Red Hat Security Advisory: Satellite 6.13.5 Async Security Update

Fixed packages 29

Vulnerabilities 13

• High 7.5
  CVE-2023-44487 Exploited Public exploit EPSS 100%

  HTTP/2 Stream Cancellation Attack

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

  nodejs golang go kubescape Debian Ubuntu Azure Linux Alpine Wolfi Maven Go SwiftURL
  Oct 10, 2023

  KEV Oct 10, 2023
• Critical 9.8
  CVE-2022-1292 Public exploit EPSS 83%

  The c_rehash script allows command injection

  The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitra…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux
  May 3, 2022
• Critical 9.8
  CVE-2022-2068 EPSS 96%

  The c_rehash script allows command injection

  In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux
  Jun 21, 2022
• Critical 9.8
  CVE-2023-31047

  Django bypasses validation when using one form field to upload multiple files

  In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last u…

  python-django django python-django Debian Ubuntu PyPI
  May 7, 2023
• Critical 9.8
  CVE-2023-40267

  GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments

  GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.

  gitpython python-git python-git Debian Ubuntu PyPI
  Aug 11, 2023
• High 8.8
  CVE-2022-47318

  Code injection in ruby git

  ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.

  ruby-git ruby-git ruby-git git Debian Ubuntu RubyGems
  Jan 17, 2023
• High 8.1
  CVE-2022-24439 Public exploit

  Remote Code Execution (RCE)

  All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because…

  gitpython python-git python-git Debian Ubuntu PyPI
  Dec 12, 2022
• High 8.0
  CVE-2022-3874

  Os command injection via ct_command and fcct_command

  A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command exe…

  Red Hat Red Hat Satellite 6
  Sep 22, 2023
• High 8.0
  CVE-2022-46648

  ruby-git has potential remote code execution vulnerability

  ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318.

  ruby-git ruby-git git ruby-git Debian Ubuntu RubyGems
  Jan 17, 2023
• High 8.0
  CVE-2023-0462

  Arbitrary code execution through yaml global parameters

  An arbitrary code execution flaw was found in Foreman. This issue may allow an admin user to execute arbitrary code on the underlying operating system by setting global parameters with a YAML payload.

  Red Hat Red Hat Satellite 6
  Sep 20, 2023
• High 7.5
  CVE-2023-36053

  Django has regular expression denial of service vulnerability in EmailValidator/URLValidator

  In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.

  python-django django python-django Debian Ubuntu PyPI
  Jul 3, 2023
• High 7.5
  CVE-2023-39325 Public exploit

  HTTP/2 rapid reset can cause excessive work in net/http

  A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress requ…

  Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go
  Oct 11, 2023
• Medium 5.3
  CVE-2023-3817

  Excessive time spent checking DH q parameter value

  Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the k…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  Jul 31, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-us/red_hat_satellite/6.13/html/upgrading_and_updating_red_hat_satellite/index
• article
  https://access.redhat.com/security/vulnerabilities/RHSB-2023-003
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2081494
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2097310
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2140577
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151583
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2159672
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2162970
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2169385
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2192565
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2218004
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2231474
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238346
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238348
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238350
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238353
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238359
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238361
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238363
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238367
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238369
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238371
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2239041
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2240781
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2241914
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2242803
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2243296
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5931.json
• report
  https://access.redhat.com/security/cve/CVE-2022-1292
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-1292
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-1292
• article
  https://www.openssl.org/news/secadv/20220503.txt
• report
  https://access.redhat.com/security/cve/CVE-2022-2068
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-2068
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-2068
• article
  https://www.openssl.org/news/secadv/20220621.txt
• report
  https://access.redhat.com/security/cve/CVE-2022-3874
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-3874