Red Hat Security AdvisoryRHSA-2024:4126
Red Hat Service Interconnect 1.4.5 Release security update
Released 2024-06-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- 9Base-Service-Interconnect-1.4 service-interconnect/skupper-config-sync-rhel9, service-interconnect/skupper-flow-collector-rhel9, service-interconnect/skupper-operator-bundle +3
Fixes 5 records
Priority HIGH 74
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an a…
CVSS 3.1HIGH 7.3· Local · No auth · No interaction · EPSS 0.8833 · Published 2024-04-17 · Partial fix · 2.40 CWE-787
Priority MEDIUM 40
nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocati…
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.01075 · Published 2024-05-06 · Partial fix · 2.40 CWE-617
Priority LOW 38
nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-base…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.0131 · Published 2024-05-06 · Partial fix · 2.40 CWE-121
Priority LOW 35
nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer.
CVSS 3.1HIGH 7.4· Local · No auth · No interaction · EPSS 0.00403 · Published 2024-05-06 · Partial fix · 2.40 CWE-466
Priority LOW 29
nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01216 · Published 2024-05-06 · Partial fix · 2.40 CWE-476