Red Hat Security Advisory

RHSA-2023:7672

OpenShift Virtualization 4.14.1 RPMs security and bug fix update

Released 2023-12-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

CNV 4.14 for RHEL 8 kubevirt-4.14.1-2150.el8, kubevirt-virtctl-4.14.1-2150.el8, kubevirt-virtctl-redistributable-4.14.1-2150.el8

TI-2022-20116 CVE-2022-41725 · GHSA-w4h2-22wh-m6jx

MEDIUM 41

A denial of service is possible from excessive resource consumption in net/http and mime/multipart.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01241 Published 2023-02-28 Partial fix · 1.19.6, 1.20.1 CWE-770

TI-2022-20115 CVE-2022-41724 · GHSA-89mw-w342-mqrr

MEDIUM 41

Large handshake records may cause panics in crypto/tls.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01111 Published 2023-02-28 Partial fix · 1.19.6, 1.20.1 CWE-400