Red Hat Security Advisory

RHSA-2024:6013

OpenShift Container Platform 4.15.30 bug fix and security update

Released 2024-09-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.15 openshift4/ose-console, rhcos

Fixes 4 records

TI-2024-03796 CVE-2024-4076 · GHSA-gfw8-mh94-9w58

Assertion failure when serving both stale cache data and authoritative zone content

MEDIUM 43

Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02111 Published 2024-07-23 Partial fix CWE-617

TI-2024-01838 CVE-2024-1975 · GHSA-xv2w-3fww-7hvf

SIG(0) can be used to exhaust CPU resources

MEDIUM 43

If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02114 Published 2024-07-23 Partial fix CWE-770

TI-2024-01615 CVE-2024-1737 · GHSA-9xxq-vvgh-v3r9

BIND's database will be slow if a very large number of RRs exist at the same name

MEDIUM 43

Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02114 Published 2024-07-23 Partial fix CWE-770

TI-2024-17237 CVE-2024-26147 · GHSA-r53h-jv2g-vpx6

Helm's Missing YAML Content Leads To Panic

MEDIUM 41

Helm is a package manager for Charts for Kubernetes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00926 Published 2024-02-21 Partial fix · 3.14.2 CWE-457