Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2023-7202
HistoryNov 22, 2023 - 12:00 a.m.

container-tools:4.0 security and bug fix update

2023-11-2200:00:00
linux.oracle.com
8
container-tools security bug-fix update cve-2023-29406 related 2176055 resolves 2236831

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.1%

JSON

buildah
[1:1.24.6-7]

  • rebuild for CVE-2023-29406
  • Related: #2176055
    cockpit-podman
    conmon
    containernetworking-plugins
    containers-common
    container-selinux
    criu
    crun
    fuse-overlayfs
    libslirp
    oci-seccomp-bpf-hook
    podman
    [2:4.0.2-24]
  • rebuild for CVE-2023-29406
  • Related: #2176055
    python-podman
    runc
    skopeo
    [2:1.6.2-9]
  • rebuild because of CVE-2023-29406
  • Resolves: #2236831
    slirp4netns
    udica
OSVersionArchitecturePackageVersionFilename
oracle linux8srcbuildah< 1.24.6-7.modulebuildah-1.24.6-7.module+el8.9.0+90086+8f2d6fb1.src.rpm
oracle linux8srccockpit-podman< 46-1.modulecockpit-podman-46-1.module+el8.9.0+90086+8f2d6fb1.src.rpm
oracle linux8srcconmon< 2.1.4-2.moduleconmon-2.1.4-2.module+el8.9.0+90086+8f2d6fb1.src.rpm
oracle linux8srccontainer-selinux< 2.205.0-3.modulecontainer-selinux-2.205.0-3.module+el8.9.0+90086+8f2d6fb1.src.rpm
oracle linux8srccontainernetworking-plugins< 1.1.1-5.modulecontainernetworking-plugins-1.1.1-5.module+el8.9.0+90086+8f2d6fb1.src.rpm
oracle linux8srccontainers-common< 1-38.0.1.modulecontainers-common-1-38.0.1.module+el8.9.0+90086+8f2d6fb1.src.rpm
oracle linux8srccriu< 3.15-3.modulecriu-3.15-3.module+el8.9.0+90086+8f2d6fb1.src.rpm
oracle linux8srccrun< 1.8.7-1.modulecrun-1.8.7-1.module+el8.9.0+90086+8f2d6fb1.src.rpm
oracle linux8srcfuse-overlayfs< 1.9-2.modulefuse-overlayfs-1.9-2.module+el8.9.0+90086+8f2d6fb1.src.rpm
oracle linux8srclibslirp< 4.4.0-1.modulelibslirp-4.4.0-1.module+el8.9.0+90086+8f2d6fb1.src.rpm
Rows per page:
1-10 of 981

Related

redhatcve 1
amazon 8
nessus 65
osv 12
veracode 1
cbl_mariner 3
ubuntucve 1
prion 1
alpinelinux 1
redhat 35
cve 1
openvas 9
cvelist 1
nvd 1
rocky 2
wolfi 1
ibm 25
debiancve 1
almalinux 8
cgr 1
photon 3
freebsd 1
oraclelinux 6
redos 1
gentoo 1
ics 1
redhatcve
redhatcve
CVE-2023-29406
2023-07-21 07:30:20
amazon
amazon
Important: golang
2023-08-03 18:10:00
Important: golist
2023-08-03 18:10:00
Important: cri-tools
2023-08-03 18:10:00
nessus
nessus
Amazon Linux 2023 : runc (ALAS2023-2023-311)
2023-08-24 00:00:00
Amazon Linux 2 : golist (ALAS-2023-2185)
2023-08-14 00:00:00
Amazon Linux 2 : runc (ALASECS-2023-005)
2023-09-06 00:00:00
osv
osv
BIT-golang-2023-29406
2024-03-06 10:55:04
CVE-2023-29406
2023-07-11 20:15:10
Moderate: container-tools:4.0 security and bug fix update
2023-11-28 22:43:02
veracode
veracode
CRLF Injection
2023-07-17 03:51:29
cbl_mariner
cbl_mariner
CVE-2023-29406 affecting package golang for versions less than 1.20.7-1
2024-07-03 17:22:50
CVE-2023-29406 affecting package golang for versions less than 1.20.7-1
2024-07-03 17:22:43
CVE-2023-29406 affecting package msft-golang for versions less than 1.20.7-1
2024-07-03 17:22:50
ubuntucve
ubuntucve
CVE-2023-29406
2023-07-11 00:00:00
prion
prion
Design/Logic Flaw
2023-07-11 20:15:00
alpinelinux
alpinelinux
CVE-2023-29406
2023-07-11 20:15:10
redhat
redhat
(RHSA-2023:7202) Moderate: container-tools:4.0 security and bug fix update
2023-11-14 16:23:40
(RHSA-2024:0293) Moderate: OpenShift Container Platform 4.14.10 packages and security update
2024-01-23 20:33:05
(RHSA-2023:5721) Important: go-toolset:rhel8 security update
2023-10-16 12:13:12
cve
cve
CVE-2023-29406
2023-07-11 20:15:10
openvas
openvas
openSUSE: Security Advisory for go1.20 (SUSE-SU-2023:3002-1)
2024-03-04 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-3006)
2023-10-31 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-3029)
2023-10-31 00:00:00
cvelist
cvelist
CVE-2023-29406 Insufficient sanitization of Host header in net/http
2023-07-11 19:23:58
nvd
nvd
CVE-2023-29406
2023-07-11 20:15:10
rocky
rocky
container-tools:4.0 security and bug fix update
2023-11-28 22:43:02
Satellite 6.14 security and bug fix update
2023-11-11 22:58:57
wolfi
wolfi
CVE-2023-29406 vulnerabilities
2024-07-03 16:16:08
ibm
ibm
Security Bulletin: Operations Dashboard is vulnerable to header injection due to Golang Go
2023-10-02 16:06:58
Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to HTTP header injection due to Go CVE-2023-29406
2023-09-14 17:23:24
Security Bulletin: IBM Event Streams is affected by a vulnerability in Golang Go (CVE-2023-29406)
2023-08-01 16:29:09
debiancve
debiancve
CVE-2023-29406
2023-07-11 20:15:10
almalinux
almalinux
Moderate: container-tools:4.0 security and bug fix update
2023-11-14 00:00:00
Moderate: buildah security update
2023-11-07 00:00:00
Moderate: containernetworking-plugins security and bug fix update
2023-11-07 00:00:00
cgr
cgr
CVE-2023-29406 vulnerabilities
2024-05-19 03:07:16
photon
photon
Moderate Photon OS Security Update - PHSA-2023-5.0-0066
2023-08-05 00:00:00
Moderate Photon OS Security Update - PHSA-2023-4.0-0484
2023-10-05 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0644
2023-09-06 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2023-04-27 00:00:00
oraclelinux
oraclelinux
containernetworking-plugins security and bug fix update
2023-11-11 00:00:00
skopeo security update
2023-11-11 00:00:00
buildah security update
2023-11-11 00:00:00
redos
redos
ROS-20240418-06
2024-04-18 00:00:00
gentoo
gentoo
Go: Multiple Vulnerabilities
2023-11-25 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.1%

JSON
Related for ELSA-2023-7202
redhatcve1amazon8nessus65osv12veracode1cbl_mariner3ubuntucve1prion1alpinelinux1redhat35cve1openvas9cvelist1nvd1rocky2wolfi1ibm25debiancve1almalinux8cgr1photon3freebsd1oraclelinux6redos1gentoo1ics1