TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m
HTTP/2 CONTINUATION flood in net/http
Priority HIGH 81
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
RHSA-2024:4960
OpenShift Container Platform 4.14.34 bug fix and security update
Released 2024-08-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.14 openshift4/ose-aws-ebs-csi-driver-rhel8, openshift4/ose-cloud-credential-operator, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8 +6
Fixes 7 records
TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
TI-2023-13855 CVE-2023-29483 · GHSA-3rq5-2g8h-59hc
eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to…
Priority MEDIUM 64
eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" a…
TI-2024-05949 CVE-2024-6409 · GHSA-79hg-h6r6-64mm
Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9
Priority MEDIUM 55
A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd).
TI-2024-03473 CVE-2024-3727 · GHSA-6wvf-f2vw-3425
Containers/image: digest type does not guarantee valid type
Priority LOW 39
A flaw was found in the github.com/containers/image library.
TI-2024-01301 CVE-2024-1394 · GHSA-78hx-gp6g-7mj6
Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads
Priority LOW 36
A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs.
TI-2024-05657 CVE-2024-6104 · GHSA-v6v8-xj6m-xwqh
go-retryablehttp can leak basic auth credentials to log files
Priority LOW 27
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.