Description
The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenShift 3 | openshift +5 | 3.0.1.0-1.git.529.dcab62c.el7ose | RHSA-2015:1736 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/openshift/origin | < 1.0.6 | 1.0.6 | GHSA-rf3m-mhv7-x39f |
Advisories 1
- RHSA-2015:1736 Red Hat Security Advisory: openshift security update Red Hat Security Advisories (RHSA) · Nov 22, 2025