20-2.el7, ansible-service-broker-container-scripts-1.1.20-2.el7, ansible-service-broker-selinux-1.1.20-2.el7 +44
Fixes 3 records
Priority HIGH 74
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.82813 · Published 2019-08-13 · Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400
Priority HIGH 74
Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.83433 · Published 2019-08-13 · Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400
Priority LOW 39
The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.0215 · Published 2019-08-29 · Fixed in 1.13.9, 1.14.5 +4 CWE-20
