Red Hat Security AdvisoryRHSA-2024:1994
container-tools:rhel8 security update
Released 2024-04-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+21266+3e24c7b3.aarch64::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+21266+3e24c7b3.ppc64le::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+21266+3e24c7b3.s390x::container-tools:rhel8 +47
Fixes 1 record
Priority MEDIUM 43
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01841 · Published 2022-10-14 · Partial fix · 0.3.8 CWE-772
