Red Hat Security Advisory

RHSA-2023:7681

OpenShift Container Platform 4.14.6 security and extras update

Released 2023-12-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.14 openshift4/nmstate-console-plugin-rhel8, openshift4/ose-clusterresourceoverride-rhel8, openshift4/ose-clusterresourceoverride-rhel8-operator +1

Fixes 3 records

TI-2023-25448 CVE-2023-47108 · GHSA-8pgv-569h-w5rw

DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics

HIGH 72

OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02026 Published 2023-11-10 Partial fix · 0.46.0 CWE-770

TI-2023-11340 CVE-2023-26115 · GHSA-j8xg-fqg3-53r7

Regular expression denial of service in word-wrap

HIGH 72

All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of an insecure regular expression within the result variable.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01709 Published 2023-06-22 Partial fix · 1.2.4 CWE-1333

TI-2023-24163 CVE-2023-45142 · GHSA-rcjv-mgp8-qvmr

OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics

LOW 36

OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01614 Published 2023-10-12 Partial fix · 0.44.0 CWE-770