Medium WID-SEC-2023-0204 18 CVEs

Red Hat OpenShift: Mehrere Schwachstellen

Published Jan 25, 2023 · Updated Aug 28, 2024 · Revision 16 · de-DE

Vendor: Red Hat Product: Enterprise Linux Product: openshift Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um beliebigen Programmcode auszuführen, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.

Product

Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.

Vulnerabilities 18

High 8.7

CVE-2022-1798

Path Traversal vulnerability in Kubevirt

A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the kubevirt to read arbitrary files on the host filesystem which are publicly readable or which are readable for UID 107 or GID 107. …

Google Kubevirt kubevirt kubevirt.io/kubevirt Azure Linux Go

Sep 15, 2022
High 7.5

CVE-2021-38561

golang.org/x/text/language Out-of-bounds Read vulnerability

golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.

k3d k3d-proxy k3d-tools podman Debian Ubuntu Azure Linux Alpine Wolfi Go

Dec 26, 2022
High 7.5

CVE-2021-44716

golang.org/x/net/http2 allows uncontrolled memory consumption

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go

Jan 1, 2022
High 7.5

CVE-2022-30630

Stack exhaustion in Glob on certain paths in io/fs

Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path which contains a large number of path separators.

Go standard library io/fs golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
High 7.5

CVE-2022-30631

Stack exhaustion when reading certain archives in compress/gzip

Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files.

Go standard library compress/gzip golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
High 7.5

CVE-2022-30633

Stack exhaustion when unmarshaling certain documents in encoding/xml

Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via unmarshalling an XML document into a Go struct which has a nested field that uses the 'any' field tag.

Go standard library encoding/xml golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
High 7.5

CVE-2022-30635

Stack exhaustion when decoding certain messages in encoding/gob

Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.

Go standard library encoding/gob golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
Medium 6.5

CVE-2022-1705

Improper sanitization of Transfer-Encoding headers in net/http

Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.

Go standard library net/http golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
Medium 6.5

CVE-2022-32148

Exposure of client IP addresses in net/http

Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the X-Forwarded-For header, which causes ReverseProxy to set …

Go standard library net/http golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
Medium 5.5

CVE-2022-1962

Stack exhaustion due to deeply nested types in go/parser

Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.

Go standard library go/parser golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
Medium 5.3

CVE-2022-29526

golang.org/x/sys/unix has Incorrect privilege reporting in syscall

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.

golang stdlib k3d golang-1.8 Debian Ubuntu Azure Linux Alpine Wolfi Go

Jun 22, 2022
Low 3.1

CVE-2022-30629

Session tickets lack random ticket_age_add in crypto/tls

Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.

Go standard library crypto/tls golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
Unscored —

CVE-2021-44717

Misdirected I/O in syscall

Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion.

go stdlib golang-1.8 golang-1.17 Debian Ubuntu Alpine Go

Jan 1, 2022
Unscored —

CVE-2022-23772

Uncontrolled memory consumption in math/big

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.

golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go

Feb 11, 2022
Unscored —

CVE-2022-23773 Public exploit

Incorrect access control in the go command in cmd/go/internal/modfetch

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

golang go golang-1.8 golang-1.13 Debian Ubuntu Azure Linux Alpine Go

Feb 11, 2022
Unscored —

CVE-2022-23806

Incorrect computation for some invalid field elements in crypto/elliptic

Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.

golang go stdlib lxd Debian Ubuntu Azure Linux Alpine Go

Feb 11, 2022
Unscored —

CVE-2022-28131

Stack exhaustion from deeply nested XML documents in encoding/xml

Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.

Go standard library encoding/xml golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022
Unscored —

CVE-2022-30632

Stack exhaustion on crafted paths in path/filepath

Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators.

Go standard library path/filepath golang go Debian Ubuntu Azure Linux Alpine Go

Aug 9, 2022

Revision history

2024-08-28 #16
Neue Updates von Red Hat aufgenommen
2023-08-06 #15
Neue Updates von Red Hat aufgenommen
2023-07-05 #14
Neue Updates von Red Hat aufgenommen
2023-06-19 #13
Neue Updates von Red Hat aufgenommen
2023-06-15 #12
Neue Updates von Red Hat aufgenommen
2023-06-14 #11
Neue Updates von Red Hat aufgenommen
2023-05-18 #10
Neue Updates von Red Hat aufgenommen
2023-05-09 #9
Neue Updates von Red Hat aufgenommen
2023-03-29 #8
Neue Updates von Red Hat aufgenommen
2023-03-06 #7
Neue Updates von Red Hat aufgenommen
2023-02-28 #6
Neue Updates von Red Hat aufgenommen
2023-02-21 #5
Neue Updates von Red Hat aufgenommen
2023-02-20 #4
Neue Updates von Red Hat aufgenommen
2023-02-14 #3
Neue Updates von Red Hat aufgenommen
2023-02-06 #2
Neue Updates von Red Hat aufgenommen
2023-01-25 #1
Initiale Fassung

References

Red Hat Security Advisory RHSA-2023:0408 vom 2023-01-25
https://access.redhat.com/errata/RHSA-2023:0408
Red Hat Security Advisory RHSA-2023:0566 vom 2023-02-07
https://access.redhat.com/errata/RHSA-2023:0566
Red Hat Security Advisory RHSA-2023:0652 vom 2023-02-15
https://access.redhat.com/errata/RHSA-2023:0652
Red Hat Security Advisory RHSA-2023:0769 vom 2023-02-21
https://access.redhat.com/errata/RHSA-2023:0769
Red Hat Security Advisory RHSA-2023:0774 vom 2023-02-22
https://access.redhat.com/errata/RHSA-2023:0774
Red Hat Security Advisory RHSA-2023:0890 vom 2023-02-28
https://access.redhat.com/errata/RHSA-2023:0890
Red Hat Security Advisory RHSA-2023:0895 vom 2023-02-28
https://access.redhat.com/errata/RHSA-2023:0895
Red Hat Security Advisory RHSA-2023:1042 vom 2023-03-07
https://access.redhat.com/errata/RHSA-2023:1042
Red Hat Security Advisory RHSA-2023:1529 vom 2023-03-30
https://access.redhat.com/errata/RHSA-2023:1529
Red Hat Security Advisory RHSA-2023:2367 vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2367
Red Hat Security Advisory RHSA-2023:2357 vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2357
Red Hat Security Advisory RHSA-2023:2283 vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2283
Red Hat Security Advisory RHSA-2023:2282 vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2282
Red Hat Security Advisory RHSA-2023:2253 vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2253
Red Hat Security Advisory RHSA-2023:1328 vom 2023-05-18
https://access.redhat.com/errata/RHSA-2023:1328
Red Hat Security Advisory RHSA-2023:1326 vom 2023-05-18
https://access.redhat.com/errata/RHSA-2023:1326
Red Hat Security Advisory RHSA-2023:3542 vom 2023-06-14
https://access.redhat.com/errata/RHSA-2023:3542
Red Hat Security Advisory RHSA-2023:3642 vom 2023-06-15
https://access.redhat.com/errata/RHSA-2023:3642
Red Hat Security Advisory RHSA-2023:3664 vom 2023-06-19
https://access.redhat.com/errata/RHSA-2023:3664
Red Hat Security Advisory RHSA-2023:3914 vom 2023-07-06
https://access.redhat.com/errata/RHSA-2023:3914
Red Hat Security Advisory RHSA-2023:3915 vom 2023-07-06
https://access.redhat.com/errata/RHSA-2023:3915
Red Hat Security Advisory RHSA-2023:4488 vom 2023-08-07
https://access.redhat.com/errata/RHSA-2023:4488
Red Hat Security Advisory RHSA-2024:5754 vom 2024-08-29
https://access.redhat.com/errata/RHSA-2024:5754