Red Hat OpenShift Multicluster Engine for Kubernetes: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Medium 5.3
  CVE-2022-25881

  http-cache-semantics vulnerable to Regular Expression Denial of Service

  This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library.

  nodejs nodejs-nodemon http-cache-semantics org.webjars.npm:http-cache-semantics Azure Linux npm Maven
  Jan 31, 2023

Revision history

1. 2025-12-02 #5

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

2. 2023-06-27 #4

   Neue Updates von Red Hat aufgenommen

3. 2023-05-03 #3

   Neue Updates von Red Hat aufgenommen

4. 2023-05-02 #2

   Neue Updates von Red Hat aufgenommen

5. 2023-05-01 #1

   Initiale Fassung

References

• Red Hat Security Advisory vom 2023-05-01
  https://access.redhat.com/errata/RHSA-2023:2061
• Red Hat Security Advisory RHSA-2023:2083 vom 2023-05-02
  https://access.redhat.com/errata/RHSA-2023:2083
• RedHat Security Advisory
  https://access.redhat.com/errata/RHSA-2023:2104
• Red Hat Security Advisory RHSA-2023:3815 vom 2023-06-27
  https://access.redhat.com/errata/RHSA-2023:3815
• Rocky Linux Security Advisory RLSA-2023:2654 vom 2025-12-03
  https://errata.build.resf.org/RLSA-2023:2654