Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2024:5547
HistoryAug 19, 2024 - 7:36 a.m.

(RHSA-2024:5547) Important: Red Hat OpenShift Data Foundation 4.16.1 bug fix and security update

2024-08-1907:36:00
access.redhat.com
1
red hat openshift
data foundation
bug fix
security update
scalable
persistent storage
multi-cloud
data management

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

High

JSON

Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multi-cloud data management service with an S3-compatible API.

Security Fix(es):

  • golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
  • golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
  • go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)
  • nodejs-ws: denial of service when handling a request with many HTTP headers (CVE-2024-37890)

Related

redhat 11
almalinux 6
osv 37
oraclelinux 5
nessus 51
debiancve 4
ibm 3
veracode 2
cbl_mariner 7
cvelist 4
cve 4
github 1
vulnrichment 2
redhatcve 3
wolfi 2
nvd 3
ubuntucve 4
openvas 26
f5 1
rocky 1
amazon 1
ubuntu 2
redos 2
hackerone 1
debian 2
prion 1
cgr 1
mageia 1
slackware 1
cloudfoundry 1
alpinelinux 2
fedora 7
redhat
redhat
(RHSA-2024:4613) Moderate: OpenShift Container Platform 4.16.4 bug fix and security update
2024-07-24 18:51:18
(RHSA-2024:5446) Moderate: OpenShift Container Platform 4.13.48 packages and security update
2024-08-22 11:47:42
(RHSA-2024:6462) Moderate: Cost Management enhancement and security update
2024-09-09 00:48:00
almalinux
almalinux
Moderate: grafana security update
2024-08-13 00:00:00
Moderate: openssh security update
2024-07-10 00:00:00
Moderate: libuv security update
2024-07-23 00:00:00
osv
osv
Moderate: grafana security update
2024-08-13 00:00:00
CGA-cm39-xg6p-r3wr
2024-07-15 21:56:09
CGA-h8rj-78mh-45v7
2024-06-19 07:34:55
oraclelinux
oraclelinux
grafana security update
2024-08-13 00:00:00
openssh security update
2024-07-10 00:00:00
libuv security update
2024-07-23 00:00:00
nessus
nessus
Oracle Linux 8 : grafana (ELSA-2024-5291)
2024-08-14 00:00:00
RHEL 8 / 9 : OpenShift Container Platform 4.13.48 (RHSA-2024:5446)
2024-08-22 00:00:00
RHEL 8 : grafana (RHSA-2024:5291)
2024-08-14 00:00:00
debiancve
debiancve
CVE-2024-37890
2024-06-17 20:15:13
CVE-2024-6409
2024-07-08 18:15:09
CVE-2024-24806
2024-02-07 22:15:10
ibm
ibm
Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to Node.js module ws (CVE-2024-37890)
2024-08-15 16:26:22
Security Bulletin: IBM Decision Optimization for Cloud Pak for Data is vulnerable to a denial of service (CVE-2024-37890)
2024-08-26 16:34:09
Security Bulletin: Vulnerabilities in Node.js and packages affect IBM Voice Gateway
2024-07-09 19:56:56
veracode
veracode
Denial Of Service (DoS)
2024-06-19 06:39:43
Server-Side Request Forgery (SSRF)
2024-02-08 08:37:09
cbl_mariner
cbl_mariner
CVE-2024-37890 affecting package reaper for versions less than 3.1.1-10
2024-07-12 23:39:02
CVE-2024-24806 affecting package cmake for versions less than 3.28.2-6
2024-06-21 09:32:44
CVE-2024-24806 affecting package python-gevent for versions less than 23.9.1-3
2024-07-24 00:12:29
cvelist
cvelist
CVE-2024-37890 Denial of service when handling a request with many HTTP headers in ws
2024-06-17 19:09:02
CVE-2024-6409 Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9
2024-07-08 17:57:10
CVE-2024-24806 Improper Domain Lookup that potentially leads to SSRF attacks in libuv
2024-02-07 21:44:33
cve
cve
CVE-2024-37890
2024-06-17 20:15:13
CVE-2024-6409
2024-07-08 18:15:09
CVE-2024-24806
2024-02-07 22:15:10
github
github
ws affected by a DoS when handling a request with many HTTP headers
2024-06-17 19:09:10
vulnrichment
vulnrichment
CVE-2024-37890 Denial of service when handling a request with many HTTP headers in ws
2024-06-17 19:09:02
CVE-2024-6409 Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9
2024-07-08 17:57:10
redhatcve
redhatcve
CVE-2024-37890
2024-06-17 21:51:19
CVE-2024-24806
2024-02-08 12:39:02
CVE-2024-4032
2024-06-18 17:29:49
wolfi
wolfi
CVE-2024-37890 vulnerabilities
2024-09-19 21:18:36
CVE-2024-24806 vulnerabilities
2024-09-19 21:18:36
nvd
nvd
CVE-2024-37890
2024-06-17 20:15:13
CVE-2024-24806
2024-02-07 22:15:10
CVE-2024-6409
2024-07-08 18:15:09
ubuntucve
ubuntucve
CVE-2024-37890
2024-06-17 00:00:00
CVE-2024-6409
2024-07-08 00:00:00
CVE-2024-24806
2024-02-07 00:00:00
openvas
openvas
OpenBSD OpenSSH 8.7p1 - 8.8p1 RCE Vulnerability
2024-07-09 00:00:00
Huawei EulerOS: Security Advisory for libuv (EulerOS-SA-2024-1743)
2024-05-30 00:00:00
Huawei EulerOS: Security Advisory for libuv (EulerOS-SA-2024-1766)
2024-05-30 00:00:00
f5
f5
K000140975: OpenSSH vulnerability CVE-2024-6409
2024-09-06 00:00:00
rocky
rocky
openssh security update
2024-07-15 12:18:40
amazon
amazon
Medium: libuv
2024-02-29 10:03:00
ubuntu
ubuntu
libuv vulnerability
2024-02-28 00:00:00
Python vulnerability
2024-08-01 00:00:00
redos
redos
ROS-20240611-10
2024-06-11 00:00:00
ROS-20240917-08
2024-09-17 00:00:00
hackerone
hackerone
Internet Bug Bounty: Libuv: Improper Domain Lookup that potentially leads to SSRF attacks
2024-03-21 18:47:15
debian
debian
[SECURITY] [DLA 3752-1] libuv1 security update
2024-03-05 21:54:56
[SECURITY] [DSA 5638-1] libuv1 security update
2024-03-10 13:02:23
prion
prion
Improper access control
2024-02-07 22:15:00
cgr
cgr
CVE-2024-24806 vulnerabilities
2024-05-19 03:07:16
mageia
mageia
Updated libuv packages fix security vulnerability
2024-03-22 03:19:51
slackware
slackware
[slackware-security] libuv
2024-02-20 21:14:06
cloudfoundry
cloudfoundry
USN-6666-1: libuv vulnerability | Cloud Foundry
2024-04-04 00:00:00
alpinelinux
alpinelinux
CVE-2024-24806
2024-02-07 22:15:10
CVE-2024-4032
2024-06-17 15:15:52
fedora
fedora
[SECURITY] Fedora 39 Update: python3-docs-3.12.4-1.fc39
2024-07-05 01:18:29
[SECURITY] Fedora 40 Update: python3.12-3.12.4-1.fc40
2024-07-05 06:22:01
[SECURITY] Fedora 39 Update: mingw-python3-3.11.8-2.fc39
2024-07-12 04:18:48

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

High

JSON
Related for RHSA-2024:5547
redhat11almalinux6osv37oraclelinux5nessus51debiancve4ibm3veracode2cbl_mariner7cvelist4cve4github1vulnrichment2redhatcve3wolfi2nvd3ubuntucve4openvas26f51rocky1amazon1ubuntu2redos2hackerone1debian2prion1cgr1mageia1slackware1cloudfoundry1alpinelinux2fedora7