Skip to content
OpenAdvisories
Medium WID-SEC-2023-0912 3 CVEs

Red Hat OpenShift: Mehrere Schwachstellen ermöglichen Denial of Service

Published Apr 10, 2023 · Updated Jan 1, 2024 · Revision 3 · de-DE

Vendor: Red Hat Product: openshift Product: OpenShift < 4.12.11 Product: OpenShift Container Platform < 4.14.0 Product: OpenShift Container Platform 4.13 Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.

Vulnerabilities 3

  • Medium 5.3
    CVE-2022-23524

    Helm vulnerable to Denial of service through string value parsing

    Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to Uncontrolled Resource Consumption, resulting in Denial of Service. Input to functions in the _strvals_ package can cause a stack overflow. In Go, …

    helm helm helm.sh/helm/v3 helm Azure Linux Go
  • Medium 5.3
    CVE-2022-23525

    Helm vulnerable to Denial of service via NULL Pointer Dereference

    Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the _repo_package. The _repo_ package contains a handler that processes the index file of a repository. For example, t…

    helm helm helm.sh/helm/v3 helm Azure Linux Go
  • Medium 5.3
    CVE-2022-23526

    Helm contains Denial of service through schema file

    Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the_chartutil_ package that can cause a segmentation violation. The _chartutil_ package contains a parser that loads a…

    helm helm helm.sh/helm/v3 helm Azure Linux Go

Revision history

  1. #3

    Neue Updates von Red Hat aufgenommen

  2. #2

    Neue Updates von Red Hat aufgenommen

  3. #1

    Initiale Fassung

References