Red Hat Security AdvisoryRHSA-2020:4689
openwsman security update
Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) libwsman-devel-2.6.5-7.el8
- Red Hat Enterprise Linux AppStream (v. 8) libwsman1-2.6.5-7.el8, openwsman-2.6.5-7.el8, openwsman-client-2.6.5-7.el8 +2
Fixes 1 record
Priority MEDIUM 49
Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.15243 · Published 2019-03-14 · Partial fix CWE-835
