Lucene search
RedHatRHSA-2023:7662HistoryDec 06, 2023 - 12:17 a.m.
(RHSA-2023:7662) Important: Red Hat OpenShift for Windows Containers 6.0.3 security update
2023-12-0600:17:49
access.redhat.com
2
red hat openshift
windows containers
security fix
cve-2023-44487
cve-2023-39325
cve-2023-5528
privilege escalation
cvss score
references
kubernetes
golang
Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers.
Security Fix(es):
-
golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325)
-
kubernetes: Insufficient input sanitization in in-tree storage plugin leads to privilege escalation on Windows nodes (CVE-2023-5528)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
redhat
redhat
rocky
rocky
go-toolset:rhel8 security update
2023-10-24 18:35:47
toolbox security update
2023-11-11 23:00:15
grafana security update
2023-10-24 18:35:47
nessus
nessus
FreeBSD : traefik -- Resource exhaustion by malicious HTTP/2 client (7a1b2624-6a89-11ee-af06-5404a68ad561)
2023-10-14 00:00:00
Oracle Linux 8 : grafana (ELSA-2023-5863)
2023-10-23 00:00:00
Oracle Linux 9 : grafana (ELSA-2023-5867)
2023-10-23 00:00:00
oraclelinux
oraclelinux
olcne security update
2023-12-07 00:00:00
olcne security update
2023-12-07 00:00:00
grafana security update
2023-10-20 00:00:00
ibm
ibm
Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes API server security vulnerabilities (CVE-2023-39325 and CVE-2023-44487)
2023-12-08 09:00:02
almalinux
almalinux
Moderate: grafana security update
2023-10-18 00:00:00
Moderate: grafana security update
2023-10-18 00:00:00
Important: go-toolset:rhel8 security update
2023-10-16 00:00:00
osv
osv
Traefik vulnerable to HTTP/2 request causing denial of service
2023-10-17 02:37:42
Moderate: toolbox security update
2023-10-24 00:00:00
Moderate: toolbox security update
2023-11-11 23:00:15
openvas
openvas
openSUSE: Security Advisory for go1.21 (SUSE-SU-2023:4069-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for go1.20 (SUSE-SU-2023:4068-1)
2024-03-04 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-1082)
2024-01-09 00:00:00
redhatcve
redhatcve
github
github
Traefik vulnerable to HTTP/2 request causing denial of service
2023-10-17 02:37:42
Kubernetes Improper Input Validation vulnerability
2023-11-14 21:31:03
ubuntucve
ubuntucve
freebsd
freebsd
traefik -- Resource exhaustion by malicious HTTP/2 client
2023-10-10 00:00:00
nvd
nvd
amazon
amazon
Important: golang
2023-10-16 13:45:00
Important: golang
2023-10-16 13:45:00
cve
cve
fedora
fedora
[SECURITY] Fedora 37 Update: golang-1.20.10-3.fc37
2023-10-29 01:47:29
[SECURITY] Fedora 38 Update: golang-1.20.10-2.fc38
2023-10-29 01:34:45
[SECURITY] Fedora 39 Update: golang-1.21.3-1.fc39
2023-11-03 19:02:38
cvelist
cvelist
vulnrichment
vulnrichment
gentoo
gentoo
Kubelet: Privilege Escalation
2024-05-12 00:00:00
veracode
veracode
Improper Input Validation
2023-11-15 15:02:15
hackerone
hackerone
cgr
cgr
CVE-2023-5528 vulnerabilities
2024-05-19 03:07:16
prion
prion
Security feature bypass
2023-11-14 21:15:00
cbl_mariner
cbl_mariner
CVE-2023-5528 affecting package kubernetes for versions less than 1.28.4-1
2023-12-07 15:29:15
CVE-2023-5528 affecting package kubernetes for versions less than 1.28.7-2
2024-03-19 17:21:46
wolfi
wolfi
CVE-2023-5528 vulnerabilities
2024-07-03 09:08:38
debiancve
debiancve
CVE-2023-5528
2023-11-14 21:15:14
redos
redos
ROS-20231122-01
2023-11-22 00:00:00