Red Hat Security Advisory

RHSA-2023:3304

OpenShift Container Platform 4.13.1 bug fix and security update

Released 2023-05-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.13 openshift4/cloud-network-config-controller-rhel8, openshift4/network-tools-rhel8, openshift4/oc-mirror-plugin-rhel8 +42

Fixes 4 records

TI-2022-20114 CVE-2022-41723 · GHSA-vvpx-j8f3-3w6h

Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

MEDIUM 46

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04561 Published 2023-02-28 Partial fix · 1.19.6, 1.20.1 +1 CWE-400

TI-2022-20113 CVE-2022-41722 · GHSA-fp44-cj2j-3jhx

Path traversal on Windows in path/filepath

MEDIUM 42

A path traversal vulnerability exists in filepath.Clean on Windows.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01678 Published 2023-02-28 Partial fix · 1.19.6, 1.20.1 CWE-22

TI-2018-12412 CVE-2018-17419 · GHSA-9jcx-pr2f-qvq5

An issue was discovered in setTA in scan_rr.go in the Miek Gieben DNS library before…

LOW 36

An issue was discovered in setTA in scan_rr.go in the Miek Gieben DNS library before 1.0.10 for Go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0176 Published 2019-03-07 Fixed in 1.0.10 CWE-476

TI-2021-14576 CVE-2021-36157 · GHSA-jphm-g89m-v42p

An issue was discovered in Grafana Cortex through 1.9.0.

LOW 27

An issue was discovered in Grafana Cortex through 1.9.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01392 Published 2021-08-03 Partial fix CWE-22