Lucene search

[email protected]NVD:CVE-2023-5625

HistoryNov 01, 2023 - 2:15 p.m.

CVE-2023-5625

2023-11-0114:15:38

CWE-400

[email protected]

web.nvd.nist.gov

red hat

python-eventlet

patch regression

cve-2023-5625

build

patch application

strategy

products

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

47.2%

JSON

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.

Affected configurations

Nvd

Node

redhatopenshift_container_platform_for_arm64Match4.12

redhatopenshift_container_platform_for_linuxoneMatch4.12

redhatopenshift_container_platform_for_powerMatch4.12

redhatopenshift_container_platform_ibm_z_systemsMatch4.12

AND

redhatenterprise_linuxMatch8.0

redhatenterprise_linuxMatch9.0

Node

redhatopenstack_platformMatch17.1

VendorProductVersionCPE
redhatopenshift_container_platform_for_arm644.12cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.12:*:*:*:*:*:*:*
redhatopenshift_container_platform_for_linuxone4.12cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.12:*:*:*:*:*:*:*
redhatopenshift_container_platform_for_power4.12cpe:2.3:a:redhat:openshift_container_platform_for_power:4.12:*:*:*:*:*:*:*
redhatopenshift_container_platform_ibm_z_systems4.12cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.12:*:*:*:*:*:*:*
redhatenterprise_linux8.0cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
redhatenterprise_linux9.0cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
redhatopenstack_platform17.1cpe:2.3:a:redhat:openstack_platform:17.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	openshift_container_platform_for_arm64	4.12	cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.12:::::::*
redhat	openshift_container_platform_for_linuxone	4.12	cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.12:::::::*
redhat	openshift_container_platform_for_power	4.12	cpe:2.3:a:redhat:openshift_container_platform_for_power:4.12:::::::*
redhat	openshift_container_platform_ibm_z_systems	4.12	cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.12:::::::*
redhat	enterprise_linux	8.0	cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
redhat	enterprise_linux	9.0	cpe:2.3:o:redhat:enterprise_linux:9.0:::::::*
redhat	openstack_platform	17.1	cpe:2.3:a:redhat:openstack_platform:17.1:::::::*