Red Hat Security AdvisoryRHSA-2024:6412
OpenShift Container Platform 4.14.36 security update
Released 2024-09-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.14 haproxy-2.6.13-4.rhaos4.14.el8, haproxy26-2.6.13-4.rhaos4.14.el8, openshift-4.14.0-202409041843.p0.g03a907c.assembly.stream.el8 +3
Fixes 2 records
Priority MEDIUM 45
HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end rule, such as routing…
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.01514 · Published 2023-11-28 · Partial fix CWE-116
Priority LOW 38
Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02807 · Published 2022-02-11 · Partial fix CWE-190
