Red Hat Security AdvisoryRHSA-2023:0727
OpenShift Container Platform 4.12.3 security update
Released 2023-02-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.12 buildah-1:1.23.4-4.rhaos4.12.el8, buildah-1:1.23.4-4.rhaos4.12.el9, buildah-tests-1:1.23.4-4.rhaos4.12.el8 +45
Fixes 5 records
Priority LOW 37
Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compres…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02186 · Published 2022-08-09 · Partial fix · 1.17.12, 1.18.4 CWE-674
Priority LOW 37
Reader.Read does not set a limit on the maximum size of file headers.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02006 · Published 2022-10-14 · Partial fix · 1.18.7, 1.19.2 CWE-770
Priority LOW 36
Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01726 · Published 2022-10-14 · Partial fix · 1.18.7, 1.19.2
Priority LOW 36
Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01408 · Published 2022-10-14 · Partial fix · 1.18.7, 1.19.2 CWE-444
Priority LOW 33
An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01834 · Published 2023-03-23 · Partial fix CWE-400
THREATIST.IORead the docs