Red Hat Security AdvisoryRHSA-2025:2588
RHOAI 2.18.0 - Red Hat OpenShift AI
Released 2025-03-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift AI 2.18 registry.redhat.io/rhoai/odh-dashboard-rhel8, registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel8, registry.redhat.io/rhoai/odh-modelmesh-rhel8 +2
Fixes 5 records
Priority HIGH 72
Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02192 · Published 2025-02-10 · Partial fix · 4.1.118.Final CWE-20
Priority HIGH 65
Undici is an HTTP/1.1 client.
CVSS 3.1MEDIUM 6.8· Network · No auth · User interaction · EPSS 0.00763 · Published 2025-01-21 · Partial fix · 5.28.5, 6.21.1 +1 CWE-330
Priority MEDIUM 55
It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.16015 · Published 2025-01-29 · Partial fix CWE-405
Priority MEDIUM 53
Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.03181 · Published 2024-12-11 · Partial fix · 0.31.0 CWE-285
Priority LOW 32
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01072 · Published 2024-12-18 · Partial fix · 0.33.0 CWE-1333
THREATIST.IORead the docs