Red Hat Security Advisory

RHSA-2020:3940

openwsman security update

Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) libwsman1-2.6.3-7.git4391e5c.el7, openwsman-2.6.3-7.git4391e5c.el7, openwsman-client-2.6.3-7.git4391e5c.el7 +1
Red Hat Enterprise Linux Client Optional (v. 7) libwsman-devel-2.6.3-7.git4391e5c.el7, openwsman-perl-2.6.3-7.git4391e5c.el7, openwsman-python-2.6.3-7.git4391e5c.el7 +1
Red Hat Enterprise Linux ComputeNode (v. 7) libwsman1-2.6.3-7.git4391e5c.el7, openwsman-2.6.3-7.git4391e5c.el7, openwsman-client-2.6.3-7.git4391e5c.el7 +2
Red Hat Enterprise Linux ComputeNode Optional (v. 7) libwsman-devel-2.6.3-7.git4391e5c.el7, openwsman-perl-2.6.3-7.git4391e5c.el7, openwsman-ruby-2.6.3-7.git4391e5c.el7
Red Hat Enterprise Linux Server (v. 7) libwsman1-2.6.3-7.git4391e5c.el7, libwsman1-2.6.3-7.git4391e5c.el7.ppc, openwsman-2.6.3-7.git4391e5c.el7 +5
Red Hat Enterprise Linux Server Optional (v. 7) libwsman-devel-2.6.3-7.git4391e5c.el7, libwsman-devel-2.6.3-7.git4391e5c.el7.ppc, openwsman-perl-2.6.3-7.git4391e5c.el7 +1
Red Hat Enterprise Linux Workstation (v. 7) libwsman1-2.6.3-7.git4391e5c.el7, openwsman-2.6.3-7.git4391e5c.el7, openwsman-client-2.6.3-7.git4391e5c.el7 +2
Red Hat Enterprise Linux Workstation Optional (v. 7) libwsman-devel-2.6.3-7.git4391e5c.el7, openwsman-perl-2.6.3-7.git4391e5c.el7, openwsman-ruby-2.6.3-7.git4391e5c.el7

TI-2019-02845 CVE-2019-3833 · GHSA-6gg2-jx5v-58c2

MEDIUM 49

Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.15243 Published 2019-03-14 Partial fix CWE-835