Lucene search
RedHatRHSA-2023:5950HistoryOct 19, 2023 - 10:19 p.m.
(RHSA-2023:5950) Important: Red Hat OpenShift Service Mesh for 2.2.11 security update
2023-10-1922:19:00
access.redhat.com
24
red hat openshift
service mesh
golang
net/http
security update
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.816
Percentile
98.4%
Security Fix(es):
- golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
redhat
redhat
rocky
rocky
glibc security update
2023-10-06 22:57:06
toolbox security update
2023-11-11 23:00:15
go-toolset:rhel8 security update
2023-10-24 18:35:47
oraclelinux
oraclelinux
glibc security update
2023-10-12 00:00:00
glibc security update
2023-10-10 00:00:00
glibc security update
2023-10-12 00:00:00
osv
osv
Important: glibc security update
2023-10-06 22:57:06
Important: glibc security update
2023-10-05 00:00:00
Important: glibc security update
2023-10-05 00:00:00
nessus
nessus
RHEL 9 : glibc (RHSA-2023:5453)
2023-10-05 00:00:00
Amazon Linux 2023 : compat-libpthread-nonshared, glibc, glibc-all-langpacks (ALAS2023-2023-359)
2023-10-03 00:00:00
Oracle Linux 8 : glibc (ELSA-2023-5455)
2023-10-10 00:00:00
almalinux
almalinux
Important: glibc security update
2023-10-05 00:00:00
Important: glibc security update
2023-10-05 00:00:00
Moderate: grafana security update
2023-10-18 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2332
2024-01-30 08:26:13
ibm
ibm
openvas
openvas
Debian: Security Advisory (DSA-5514-1)
2023-10-04 00:00:00
Fedora: Security Advisory (FEDORA-2023-63e5a77522)
2023-10-05 00:00:00
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-1426)
2024-03-21 00:00:00
debian
debian
[SECURITY] [DSA 5514-1] glibc security update
2023-10-03 17:26:13
fedora
fedora
[SECURITY] Fedora 37 Update: glibc-2.36-14.fc37
2023-10-04 15:49:21
[SECURITY] Fedora 38 Update: glibc-2.37-10.fc38
2023-10-04 15:52:08
[SECURITY] Fedora 39 Update: glibc-2.38-6.fc39
2023-10-04 17:16:19
gentoo
gentoo
glibc: Multiple vulnerabilities
2023-10-04 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2023-10-03 00:00:00
cloudfoundry
cloudfoundry
USN-6409-1: GNU C Library vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
mageia
mageia
Updated glibc packages fix security and other bugs
2023-09-27 19:31:30
freebsd
freebsd
traefik -- Resource exhaustion by malicious HTTP/2 client
2023-10-10 00:00:00
redhatcve
redhatcve
CVE-2023-39325
2023-10-11 17:12:30
CVE-2023-44487
2023-10-10 21:13:33
github
github
Traefik vulnerable to HTTP/2 request causing denial of service
2023-10-17 02:37:42
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.816
Percentile
98.4%
Related for RHSA-2023:5950