Red Hat OpenShift Container Platform: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• High 7.5
  CVE-2018-17419

  miekg/dns parsing error leads to nil pointer dereference and DoS

  An issue was discovered in setTA in scan_rr.go in the Miek Gieben DNS library before 1.0.10 for Go. A dns.ParseZone() parsing error causes a segmentation violation, leading to denial of service.

  github.com/miekg/dns golang-github-miekg-dns Ubuntu Go
  Mar 7, 2019
• High 7.5
  CVE-2022-41723

  Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

  Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go
  Feb 28, 2023
• Medium —
  CVE-2021-36157

  Path traversal in Grafana Cortex

  An issue was discovered in Grafana Cortex through 1.9.0. The header value X-Scope-OrgID is used to construct file paths for rules files, and if crafted to conduct directory traversal such as ae ../../sensitive/path/in/deployment pathname, then Cortex will att…

  github.com/cortexproject/cortex Go
  Aug 3, 2021
• Unscored —
  CVE-2022-41722

  Path traversal on Windows in path/filepath

  A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transform an invalid path such as "a/../c:/b" into the valid path "c:\b". This transformation of a relative (if invalid) path into an absolute pa…

  Go standard library path/filepath katib-suggestion-hyperopt katib-earlystopping Debian Azure Linux Wolfi Go
  Feb 28, 2023

Revision history

1. 2025-11-27 #18

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

2. 2024-06-05 #17

   Neue Updates von Red Hat aufgenommen

3. 2024-02-28 #16

   Neue Updates von Red Hat aufgenommen

4. 2024-01-31 #15

   Neue Updates von Red Hat aufgenommen

5. 2024-01-01 #14

   Neue Updates von Red Hat aufgenommen

6. 2023-11-21 #13

   Neue Updates von Oracle Linux aufgenommen

7. 2023-11-01 #12

   Neue Updates von Red Hat aufgenommen

8. 2023-10-19 #11

   Neue Updates von Amazon aufgenommen

9. 2023-09-19 #10

   Neue Updates von Red Hat aufgenommen

10. 2023-08-30 #9

    Neue Updates von Red Hat aufgenommen

11. 2023-08-15 #8

    Neue Updates von Red Hat aufgenommen

12. 2023-08-09 #7

    Neue Updates von Amazon aufgenommen

13. 2023-07-20 #6

    Neue Updates von Red Hat aufgenommen

14. 2023-07-17 #5

    Neue Updates von Red Hat aufgenommen

15. 2023-06-13 #4

    Neue Updates von Red Hat aufgenommen

16. 2023-06-08 #3

    Neue Updates von Red Hat aufgenommen

17. 2023-06-05 #2

    Neue Updates von Red Hat aufgenommen

18. 2023-06-04 #1

    Initiale Fassung

References

• RedHat Security Advisory vom 2023-06-04
  https://access.redhat.com/errata/RHSA-2023:3304
• RedHat Security Advisory vom 2023-06-04
  https://access.redhat.com/errata/RHSA-2023:3305
• RedHat Security Advisory vom 2023-06-04
  https://access.redhat.com/errata/RHSA-2023:3309
• RedHat Security Advisory vom 2023-06-04
  https://access.redhat.com/errata/RHSA-2023:3287
• Red Hat Security Advisory RHSA-2023:3455 vom 2023-06-06
  https://access.redhat.com/errata/RHSA-2023:3455
• Red Hat Security Advisory RHSA-2023:3450 vom 2023-06-05
  https://access.redhat.com/errata/RHSA-2023:3450
• Red Hat Security Advisory RHSA-2023:3445 vom 2023-06-06
  https://access.redhat.com/errata/RHSA-2023:3445
• Red Hat Security Advisory RHSA-2023:3447 vom 2023-06-06
  https://access.redhat.com/errata/RHSA-2023:3447
• Red Hat Security Advisory RHSA-2023:3362 vom 2023-06-07
  https://access.redhat.com/errata/RHSA-2023:3363
• Red Hat Security Advisory RHSA-2023:3537 vom 2023-06-14
  https://access.redhat.com/errata/RHSA-2023:3537
• Red Hat Security Advisory RHSA-2023:4112 vom 2023-07-18
  https://access.redhat.com/errata/RHSA-2023:4112
• Red Hat Security Advisory RHSA-2023:4113 vom 2023-07-18
  https://access.redhat.com/errata/RHSA-2023:4113
• Red Hat Security Advisory RHSA-2023:4090 vom 2023-07-21
  https://access.redhat.com/errata/RHSA-2023:4090
• Red Hat Security Advisory RHSA-2023:4091 vom 2023-07-20
  https://access.redhat.com/errata/RHSA-2023:4091
• Red Hat Security Advisory RHSA-2023:4093 vom 2023-07-20
  https://access.redhat.com/errata/RHSA-2023:4093
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2023-026 vom 2023-08-10
  https://alas.aws.amazon.com/AL2/ALASNITRO-ENCLAVES-2023-026.html
• Red Hat Security Advisory RHSA-2023:4603 vom 2023-08-16
  https://access.redhat.com/errata/RHSA-2023:4603
• Red Hat Security Advisory RHSA-2023:4734 vom 2023-08-31
  https://access.redhat.com/errata/RHSA-2023:4734
• Red Hat Security Advisory RHSA-2023:4731 vom 2023-08-31
  https://access.redhat.com/errata/RHSA-2023:4731
• Red Hat Security Advisory RHSA-2023:5233 vom 2023-09-19
  https://access.redhat.com/errata/RHSA-2023:5233
• Amazon Linux Security Advisory ALAS2-2023-2303 vom 2023-10-20
  https://alas.aws.amazon.com/AL2/ALAS-2023-2303.html
• Red Hat Security Advisory RHSA-2023:6251 vom 2023-11-02
  https://access.redhat.com/errata/RHSA-2023:6251
• Oracle Linux Security Advisory ELSA-2023-6938 vom 2023-11-21
  https://linux.oracle.com/errata/ELSA-2023-6938.html
• Red Hat Security Advisory RHSA-2023:5006 vom 2023-12-30
  https://access.redhat.com/errata/RHSA-2023:5006
• Red Hat Security Advisory RHSA-2024:0485 vom 2024-01-31
  https://access.redhat.com/errata/RHSA-2024:0485
• Red Hat Security Advisory RHSA-2024:0948 vom 2024-02-28
  https://access.redhat.com/errata/RHSA-2024:0948
• Red Hat Security Advisory RHSA-2024:3494 vom 2024-06-05
  https://access.redhat.com/errata/RHSA-2024:3494
• Rocky Linux Security Advisory RLSA-2023:6938 vom 2025-11-28
  https://errata.build.resf.org/RLSA-2023:6938