Red Hat Security Advisory

RHSA-2019:2817

OpenShift Container Platform 3.11 security update

Released 2019-09-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 3.11 cri-o-1.11.16-0.2.dev.rhaos3.11.git3f89eba.el7

Fixes 3 records

TI-2019-06949 CVE-2019-9514 · GHSA-39qc-96h7-956f

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a…

HIGH 74

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.82813 Published 2019-08-13 Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400

TI-2019-06947 CVE-2019-9512 · GHSA-hgr8-6h9x-f7q9

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a…

HIGH 74

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.83433 Published 2019-08-13 Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400

TI-2019-07534 CVE-2019-10214 · GHSA-85p9-j7c9-v4gr

Insufficiently protected credentials in containers/image

LOW 30

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container regi…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01591 Published 2019-11-25 Partial fix · 3.0.0 CWE-522