Red Hat Security AdvisoryRHSA-2024:1061
Red Hat Satellite 6 security and bug fix update
Released 2024-02-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Satellite 6.13 for RHEL 8 foreman-3.5.1.24-1.el8sat, foreman-cli-3.5.1.24-1.el8sat, foreman-debug-3.5.1.24-1.el8sat +11
Fixes 5 records
Priority MEDIUM 41
The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a client sends many QoS 2 messages with duplicate message IDs, and fails to respond to PUBREC commands.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0131 · Published 2023-09-01 · Fixed CWE-401
Priority LOW 34
In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00787 · Published 2023-10-02 · Fixed in 2.0.16 CWE-401
Priority LOW 33
In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.00709 · Published 2023-10-02 · Fixed in 2.0.16 CWE-789
Priority LOW 31
A sensitive information exposure vulnerability was found in foreman.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00288 · Published 2023-10-03 · Fixed in 3.5.1.24-1.el8sat, 3.7.0.10-1.el8sat +1 CWE-200
Priority LOW 22
A blind site-to-site request forgery vulnerability was found in Satellite server.
CVSS 3.1MEDIUM 4.5· Network · High privileges · User interaction · EPSS 0.00713 · Published 2022-12-16 · Fixed
THREATIST.IORead the docs