Lucene search

K
redhatRedHatRHSA-2024:4034
HistoryJun 20, 2024 - 3:41 p.m.

(RHSA-2024:4034) Important: Red Hat Service Interconnect 1.5.4 Release security update (images)

2024-06-2015:41:16
access.redhat.com
9
red hat service interconnect
service network
hybrid cloud
tcp
http
geographically distributed
security update
cve-2023-45288
cve-2024-24783

CVSS2

5.2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

AI Score

7.3

Confidence

Low

EPSS

0.005

Percentile

77.0%

Red Hat Service Interconnect 1.5 creates a service network, linking TCP and HTTP services across the hybrid cloud.
A service network enables communication between services running in different network locations or sites.

It allows geographically distributed services to connect as if they were all running in the same site.

Security Fix(es):

  • golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)

  • golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS2

5.2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

AI Score

7.3

Confidence

Low

EPSS

0.005

Percentile

77.0%