Red Hat Security AdvisoryRHSA-2019:3403
container-tools:rhel8 security, bug fix, and enhancement update
Released 2019-11-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) buildah-1.9.0-5.module+el8.1.0+4240+893c1ab8.aarch64::container-tools:rhel8, buildah-1.9.0-5.module+el8.1.0+4240+893c1ab8.ppc64le::container-tools:rhel8, buildah-1.9.0-5.module+el8.1.0+4240+893c1ab8.s390x::container-tools:rhel8 +47
Fixes 3 records
Priority MEDIUM 55
ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.16658 · Published 2019-07-29 · Partial fix CWE-755
Priority LOW 39
Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03159 · Published 2019-04-02 · Partial fix CWE-670
Priority LOW 30
The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container regi…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01591 · Published 2019-11-25 · Partial fix · 3.0.0 CWE-522
THREATIST.IORead the docs