Lucene search
AlmaLinuxALSA-2024:1646HistoryApr 02, 2024 - 12:00 a.m.
Important: grafana security and bug fix update
2024-04-0200:00:00
errata.almalinux.org
11
grafana
metrics dashboard
graph editor
graphite
influxdb
opentsdb
security fix
bug fix
golang-fips
openssl
memory leaks
cve-2024-1394
jira
almalinux
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.6 High
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.2%
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.
Security Fix(es):
- golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
Bug Fix(es):
- TRIAGE CVE-2024-1394 grafana: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (JIRA:AlmaLinux-30543)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 8 | aarch64 | grafana | < 9.2.10-8.el8_9.alma.1 | grafana-9.2.10-8.el8_9.alma.1.aarch64.rpm |
| almalinux | 8 | x86_64 | grafana | < 9.2.10-8.el8_9.alma.1 | grafana-9.2.10-8.el8_9.alma.1.x86_64.rpm |
| almalinux | 8 | ppc64le | grafana | < 9.2.10-8.el8_9.alma.1 | grafana-9.2.10-8.el8_9.alma.1.ppc64le.rpm |
| almalinux | 8 | s390x | grafana | < 9.2.10-8.el8_9.alma.1 | grafana-9.2.10-8.el8_9.alma.1.s390x.rpm |
Related
osv
osv
Important: grafana-pcp security update
2024-05-10 14:32:42
Important: grafana-pcp security and bug fix update
2024-04-02 00:00:00
Important: golang security update
2024-03-21 00:00:00
nessus
nessus
Rocky Linux 8 : grafana (RLSA-2024:1646)
2024-04-05 00:00:00
Oracle Linux 8 : grafana (ELSA-2024-1646)
2024-04-03 00:00:00
RHEL 9 : grafana-pcp (RHSA-2024:1502)
2024-03-25 00:00:00
oraclelinux
oraclelinux
grafana-pcp security and bug fix update
2024-04-03 00:00:00
grafana security and bug fix update
2024-04-03 00:00:00
go-toolset:ol8 security update
2024-03-22 00:00:00
redhat
redhat
(RHSA-2024:1462) Important: golang security update
2024-03-21 08:05:03
(RHSA-2024:1644) Important: grafana-pcp security and bug fix update
2024-04-02 20:03:30
rocky
rocky
grafana-pcp security update
2024-05-10 14:32:42
grafana security and bug fix update
2024-04-05 14:56:07
grafana-pcp security and bug fix update
2024-04-05 14:56:07
vulnrichment
vulnrichment
veracode
veracode
Memory Leak
2024-03-28 05:55:40
almalinux
almalinux
Important: grafana security update
2024-03-25 00:00:00
Important: grafana-pcp security update
2024-03-25 00:00:00
Important: go-toolset:rhel8 security update
2024-03-21 00:00:00
cvelist
cvelist
cve
cve
CVE-2024-1394
2024-03-21 13:00:08
redhatcve
redhatcve
CVE-2024-1394
2024-03-20 18:01:24
nvd
nvd
CVE-2024-1394
2024-03-21 13:00:08
github
github
Memory leaks in code encrypting and verifying RSA payloads
2024-03-20 18:10:36
ibm
ibm
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.6 High
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.2%
Related for ALSA-2024:1646