Lucene search

RedHatRHSA-2023:7663

HistoryDec 06, 2023 - 4:57 a.m.

(RHSA-2023:7663) Important: Red Hat OpenShift distributed tracing 3.0.0 operator/operand containers

2023-12-0604:57:55

access.redhat.com

red hat openshift

distributed tracing

security fixes

cve-2023-45142

cve-2023-46129

dos vulnerability

otelhttp

nkeys

seal encryption

cvss score

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.5%

JSON

Release of Red Hat OpenShift distributed tracing provides these changes:

Security Fix(es):

CVE-2023-45142 opentelemetry: DoS vulnerability in otelhttp
CVE-2023-46129 nkeys: xkeys Seal encryption used fixed key for all encryption

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in the
References section.

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.5%

JSON

Related for RHSA-2023:7663