Read the docs
Red Hat Security Advisory

RHSA-2024:6642

OpenShift Container Platform 4.12.65 bug fix and security update

Released 2024-09-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m

HTTP/2 CONTINUATION flood in net/http

Priority HIGH 81

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.89455 Published 2024-04-04 Partial fix · 1.21.9, 1.22.2 +1 CWE-400
TI-2024-01838 CVE-2024-1975 · GHSA-xv2w-3fww-7hvf

SIG(0) can be used to exhaust CPU resources

Priority MEDIUM 43

If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02114 Published 2024-07-23 Partial fix CWE-770
TI-2024-01615 CVE-2024-1737 · GHSA-9xxq-vvgh-v3r9

BIND's database will be slow if a very large number of RRs exist at the same name

Priority MEDIUM 43

Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02114 Published 2024-07-23 Partial fix CWE-770