Read the docs
Red Hat Security Advisory

RHSA-2024:7599

OpenShift Container Platform 4.16.16 bug fix and security update

Released 2024-10-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

TI-2024-05670 CVE-2024-6119 · GHSA-7m4m-pwhv-49c5

Possible denial of service in X.509 name checks

Priority HIGH 75

Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.66582 Published 2024-09-03 Partial fix · 3.3.2, 3.2.3 +2 CWE-843
TI-2024-02768 CVE-2024-2961 · GHSA-22q4-f5r6-3xqw

Out-of-bounds write in GNU glibc

Priority HIGH 74

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an a…

CVSS 3.1HIGH 7.3 Local No auth No interaction EPSS 0.8833 Published 2024-04-17 Partial fix · 2.40 CWE-787
TI-2023-03233 CVE-2023-3462 · GHSA-9v3w-w2jh-4hff

Vault's LDAP Auth Method Allows for User Enumeration

Priority LOW 25

HashiCorp's Vault and Vault Enterprise are vulnerable to user enumeration when using the LDAP auth method.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00613 Published 2023-07-31 Partial fix · 1.13.5, 1.14.1 CWE-203