Red Hat Security AdvisoryRHSA-2024:1244
rhc-worker-script security update
Released 2024-03-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) rhc-worker-script-0.6-1.el7_9
- Red Hat Enterprise Linux Server (v. 7) rhc-worker-script-0.6-1.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) rhc-worker-script-0.6-1.el7_9
Fixes 1 record
Priority LOW 26
A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01208 · Published 2023-12-06 · Partial fix · 1.20.12, 1.21.5