Red Hat Security Advisory

RHSA-2024:0193

OpenShift Container Platform 4.13.29 bug fix and security update

Released 2024-01-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.13 openshift4/ose-aws-pod-identity-webhook-rhel8, openshift4/ose-cluster-network-operator, openshift4/ose-operator-lifecycle-manager

TI-2023-20466 CVE-2023-39325 · GHSA-4374-p667-p6c8

LOW 39

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03796 Published 2023-10-11 Partial fix · 1.20.10, 1.21.3 +1 CWE-770

TI-2021-03617 CVE-2021-20329 · GHSA-f6mq-5m25-4r72

LOW 32

Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00935 Published 2021-06-10 Partial fix · 1.5.1 CWE-1287