Lucene search
AlmaLinuxALSA-2024:2569HistoryApr 30, 2024 - 12:00 a.m.
Important: grafana-pcp security update
2024-04-3000:00:00
errata.almalinux.org
6
grafana-pcp
security update
golang-fips/openssl
memory leaks
cve-2024-1394
unix
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
30.8%
grafana-pcp is an open source Grafana plugin for PCP.
Security Fix(es):
- grafana-pcp: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | x86_64 | grafana-pcp | < 5.1.1-2.el9_4.alma.1 | grafana-pcp-5.1.1-2.el9_4.alma.1.x86_64.rpm |
| almalinux | 9 | ppc64le | grafana-pcp | < 5.1.1-2.el9_4.alma.1 | grafana-pcp-5.1.1-2.el9_4.alma.1.ppc64le.rpm |
| almalinux | 9 | aarch64 | grafana-pcp | < 5.1.1-2.el9_4.alma.1 | grafana-pcp-5.1.1-2.el9_4.alma.1.aarch64.rpm |
| almalinux | 9 | s390x | grafana-pcp | < 5.1.1-2.el9_4.alma.1 | grafana-pcp-5.1.1-2.el9_4.alma.1.s390x.rpm |
Related
nessus
nessus
Oracle Linux 8 : grafana (ELSA-2024-1646)
2024-04-03 00:00:00
Rocky Linux 8 : grafana (RLSA-2024:1646)
2024-04-05 00:00:00
AlmaLinux 9 : podman (ALSA-2024:4378)
2024-07-10 00:00:00
almalinux
almalinux
Important: runc security update
2024-07-23 00:00:00
Important: containernetworking-plugins security update
2024-07-23 00:00:00
Important: podman security update
2024-07-08 00:00:00
osv
osv
Important: golang security update
2024-03-21 00:00:00
Memory leaks in code encrypting and verifying RSA payloads
2024-03-20 18:10:36
CVE-2024-1394
2024-03-21 13:00:08
oraclelinux
oraclelinux
grafana-pcp security and bug fix update
2024-04-03 00:00:00
golang security update
2024-03-21 00:00:00
containernetworking-plugins security update
2024-07-24 00:00:00
rocky
rocky
grafana-pcp security update
2024-05-10 14:32:42
skopeo security update
2024-07-26 12:33:59
grafana-pcp bug fix and enhancement update
2024-06-14 13:59:30
redhat
redhat
(RHSA-2024:1462) Important: golang security update
2024-03-21 08:05:03
(RHSA-2024:4371) Important: buildah security update
2024-07-08 12:57:14
veracode
veracode
Memory Leak
2024-03-28 05:55:40
vulnrichment
vulnrichment
github
github
Memory leaks in code encrypting and verifying RSA payloads
2024-03-20 18:10:36
cvelist
cvelist
redhatcve
redhatcve
CVE-2024-1394
2024-03-20 18:01:24
cve
cve
CVE-2024-1394
2024-03-21 13:00:08
nvd
nvd
CVE-2024-1394
2024-03-21 13:00:08
ibm
ibm
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
30.8%
Related for ALSA-2024:2569