Lucene search
RedHatRHSA-2023:6180HistoryOct 30, 2023 - 12:51 p.m.
(RHSA-2023:6180) Important: Red Hat OpenShift distributed tracing 2.9.0 containers security update
2023-10-3012:51:55
access.redhat.com
11
red hat
openshift
distributed tracing
security update
browserify-sign
upper bound check
cve-2023-46234
containers
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
7.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
24.9%
Release of Red Hat OpenShift distributed tracing provides these changes:
Security Fix(es):
- browserify-sign: upper bound check issue in dsaVerify leads to a signature forgery attack (CVE-2023-46234)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
debian
debian
[SECURITY] [DSA 5539-1] node-browserify-sign security update
2023-10-30 16:25:31
[SECURITY] [DLA 3635-1] node-browserify-sign security update
2023-10-29 04:33:32
prion
prion
Out-of-bounds
2023-10-26 15:15:00
Code injection
2023-08-25 01:15:00
veracode
veracode
Improper Verification Of Cryptographic Signature
2023-10-27 08:50:35
Information Disclosure
2023-09-05 08:29:55
nessus
nessus
Debian DLA-3635-1 : node-browserify-sign - LTS security update
2023-10-29 00:00:00
RHEL 6 : browserify-sign (Unpatched Vulnerability)
2024-05-11 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5539-1)
2023-10-31 00:00:00
Ubuntu: Security Advisory (USN-6800-1)
2024-05-30 00:00:00
Debian: Security Advisory (DLA-3635-1)
2023-10-30 00:00:00
cvelist
cvelist
CVE-2023-46234 browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack
2023-10-26 14:31:35
CVE-2023-40217
2023-08-25 00:00:00
redhatcve
redhatcve
CVE-2023-46234
2023-10-27 06:27:16
CVE-2023-40217
2023-08-30 21:12:08
osv
osv
node-browserify-sign vulnerability
2024-05-30 10:12:04
CVE-2023-46234
2023-10-26 15:15:09
node-browserify-sign - security update
2023-10-29 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-46234 affecting package reaper for versions less than 3.1.1-9
2024-06-06 19:53:22
CVE-2023-40217 affecting package python3 for versions less than 3.9.19-1
2024-03-29 17:23:41
ubuntu
ubuntu
browserify-sign vulnerability
2024-05-30 00:00:00
Python vulnerability
2023-11-27 00:00:00
github
github
debiancve
debiancve
CVE-2023-46234
2023-10-26 15:15:09
CVE-2023-40217
2023-08-25 01:15:09
ibm
ibm
nvd
nvd
CVE-2023-46234
2023-10-26 15:15:09
CVE-2023-40217
2023-08-25 01:15:09
ubuntucve
ubuntucve
CVE-2023-46234
2023-10-26 00:00:00
CVE-2023-40217
2023-08-25 00:00:00
cve
cve
CVE-2023-46234
2023-10-26 15:15:09
CVE-2023-40217
2023-08-25 01:15:09
rocky
rocky
python3.11 security update
2023-10-06 22:57:49
python3 security update
2023-10-24 18:36:13
alpinelinux
alpinelinux
CVE-2023-40217
2023-08-25 01:15:09
redhat
redhat
(RHSA-2023:5997) Important: python3 security update
2023-10-23 08:47:41
(RHSA-2023:6290) Important: python security update
2023-11-02 15:38:13
(RHSA-2023:5996) Important: python3 security update
2023-10-23 08:45:45
oraclelinux
oraclelinux
python3.9 security update
2023-10-17 00:00:00
python security update
2023-11-13 00:00:00
python39:3.9 and python39-devel:3.9 security update
2023-10-25 00:00:00
almalinux
almalinux
Important: python3.9 security update
2023-10-05 00:00:00
Important: python39:3.9 and python39-devel:3.9 security update
2023-10-23 00:00:00
Important: python3.11 security update
2023-10-05 00:00:00
cgr
cgr
CVE-2023-40217 vulnerabilities
2024-05-19 03:07:16
slackware
slackware
[slackware-security] python3
2023-09-15 19:55:45
amazon
amazon
Important: python38
2023-08-30 17:56:00
Important: python27
2023-10-30 23:31:00
Important: python3
2023-08-31 22:28:00
centos
centos
python, tkinter security update
2024-01-12 19:20:10
python3 security update
2024-01-12 19:18:04
f5
f5
K000139685: Python vulnerability CVE-2023-40217
2024-05-21 00:00:00
freebsd
freebsd
Python -- multiple vulnerabilities
2023-08-22 00:00:00
cloudlinux
cloudlinux
python: Fix of CVE-2023-40217
2024-01-12 17:18:46
cloudfoundry
cloudfoundry
USN-6513-2: Python vulnerability | Cloud Foundry
2024-03-18 00:00:00
redos
redos
ROS-20240418-08
2024-04-18 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
7.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
24.9%
Related for RHSA-2023:6180