Red Hat Security AdvisoryRHSA-2023:3403
pcs security and bug fix update
Released 2023-05-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux High Availability EUS (v.8.6) pcs-0.10.12-6.el8_6.4, pcs-snmp-0.10.12-6.el8_6.4
- Red Hat Enterprise Linux Resilient Storage EUS (v.8.6) pcs-0.10.12-6.el8_6.4, pcs-snmp-0.10.12-6.el8_6.4
Fixes 2 records
Priority MEDIUM 42
A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing t…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0183 · Published 2023-03-10 · Partial fix · 2.0.9.3, 2.1.4.3 +2 CWE-400
Priority LOW 26
There is a denial of service vulnerability in the header parsing component of Rack.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01058 · Published 2025-01-09 · Partial fix · 2.2.6.4, 3.0.6.1