Red Hat OpenShift API for Data Protection: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• Unscored —
  CVE-2022-41724

  Panic on large handshake records in crypto/tls

  Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 cli…

  Go standard library crypto/tls katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Feb 28, 2023
• Unscored —
  CVE-2022-41725

  Excessive resource consumption in mime/multipart

  A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in th…

  Go standard library mime/multipart katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Feb 28, 2023

Revision history

1. 2023-11-21 #10

   Neue Updates von Oracle Linux aufgenommen

2. 2023-11-14 #9

   Neue Updates von Red Hat aufgenommen

3. 2023-11-08 #8

   Neue Updates von Red Hat aufgenommen

4. 2023-10-22 #7

   Neue Updates von Red Hat aufgenommen

5. 2023-10-19 #6

   Neue Updates von Red Hat aufgenommen

6. 2023-08-03 #5

   Neue Updates von Red Hat aufgenommen

7. 2023-06-05 #4

   Neue Updates von Red Hat aufgenommen

8. 2023-06-04 #3

   Neue Updates von Red Hat aufgenommen

9. 2023-05-25 #2

   Neue Updates von Oracle Linux aufgenommen

10. 2023-04-04 #1

    Initiale Fassung

References

• Oracle Linux Security Advisory ELSA-2023-6938 vom 2023-11-21
  https://linux.oracle.com/errata/ELSA-2023-6938.html
• Red Hat Security Advisory RHSA-2023:6939 vom 2023-11-15
  https://access.redhat.com/errata/RHSA-2023:6939
• Red Hat Security Advisory RHSA-2023:6817 vom 2023-11-09
  https://access.redhat.com/errata/RHSA-2023:6817
• Red Hat Security Advisory RHSA-2023:5964 vom 2023-10-21
  https://access.redhat.com/errata/RHSA-2023:5964
• Red Hat Security Advisory RHSA-2023:5935 vom 2023-10-20
  https://access.redhat.com/errata/RHSA-2023:5935
• Red Hat Security Advisory RHSA-2023:4470 vom 2023-08-03
  https://access.redhat.com/errata/RHSA-2023:4470
• Red Hat Security Advisory RHSA-2023:3445 vom 2023-06-06
  https://access.redhat.com/errata/RHSA-2023:3445
• Red Hat Security Advisory RHSA-2023:3455 vom 2023-06-06
  https://access.redhat.com/errata/RHSA-2023:3455
• Red Hat Security Advisory RHSA-2023:3450 vom 2023-06-05
  https://access.redhat.com/errata/RHSA-2023:3450
• Red Hat Security Advisory RHSA-2023:3303 vom 2023-06-03
  https://access.redhat.com/errata/RHSA-2023:3303
• Oracle Linux Security Advisory ELSA-2023-3083 vom 2023-05-25
  https://linux.oracle.com/errata/ELSA-2023-3083.html
• RedHat Security Advisory vom 2023-04-04
  https://access.redhat.com/errata/RHSA-2023:1639