Lucene search
RedHatRHSA-2024:3943HistoryJun 17, 2024 - 9:23 a.m.
(RHSA-2024:3943) Important: Red Hat OpenShift distributed tracing 3.2.1 operator containers security update
2024-06-1709:23:00
access.redhat.com
3
red hat
openshift
distributed tracing
security update
cve-2024-36129
CVSS3
8.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
AI Score
7.3
Confidence
Low
Release of Red Hat OpenShift distributed tracing provides these changes:
Security Fix(es):
- opentelemetry-collector: denial of service via specially crafted HTTP or gRPC request (CVE-2024-36129)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
github
github
Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC
2024-06-05 16:56:19
go-grpc-compression has a zstd decompression bombing vulnerability
2024-06-10 18:36:23
osv
osv
CGA-pcg5-4j97-pg45
2024-06-06 12:26:13
Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC in go.opentelemetry.io/collector/config/configgrpc
2024-06-14 13:41:08
CGA-fgpc-cmgm-h4p9
2024-06-06 23:03:34
gitlab
gitlab
Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC
2024-06-05 00:00:00
Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC
2024-06-05 00:00:00
nessus
nessus
OpenTelemetry Collector < 0.102.1 DoS
2024-06-14 00:00:00
Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2024-2630)
2024-09-09 00:00:00
Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2024-708)
2024-09-09 00:00:00
vulnrichment
vulnrichment
ibm
ibm
wolfi
wolfi
CVE-2024-36129 vulnerabilities
2024-09-19 09:11:50
nvd
nvd
CVE-2024-36129
2024-06-05 18:15:10
cvelist
cvelist
redhatcve
redhatcve
CVE-2024-36129
2024-06-11 19:27:57
cve
cve
CVE-2024-36129
2024-06-05 18:15:10
amazon
amazon
Important: amazon-cloudwatch-agent
2024-08-28 19:04:00
CVSS3
8.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
AI Score
7.3
Confidence
Low
Related for RHSA-2024:3943