Red Hat Security Advisory: OpenShift Container Platform 4.13.5 security update

Fixed packages 8

Vulnerabilities 8

• Critical 9.8
  CVE-2023-24538 Public exploit

  Backticks not treated as string delimiters in html/template

  Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, th…

  Go standard library html/template katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Apr 6, 2023
• High 8.0
  CVE-2023-1260

  Kube-apiserver: privesc

  An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would t…

  Red Hat Red Hat OpenShift Container Platform 4 Red Hat OpenShift Container Platform 4.14 Red Hat OpenShift Container Platform 4.13 Go
  Sep 24, 2023
• High 7.5
  CVE-2023-24534

  Excessive memory allocation in net/http and net/textproto

  HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate…

  Go standard library net/textproto katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Apr 6, 2023
• High 7.5
  CVE-2023-24536

  Excessive resource consumption in net/http, net/textproto and mime/multipart

  Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several causes: 1. mime/multipart.Reader.ReadForm limits the total memory a parsed multipart form can consum…

  Go standard library net/textproto mime/multipart katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi Go
  Apr 6, 2023
• High 7.5
  CVE-2023-24537

  Infinite loop in parsing in go/scanner

  Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.

  Go standard library go/scanner katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Apr 6, 2023
• High 7.3
  CVE-2023-24539

  Improper sanitization of CSS values in html/template

  Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, i…

  Go standard library html/template katib-suggestion-hyperopt katib-earlystopping Debian Azure Linux Alpine Wolfi Go
  May 11, 2023
• High 7.3
  CVE-2023-29400

  Improper handling of empty HTML attributes in html/template

  Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.

  Go standard library html/template katib-suggestion-hyperopt katib-earlystopping Debian Azure Linux Alpine Wolfi Go
  May 11, 2023
• High 7.0
  CVE-2023-3089

  Ocp & fips mode

  A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.

  Red Hat Red Hat OpenShift Container Platform 4 Red Hat Advanced Cluster Management for Kubernetes 2 Red Hat OpenShift Virtualization 4
  Jul 5, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/security/vulnerabilities/RHSB-2023-001
• article
  https://docs.openshift.com/container-platform/4.13/release_notes/ocp-4-13-release-notes.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2175721
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2176267
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2184481
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2184482
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2184483
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2184484
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2196026
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2196029
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2212085
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4093.json
• report
  https://access.redhat.com/security/cve/CVE-2023-1260
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1260
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1260
• advisory
  https://github.com/advisories/GHSA-92hx-3mh6-hc49
• report
  https://access.redhat.com/security/cve/CVE-2023-3089
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-3089
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-3089
• report
  https://access.redhat.com/security/cve/CVE-2023-24534
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-24534
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-24534
• article
  https://go.dev/issue/58975
• article
  https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8
• report
  https://access.redhat.com/security/cve/CVE-2023-24536
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-24536
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-24536
• article
  https://go.dev/issue/59153
• report
  https://access.redhat.com/security/cve/CVE-2023-24537
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-24537
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-24537
• article
  https://github.com/golang/go/issues/59180
• report
  https://access.redhat.com/security/cve/CVE-2023-24538
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-24538
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-24538
• article
  https://github.com/golang/go/issues/59234
• report
  https://access.redhat.com/security/cve/CVE-2023-24539
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-24539