TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m
HTTP/2 CONTINUATION flood in net/http
Priority HIGH 81
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
RHSA-2024:6406
OpenShift Container Platform 4.14.36 security update
Released 2024-09-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.14 openshift4/cloud-network-config-controller-rhel8, openshift4/driver-toolkit-rhel9, openshift4/egress-router-cni-rhel8 +47
Fixes 10 records
TI-2023-25448 CVE-2023-47108 · GHSA-8pgv-569h-w5rw
DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics
Priority HIGH 72
OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.
TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
TI-2024-03796 CVE-2024-4076 · GHSA-gfw8-mh94-9w58
Assertion failure when serving both stale cache data and authoritative zone content
Priority MEDIUM 43
Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure.
TI-2024-01838 CVE-2024-1975 · GHSA-xv2w-3fww-7hvf
SIG(0) can be used to exhaust CPU resources
Priority MEDIUM 43
If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of…
TI-2024-01615 CVE-2024-1737 · GHSA-9xxq-vvgh-v3r9
BIND's database will be slow if a very large number of RRs exist at the same name
Priority MEDIUM 43
Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling…
TI-2024-22527 CVE-2024-34069 · GHSA-2g68-c3qc-8985
Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution
Priority MEDIUM 41
Werkzeug is a comprehensive WSGI web application library.
TI-2023-24163 CVE-2023-45142 · GHSA-rcjv-mgp8-qvmr
OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics
Priority LOW 36
OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.
TI-2024-00807 CVE-2024-0874 · GHSA-m9w6-wp3h-vq8g
Coredns: cd bit response is cached and served later
Priority LOW 31
A flaw was found in coredns.
TI-2024-05657 CVE-2024-6104 · GHSA-v6v8-xj6m-xwqh
go-retryablehttp can leak basic auth credentials to log files
Priority LOW 27
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.