Skip to content
OpenAdvisories
High RHSA-2023:3362 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 4.10.61 packages and security update

Published Sep 20, 2024 · Updated Oct 2, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.10::el8 jenkins-2-plugins 0:4.10.1684982411-1.el8

Vulnerabilities 1

  • High 7.5
    CVE-2023-1370

    Stack exhaustion in json-smart leads to denial of service when parsing malformed JSON

    [Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib. When reaching a ‘[‘ or ‘{‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any lim…

    json-smart json-smart druid thingsboard-tb-node Debian Ubuntu Wolfi Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/articles/11258
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2188542
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3362.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-1370
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-1370
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-1370
  • advisory
    https://github.com/advisories/GHSA-493p-pfq6-5258
  • article
    https://research.jfrog.com/vulnerabilities/stack-exhaustion-in-json-smart-leads-to-denial-of-service-when-parsing-malformed-json-xray-427633/