Lucene search
This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.REDHAT-RHSA-2024-2724.NASLHistoryMay 07, 2024 - 12:00 a.m.
RHEL 9 : git-lfs (RHSA-2024:2724)
2024-05-0700:00:00
This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
7
rhel 9
git-lfs
rhsa-2024:2724
golang
net/http
x/net/http2
cve-2023-45288
net/http/cookiejar
cve-2023-45289
memory exhaustion
request.parsemultipartform
cve-2023-45290
crypto/x509
cve-2024-24783
nessus
self-reported version number
scanner
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:2724 advisory.
-
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request’s headers exceed MaxHeaderBytes, no memory is allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header frames we will process before closing a connection. (CVE-2023-45288)
-
When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client does not forward sensitive headers such as Authorization or Cookie. For example, a redirect from foo.com to www.foo.com will forward the Authorization header, but a redirect to bar.com will not. A maliciously crafted HTTP redirect could cause sensitive headers to be unexpectedly forwarded. (CVE-2023-45289)
-
When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while reading a single form line. This permits a maliciously crafted input containing very long lines to cause allocation of arbitrarily large amounts of memory, potentially leading to memory exhaustion. With fix, the ParseMultipartForm function now correctly limits the maximum size of form lines. (CVE-2023-45290)
-
Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default behavior is for TLS servers to not verify client certificates. (CVE-2024-24783)
Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Red Hat Security Advisory RHSA-2024:2724. The text
# itself is copyright (C) Red Hat, Inc.
##
include('compat.inc');
if (description)
{
script_id(195115);
script_version("1.1");
script_set_attribute(attribute:"plugin_modification_date", value:"2024/05/10");
script_cve_id(
"CVE-2023-45288",
"CVE-2023-45289",
"CVE-2023-45290",
"CVE-2024-24783"
);
script_xref(name:"RHSA", value:"2024:2724");
script_name(english:"RHEL 9 : git-lfs (RHSA-2024:2724)");
script_set_attribute(attribute:"synopsis", value:
"The remote Red Hat host is missing one or more security updates for git-lfs.");
script_set_attribute(attribute:"description", value:
"The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as
referenced in the RHSA-2024:2724 advisory.
- An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive
number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and
CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no memory is
allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an
HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to
be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the
receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header
frames we will process before closing a connection. (CVE-2023-45288)
- When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial
domain, an http.Client does not forward sensitive headers such as Authorization or Cookie. For
example, a redirect from foo.com to www.foo.com will forward the Authorization header, but a redirect to
bar.com will not. A maliciously crafted HTTP redirect could cause sensitive headers to be unexpectedly
forwarded. (CVE-2023-45289)
- When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with
Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed
form were not applied to the memory consumed while reading a single form line. This permits a maliciously
crafted input containing very long lines to cause allocation of arbitrarily large amounts of memory,
potentially leading to memory exhaustion. With fix, the ParseMultipartForm function now correctly limits
the maximum size of form lines. (CVE-2023-45290)
- Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause
Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth
to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default behavior is for TLS servers to not
verify client certificates. (CVE-2024-24783)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/errata/RHSA-2024:2724");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2023-45288");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2023-45289");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2023-45290");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2024-24783");
script_set_attribute(attribute:"solution", value:
"Update the RHEL git-lfs package based on the guidance in RHSA-2024:2724.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N");
script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N");
script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2023-45289");
script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2024-24783");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_cwe_id(20, 200, 400);
script_set_attribute(attribute:"vendor_severity", value:"Important");
script_set_attribute(attribute:"vuln_publication_date", value:"2024/03/05");
script_set_attribute(attribute:"patch_publication_date", value:"2024/05/07");
script_set_attribute(attribute:"plugin_publication_date", value:"2024/05/07");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:9");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:git-lfs");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Red Hat Local Security Checks");
script_copyright(english:"This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info.nasl", "redhat_repos.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");
exit(0);
}
include('rpm.inc');
include('rhel.inc');
if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/RedHat/release');
if (isnull(os_release) || 'Red Hat' >!< os_release) audit(AUDIT_OS_NOT, 'Red Hat');
var os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:os_release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, 'Red Hat');
os_ver = os_ver[1];
if (!rhel_check_release(operator: 'ge', os_version: os_ver, rhel_version: '9')) audit(AUDIT_OS_NOT, 'Red Hat 9.x', 'Red Hat ' + os_ver);
if (!get_kb_item('Host/RedHat/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);
var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu && 'ppc' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Red Hat', cpu);
var constraints = [
{
'repo_relative_urls': [
'content/dist/rhel9/9.1/aarch64/appstream/debug',
'content/dist/rhel9/9.1/aarch64/appstream/os',
'content/dist/rhel9/9.1/aarch64/appstream/source/SRPMS',
'content/dist/rhel9/9.1/aarch64/baseos/debug',
'content/dist/rhel9/9.1/aarch64/baseos/os',
'content/dist/rhel9/9.1/aarch64/baseos/source/SRPMS',
'content/dist/rhel9/9.1/aarch64/codeready-builder/debug',
'content/dist/rhel9/9.1/aarch64/codeready-builder/os',
'content/dist/rhel9/9.1/aarch64/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.1/aarch64/highavailability/debug',
'content/dist/rhel9/9.1/aarch64/highavailability/os',
'content/dist/rhel9/9.1/aarch64/highavailability/source/SRPMS',
'content/dist/rhel9/9.1/aarch64/supplementary/debug',
'content/dist/rhel9/9.1/aarch64/supplementary/os',
'content/dist/rhel9/9.1/aarch64/supplementary/source/SRPMS',
'content/dist/rhel9/9.1/ppc64le/appstream/debug',
'content/dist/rhel9/9.1/ppc64le/appstream/os',
'content/dist/rhel9/9.1/ppc64le/appstream/source/SRPMS',
'content/dist/rhel9/9.1/ppc64le/baseos/debug',
'content/dist/rhel9/9.1/ppc64le/baseos/os',
'content/dist/rhel9/9.1/ppc64le/baseos/source/SRPMS',
'content/dist/rhel9/9.1/ppc64le/codeready-builder/debug',
'content/dist/rhel9/9.1/ppc64le/codeready-builder/os',
'content/dist/rhel9/9.1/ppc64le/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.1/ppc64le/highavailability/debug',
'content/dist/rhel9/9.1/ppc64le/highavailability/os',
'content/dist/rhel9/9.1/ppc64le/highavailability/source/SRPMS',
'content/dist/rhel9/9.1/ppc64le/resilientstorage/debug',
'content/dist/rhel9/9.1/ppc64le/resilientstorage/os',
'content/dist/rhel9/9.1/ppc64le/resilientstorage/source/SRPMS',
'content/dist/rhel9/9.1/ppc64le/sap-solutions/debug',
'content/dist/rhel9/9.1/ppc64le/sap-solutions/os',
'content/dist/rhel9/9.1/ppc64le/sap-solutions/source/SRPMS',
'content/dist/rhel9/9.1/ppc64le/sap/debug',
'content/dist/rhel9/9.1/ppc64le/sap/os',
'content/dist/rhel9/9.1/ppc64le/sap/source/SRPMS',
'content/dist/rhel9/9.1/ppc64le/supplementary/debug',
'content/dist/rhel9/9.1/ppc64le/supplementary/os',
'content/dist/rhel9/9.1/ppc64le/supplementary/source/SRPMS',
'content/dist/rhel9/9.1/s390x/appstream/debug',
'content/dist/rhel9/9.1/s390x/appstream/os',
'content/dist/rhel9/9.1/s390x/appstream/source/SRPMS',
'content/dist/rhel9/9.1/s390x/baseos/debug',
'content/dist/rhel9/9.1/s390x/baseos/os',
'content/dist/rhel9/9.1/s390x/baseos/source/SRPMS',
'content/dist/rhel9/9.1/s390x/codeready-builder/debug',
'content/dist/rhel9/9.1/s390x/codeready-builder/os',
'content/dist/rhel9/9.1/s390x/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.1/s390x/highavailability/debug',
'content/dist/rhel9/9.1/s390x/highavailability/os',
'content/dist/rhel9/9.1/s390x/highavailability/source/SRPMS',
'content/dist/rhel9/9.1/s390x/resilientstorage/debug',
'content/dist/rhel9/9.1/s390x/resilientstorage/os',
'content/dist/rhel9/9.1/s390x/resilientstorage/source/SRPMS',
'content/dist/rhel9/9.1/s390x/sap/debug',
'content/dist/rhel9/9.1/s390x/sap/os',
'content/dist/rhel9/9.1/s390x/sap/source/SRPMS',
'content/dist/rhel9/9.1/s390x/supplementary/debug',
'content/dist/rhel9/9.1/s390x/supplementary/os',
'content/dist/rhel9/9.1/s390x/supplementary/source/SRPMS',
'content/dist/rhel9/9.1/x86_64/appstream/debug',
'content/dist/rhel9/9.1/x86_64/appstream/os',
'content/dist/rhel9/9.1/x86_64/appstream/source/SRPMS',
'content/dist/rhel9/9.1/x86_64/baseos/debug',
'content/dist/rhel9/9.1/x86_64/baseos/os',
'content/dist/rhel9/9.1/x86_64/baseos/source/SRPMS',
'content/dist/rhel9/9.1/x86_64/codeready-builder/debug',
'content/dist/rhel9/9.1/x86_64/codeready-builder/os',
'content/dist/rhel9/9.1/x86_64/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.1/x86_64/highavailability/debug',
'content/dist/rhel9/9.1/x86_64/highavailability/os',
'content/dist/rhel9/9.1/x86_64/highavailability/source/SRPMS',
'content/dist/rhel9/9.1/x86_64/nfv/debug',
'content/dist/rhel9/9.1/x86_64/nfv/os',
'content/dist/rhel9/9.1/x86_64/nfv/source/SRPMS',
'content/dist/rhel9/9.1/x86_64/resilientstorage/debug',
'content/dist/rhel9/9.1/x86_64/resilientstorage/os',
'content/dist/rhel9/9.1/x86_64/resilientstorage/source/SRPMS',
'content/dist/rhel9/9.1/x86_64/rt/debug',
'content/dist/rhel9/9.1/x86_64/rt/os',
'content/dist/rhel9/9.1/x86_64/rt/source/SRPMS',
'content/dist/rhel9/9.1/x86_64/sap-solutions/debug',
'content/dist/rhel9/9.1/x86_64/sap-solutions/os',
'content/dist/rhel9/9.1/x86_64/sap-solutions/source/SRPMS',
'content/dist/rhel9/9.1/x86_64/sap/debug',
'content/dist/rhel9/9.1/x86_64/sap/os',
'content/dist/rhel9/9.1/x86_64/sap/source/SRPMS',
'content/dist/rhel9/9.1/x86_64/supplementary/debug',
'content/dist/rhel9/9.1/x86_64/supplementary/os',
'content/dist/rhel9/9.1/x86_64/supplementary/source/SRPMS',
'content/dist/rhel9/9.2/aarch64/appstream/debug',
'content/dist/rhel9/9.2/aarch64/appstream/os',
'content/dist/rhel9/9.2/aarch64/appstream/source/SRPMS',
'content/dist/rhel9/9.2/aarch64/baseos/debug',
'content/dist/rhel9/9.2/aarch64/baseos/os',
'content/dist/rhel9/9.2/aarch64/baseos/source/SRPMS',
'content/dist/rhel9/9.2/aarch64/codeready-builder/debug',
'content/dist/rhel9/9.2/aarch64/codeready-builder/os',
'content/dist/rhel9/9.2/aarch64/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.2/aarch64/highavailability/debug',
'content/dist/rhel9/9.2/aarch64/highavailability/os',
'content/dist/rhel9/9.2/aarch64/highavailability/source/SRPMS',
'content/dist/rhel9/9.2/aarch64/supplementary/debug',
'content/dist/rhel9/9.2/aarch64/supplementary/os',
'content/dist/rhel9/9.2/aarch64/supplementary/source/SRPMS',
'content/dist/rhel9/9.2/ppc64le/appstream/debug',
'content/dist/rhel9/9.2/ppc64le/appstream/os',
'content/dist/rhel9/9.2/ppc64le/appstream/source/SRPMS',
'content/dist/rhel9/9.2/ppc64le/baseos/debug',
'content/dist/rhel9/9.2/ppc64le/baseos/os',
'content/dist/rhel9/9.2/ppc64le/baseos/source/SRPMS',
'content/dist/rhel9/9.2/ppc64le/codeready-builder/debug',
'content/dist/rhel9/9.2/ppc64le/codeready-builder/os',
'content/dist/rhel9/9.2/ppc64le/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.2/ppc64le/highavailability/debug',
'content/dist/rhel9/9.2/ppc64le/highavailability/os',
'content/dist/rhel9/9.2/ppc64le/highavailability/source/SRPMS',
'content/dist/rhel9/9.2/ppc64le/resilientstorage/debug',
'content/dist/rhel9/9.2/ppc64le/resilientstorage/os',
'content/dist/rhel9/9.2/ppc64le/resilientstorage/source/SRPMS',
'content/dist/rhel9/9.2/ppc64le/sap-solutions/debug',
'content/dist/rhel9/9.2/ppc64le/sap-solutions/os',
'content/dist/rhel9/9.2/ppc64le/sap-solutions/source/SRPMS',
'content/dist/rhel9/9.2/ppc64le/sap/debug',
'content/dist/rhel9/9.2/ppc64le/sap/os',
'content/dist/rhel9/9.2/ppc64le/sap/source/SRPMS',
'content/dist/rhel9/9.2/ppc64le/supplementary/debug',
'content/dist/rhel9/9.2/ppc64le/supplementary/os',
'content/dist/rhel9/9.2/ppc64le/supplementary/source/SRPMS',
'content/dist/rhel9/9.2/s390x/appstream/debug',
'content/dist/rhel9/9.2/s390x/appstream/os',
'content/dist/rhel9/9.2/s390x/appstream/source/SRPMS',
'content/dist/rhel9/9.2/s390x/baseos/debug',
'content/dist/rhel9/9.2/s390x/baseos/os',
'content/dist/rhel9/9.2/s390x/baseos/source/SRPMS',
'content/dist/rhel9/9.2/s390x/codeready-builder/debug',
'content/dist/rhel9/9.2/s390x/codeready-builder/os',
'content/dist/rhel9/9.2/s390x/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.2/s390x/highavailability/debug',
'content/dist/rhel9/9.2/s390x/highavailability/os',
'content/dist/rhel9/9.2/s390x/highavailability/source/SRPMS',
'content/dist/rhel9/9.2/s390x/resilientstorage/debug',
'content/dist/rhel9/9.2/s390x/resilientstorage/os',
'content/dist/rhel9/9.2/s390x/resilientstorage/source/SRPMS',
'content/dist/rhel9/9.2/s390x/sap/debug',
'content/dist/rhel9/9.2/s390x/sap/os',
'content/dist/rhel9/9.2/s390x/sap/source/SRPMS',
'content/dist/rhel9/9.2/s390x/supplementary/debug',
'content/dist/rhel9/9.2/s390x/supplementary/os',
'content/dist/rhel9/9.2/s390x/supplementary/source/SRPMS',
'content/dist/rhel9/9.2/x86_64/appstream/debug',
'content/dist/rhel9/9.2/x86_64/appstream/os',
'content/dist/rhel9/9.2/x86_64/appstream/source/SRPMS',
'content/dist/rhel9/9.2/x86_64/baseos/debug',
'content/dist/rhel9/9.2/x86_64/baseos/os',
'content/dist/rhel9/9.2/x86_64/baseos/source/SRPMS',
'content/dist/rhel9/9.2/x86_64/codeready-builder/debug',
'content/dist/rhel9/9.2/x86_64/codeready-builder/os',
'content/dist/rhel9/9.2/x86_64/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.2/x86_64/highavailability/debug',
'content/dist/rhel9/9.2/x86_64/highavailability/os',
'content/dist/rhel9/9.2/x86_64/highavailability/source/SRPMS',
'content/dist/rhel9/9.2/x86_64/nfv/debug',
'content/dist/rhel9/9.2/x86_64/nfv/os',
'content/dist/rhel9/9.2/x86_64/nfv/source/SRPMS',
'content/dist/rhel9/9.2/x86_64/resilientstorage/debug',
'content/dist/rhel9/9.2/x86_64/resilientstorage/os',
'content/dist/rhel9/9.2/x86_64/resilientstorage/source/SRPMS',
'content/dist/rhel9/9.2/x86_64/rt/debug',
'content/dist/rhel9/9.2/x86_64/rt/os',
'content/dist/rhel9/9.2/x86_64/rt/source/SRPMS',
'content/dist/rhel9/9.2/x86_64/sap-solutions/debug',
'content/dist/rhel9/9.2/x86_64/sap-solutions/os',
'content/dist/rhel9/9.2/x86_64/sap-solutions/source/SRPMS',
'content/dist/rhel9/9.2/x86_64/sap/debug',
'content/dist/rhel9/9.2/x86_64/sap/os',
'content/dist/rhel9/9.2/x86_64/sap/source/SRPMS',
'content/dist/rhel9/9.2/x86_64/supplementary/debug',
'content/dist/rhel9/9.2/x86_64/supplementary/os',
'content/dist/rhel9/9.2/x86_64/supplementary/source/SRPMS',
'content/dist/rhel9/9.3/aarch64/appstream/debug',
'content/dist/rhel9/9.3/aarch64/appstream/os',
'content/dist/rhel9/9.3/aarch64/appstream/source/SRPMS',
'content/dist/rhel9/9.3/aarch64/baseos/debug',
'content/dist/rhel9/9.3/aarch64/baseos/os',
'content/dist/rhel9/9.3/aarch64/baseos/source/SRPMS',
'content/dist/rhel9/9.3/aarch64/codeready-builder/debug',
'content/dist/rhel9/9.3/aarch64/codeready-builder/os',
'content/dist/rhel9/9.3/aarch64/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.3/aarch64/highavailability/debug',
'content/dist/rhel9/9.3/aarch64/highavailability/os',
'content/dist/rhel9/9.3/aarch64/highavailability/source/SRPMS',
'content/dist/rhel9/9.3/aarch64/supplementary/debug',
'content/dist/rhel9/9.3/aarch64/supplementary/os',
'content/dist/rhel9/9.3/aarch64/supplementary/source/SRPMS',
'content/dist/rhel9/9.3/ppc64le/appstream/debug',
'content/dist/rhel9/9.3/ppc64le/appstream/os',
'content/dist/rhel9/9.3/ppc64le/appstream/source/SRPMS',
'content/dist/rhel9/9.3/ppc64le/baseos/debug',
'content/dist/rhel9/9.3/ppc64le/baseos/os',
'content/dist/rhel9/9.3/ppc64le/baseos/source/SRPMS',
'content/dist/rhel9/9.3/ppc64le/codeready-builder/debug',
'content/dist/rhel9/9.3/ppc64le/codeready-builder/os',
'content/dist/rhel9/9.3/ppc64le/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.3/ppc64le/highavailability/debug',
'content/dist/rhel9/9.3/ppc64le/highavailability/os',
'content/dist/rhel9/9.3/ppc64le/highavailability/source/SRPMS',
'content/dist/rhel9/9.3/ppc64le/resilientstorage/debug',
'content/dist/rhel9/9.3/ppc64le/resilientstorage/os',
'content/dist/rhel9/9.3/ppc64le/resilientstorage/source/SRPMS',
'content/dist/rhel9/9.3/ppc64le/sap-solutions/debug',
'content/dist/rhel9/9.3/ppc64le/sap-solutions/os',
'content/dist/rhel9/9.3/ppc64le/sap-solutions/source/SRPMS',
'content/dist/rhel9/9.3/ppc64le/sap/debug',
'content/dist/rhel9/9.3/ppc64le/sap/os',
'content/dist/rhel9/9.3/ppc64le/sap/source/SRPMS',
'content/dist/rhel9/9.3/ppc64le/supplementary/debug',
'content/dist/rhel9/9.3/ppc64le/supplementary/os',
'content/dist/rhel9/9.3/ppc64le/supplementary/source/SRPMS',
'content/dist/rhel9/9.3/s390x/appstream/debug',
'content/dist/rhel9/9.3/s390x/appstream/os',
'content/dist/rhel9/9.3/s390x/appstream/source/SRPMS',
'content/dist/rhel9/9.3/s390x/baseos/debug',
'content/dist/rhel9/9.3/s390x/baseos/os',
'content/dist/rhel9/9.3/s390x/baseos/source/SRPMS',
'content/dist/rhel9/9.3/s390x/codeready-builder/debug',
'content/dist/rhel9/9.3/s390x/codeready-builder/os',
'content/dist/rhel9/9.3/s390x/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.3/s390x/highavailability/debug',
'content/dist/rhel9/9.3/s390x/highavailability/os',
'content/dist/rhel9/9.3/s390x/highavailability/source/SRPMS',
'content/dist/rhel9/9.3/s390x/resilientstorage/debug',
'content/dist/rhel9/9.3/s390x/resilientstorage/os',
'content/dist/rhel9/9.3/s390x/resilientstorage/source/SRPMS',
'content/dist/rhel9/9.3/s390x/sap/debug',
'content/dist/rhel9/9.3/s390x/sap/os',
'content/dist/rhel9/9.3/s390x/sap/source/SRPMS',
'content/dist/rhel9/9.3/s390x/supplementary/debug',
'content/dist/rhel9/9.3/s390x/supplementary/os',
'content/dist/rhel9/9.3/s390x/supplementary/source/SRPMS',
'content/dist/rhel9/9.3/x86_64/appstream/debug',
'content/dist/rhel9/9.3/x86_64/appstream/os',
'content/dist/rhel9/9.3/x86_64/appstream/source/SRPMS',
'content/dist/rhel9/9.3/x86_64/baseos/debug',
'content/dist/rhel9/9.3/x86_64/baseos/os',
'content/dist/rhel9/9.3/x86_64/baseos/source/SRPMS',
'content/dist/rhel9/9.3/x86_64/codeready-builder/debug',
'content/dist/rhel9/9.3/x86_64/codeready-builder/os',
'content/dist/rhel9/9.3/x86_64/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.3/x86_64/highavailability/debug',
'content/dist/rhel9/9.3/x86_64/highavailability/os',
'content/dist/rhel9/9.3/x86_64/highavailability/source/SRPMS',
'content/dist/rhel9/9.3/x86_64/nfv/debug',
'content/dist/rhel9/9.3/x86_64/nfv/os',
'content/dist/rhel9/9.3/x86_64/nfv/source/SRPMS',
'content/dist/rhel9/9.3/x86_64/resilientstorage/debug',
'content/dist/rhel9/9.3/x86_64/resilientstorage/os',
'content/dist/rhel9/9.3/x86_64/resilientstorage/source/SRPMS',
'content/dist/rhel9/9.3/x86_64/rt/debug',
'content/dist/rhel9/9.3/x86_64/rt/os',
'content/dist/rhel9/9.3/x86_64/rt/source/SRPMS',
'content/dist/rhel9/9.3/x86_64/sap-solutions/debug',
'content/dist/rhel9/9.3/x86_64/sap-solutions/os',
'content/dist/rhel9/9.3/x86_64/sap-solutions/source/SRPMS',
'content/dist/rhel9/9.3/x86_64/sap/debug',
'content/dist/rhel9/9.3/x86_64/sap/os',
'content/dist/rhel9/9.3/x86_64/sap/source/SRPMS',
'content/dist/rhel9/9.3/x86_64/supplementary/debug',
'content/dist/rhel9/9.3/x86_64/supplementary/os',
'content/dist/rhel9/9.3/x86_64/supplementary/source/SRPMS',
'content/dist/rhel9/9.4/aarch64/appstream/debug',
'content/dist/rhel9/9.4/aarch64/appstream/os',
'content/dist/rhel9/9.4/aarch64/appstream/source/SRPMS',
'content/dist/rhel9/9.4/aarch64/baseos/debug',
'content/dist/rhel9/9.4/aarch64/baseos/os',
'content/dist/rhel9/9.4/aarch64/baseos/source/SRPMS',
'content/dist/rhel9/9.4/aarch64/codeready-builder/debug',
'content/dist/rhel9/9.4/aarch64/codeready-builder/os',
'content/dist/rhel9/9.4/aarch64/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.4/aarch64/highavailability/debug',
'content/dist/rhel9/9.4/aarch64/highavailability/os',
'content/dist/rhel9/9.4/aarch64/highavailability/source/SRPMS',
'content/dist/rhel9/9.4/aarch64/supplementary/debug',
'content/dist/rhel9/9.4/aarch64/supplementary/os',
'content/dist/rhel9/9.4/aarch64/supplementary/source/SRPMS',
'content/dist/rhel9/9.4/ppc64le/appstream/debug',
'content/dist/rhel9/9.4/ppc64le/appstream/os',
'content/dist/rhel9/9.4/ppc64le/appstream/source/SRPMS',
'content/dist/rhel9/9.4/ppc64le/baseos/debug',
'content/dist/rhel9/9.4/ppc64le/baseos/os',
'content/dist/rhel9/9.4/ppc64le/baseos/source/SRPMS',
'content/dist/rhel9/9.4/ppc64le/codeready-builder/debug',
'content/dist/rhel9/9.4/ppc64le/codeready-builder/os',
'content/dist/rhel9/9.4/ppc64le/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.4/ppc64le/highavailability/debug',
'content/dist/rhel9/9.4/ppc64le/highavailability/os',
'content/dist/rhel9/9.4/ppc64le/highavailability/source/SRPMS',
'content/dist/rhel9/9.4/ppc64le/resilientstorage/debug',
'content/dist/rhel9/9.4/ppc64le/resilientstorage/os',
'content/dist/rhel9/9.4/ppc64le/resilientstorage/source/SRPMS',
'content/dist/rhel9/9.4/ppc64le/sap-solutions/debug',
'content/dist/rhel9/9.4/ppc64le/sap-solutions/os',
'content/dist/rhel9/9.4/ppc64le/sap-solutions/source/SRPMS',
'content/dist/rhel9/9.4/ppc64le/sap/debug',
'content/dist/rhel9/9.4/ppc64le/sap/os',
'content/dist/rhel9/9.4/ppc64le/sap/source/SRPMS',
'content/dist/rhel9/9.4/ppc64le/supplementary/debug',
'content/dist/rhel9/9.4/ppc64le/supplementary/os',
'content/dist/rhel9/9.4/ppc64le/supplementary/source/SRPMS',
'content/dist/rhel9/9.4/s390x/appstream/debug',
'content/dist/rhel9/9.4/s390x/appstream/os',
'content/dist/rhel9/9.4/s390x/appstream/source/SRPMS',
'content/dist/rhel9/9.4/s390x/baseos/debug',
'content/dist/rhel9/9.4/s390x/baseos/os',
'content/dist/rhel9/9.4/s390x/baseos/source/SRPMS',
'content/dist/rhel9/9.4/s390x/codeready-builder/debug',
'content/dist/rhel9/9.4/s390x/codeready-builder/os',
'content/dist/rhel9/9.4/s390x/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.4/s390x/highavailability/debug',
'content/dist/rhel9/9.4/s390x/highavailability/os',
'content/dist/rhel9/9.4/s390x/highavailability/source/SRPMS',
'content/dist/rhel9/9.4/s390x/resilientstorage/debug',
'content/dist/rhel9/9.4/s390x/resilientstorage/os',
'content/dist/rhel9/9.4/s390x/resilientstorage/source/SRPMS',
'content/dist/rhel9/9.4/s390x/sap/debug',
'content/dist/rhel9/9.4/s390x/sap/os',
'content/dist/rhel9/9.4/s390x/sap/source/SRPMS',
'content/dist/rhel9/9.4/s390x/supplementary/debug',
'content/dist/rhel9/9.4/s390x/supplementary/os',
'content/dist/rhel9/9.4/s390x/supplementary/source/SRPMS',
'content/dist/rhel9/9.4/x86_64/appstream/debug',
'content/dist/rhel9/9.4/x86_64/appstream/os',
'content/dist/rhel9/9.4/x86_64/appstream/source/SRPMS',
'content/dist/rhel9/9.4/x86_64/baseos/debug',
'content/dist/rhel9/9.4/x86_64/baseos/os',
'content/dist/rhel9/9.4/x86_64/baseos/source/SRPMS',
'content/dist/rhel9/9.4/x86_64/codeready-builder/debug',
'content/dist/rhel9/9.4/x86_64/codeready-builder/os',
'content/dist/rhel9/9.4/x86_64/codeready-builder/source/SRPMS',
'content/dist/rhel9/9.4/x86_64/highavailability/debug',
'content/dist/rhel9/9.4/x86_64/highavailability/os',
'content/dist/rhel9/9.4/x86_64/highavailability/source/SRPMS',
'content/dist/rhel9/9.4/x86_64/nfv/debug',
'content/dist/rhel9/9.4/x86_64/nfv/os',
'content/dist/rhel9/9.4/x86_64/nfv/source/SRPMS',
'content/dist/rhel9/9.4/x86_64/resilientstorage/debug',
'content/dist/rhel9/9.4/x86_64/resilientstorage/os',
'content/dist/rhel9/9.4/x86_64/resilientstorage/source/SRPMS',
'content/dist/rhel9/9.4/x86_64/rt/debug',
'content/dist/rhel9/9.4/x86_64/rt/os',
'content/dist/rhel9/9.4/x86_64/rt/source/SRPMS',
'content/dist/rhel9/9.4/x86_64/sap-solutions/debug',
'content/dist/rhel9/9.4/x86_64/sap-solutions/os',
'content/dist/rhel9/9.4/x86_64/sap-solutions/source/SRPMS',
'content/dist/rhel9/9.4/x86_64/sap/debug',
'content/dist/rhel9/9.4/x86_64/sap/os',
'content/dist/rhel9/9.4/x86_64/sap/source/SRPMS',
'content/dist/rhel9/9.4/x86_64/supplementary/debug',
'content/dist/rhel9/9.4/x86_64/supplementary/os',
'content/dist/rhel9/9.4/x86_64/supplementary/source/SRPMS',
'content/dist/rhel9/9/aarch64/appstream/debug',
'content/dist/rhel9/9/aarch64/appstream/os',
'content/dist/rhel9/9/aarch64/appstream/source/SRPMS',
'content/dist/rhel9/9/aarch64/baseos/debug',
'content/dist/rhel9/9/aarch64/baseos/os',
'content/dist/rhel9/9/aarch64/baseos/source/SRPMS',
'content/dist/rhel9/9/aarch64/codeready-builder/debug',
'content/dist/rhel9/9/aarch64/codeready-builder/os',
'content/dist/rhel9/9/aarch64/codeready-builder/source/SRPMS',
'content/dist/rhel9/9/aarch64/highavailability/debug',
'content/dist/rhel9/9/aarch64/highavailability/os',
'content/dist/rhel9/9/aarch64/highavailability/source/SRPMS',
'content/dist/rhel9/9/aarch64/supplementary/debug',
'content/dist/rhel9/9/aarch64/supplementary/os',
'content/dist/rhel9/9/aarch64/supplementary/source/SRPMS',
'content/dist/rhel9/9/ppc64le/appstream/debug',
'content/dist/rhel9/9/ppc64le/appstream/os',
'content/dist/rhel9/9/ppc64le/appstream/source/SRPMS',
'content/dist/rhel9/9/ppc64le/baseos/debug',
'content/dist/rhel9/9/ppc64le/baseos/os',
'content/dist/rhel9/9/ppc64le/baseos/source/SRPMS',
'content/dist/rhel9/9/ppc64le/codeready-builder/debug',
'content/dist/rhel9/9/ppc64le/codeready-builder/os',
'content/dist/rhel9/9/ppc64le/codeready-builder/source/SRPMS',
'content/dist/rhel9/9/ppc64le/highavailability/debug',
'content/dist/rhel9/9/ppc64le/highavailability/os',
'content/dist/rhel9/9/ppc64le/highavailability/source/SRPMS',
'content/dist/rhel9/9/ppc64le/resilientstorage/debug',
'content/dist/rhel9/9/ppc64le/resilientstorage/os',
'content/dist/rhel9/9/ppc64le/resilientstorage/source/SRPMS',
'content/dist/rhel9/9/ppc64le/sap-solutions/debug',
'content/dist/rhel9/9/ppc64le/sap-solutions/os',
'content/dist/rhel9/9/ppc64le/sap-solutions/source/SRPMS',
'content/dist/rhel9/9/ppc64le/sap/debug',
'content/dist/rhel9/9/ppc64le/sap/os',
'content/dist/rhel9/9/ppc64le/sap/source/SRPMS',
'content/dist/rhel9/9/ppc64le/supplementary/debug',
'content/dist/rhel9/9/ppc64le/supplementary/os',
'content/dist/rhel9/9/ppc64le/supplementary/source/SRPMS',
'content/dist/rhel9/9/s390x/appstream/debug',
'content/dist/rhel9/9/s390x/appstream/os',
'content/dist/rhel9/9/s390x/appstream/source/SRPMS',
'content/dist/rhel9/9/s390x/baseos/debug',
'content/dist/rhel9/9/s390x/baseos/os',
'content/dist/rhel9/9/s390x/baseos/source/SRPMS',
'content/dist/rhel9/9/s390x/codeready-builder/debug',
'content/dist/rhel9/9/s390x/codeready-builder/os',
'content/dist/rhel9/9/s390x/codeready-builder/source/SRPMS',
'content/dist/rhel9/9/s390x/highavailability/debug',
'content/dist/rhel9/9/s390x/highavailability/os',
'content/dist/rhel9/9/s390x/highavailability/source/SRPMS',
'content/dist/rhel9/9/s390x/resilientstorage/debug',
'content/dist/rhel9/9/s390x/resilientstorage/os',
'content/dist/rhel9/9/s390x/resilientstorage/source/SRPMS',
'content/dist/rhel9/9/s390x/sap/debug',
'content/dist/rhel9/9/s390x/sap/os',
'content/dist/rhel9/9/s390x/sap/source/SRPMS',
'content/dist/rhel9/9/s390x/supplementary/debug',
'content/dist/rhel9/9/s390x/supplementary/os',
'content/dist/rhel9/9/s390x/supplementary/source/SRPMS',
'content/dist/rhel9/9/x86_64/appstream/debug',
'content/dist/rhel9/9/x86_64/appstream/os',
'content/dist/rhel9/9/x86_64/appstream/source/SRPMS',
'content/dist/rhel9/9/x86_64/baseos/debug',
'content/dist/rhel9/9/x86_64/baseos/os',
'content/dist/rhel9/9/x86_64/baseos/source/SRPMS',
'content/dist/rhel9/9/x86_64/codeready-builder/debug',
'content/dist/rhel9/9/x86_64/codeready-builder/os',
'content/dist/rhel9/9/x86_64/codeready-builder/source/SRPMS',
'content/dist/rhel9/9/x86_64/highavailability/debug',
'content/dist/rhel9/9/x86_64/highavailability/os',
'content/dist/rhel9/9/x86_64/highavailability/source/SRPMS',
'content/dist/rhel9/9/x86_64/nfv/debug',
'content/dist/rhel9/9/x86_64/nfv/os',
'content/dist/rhel9/9/x86_64/nfv/source/SRPMS',
'content/dist/rhel9/9/x86_64/resilientstorage/debug',
'content/dist/rhel9/9/x86_64/resilientstorage/os',
'content/dist/rhel9/9/x86_64/resilientstorage/source/SRPMS',
'content/dist/rhel9/9/x86_64/rt/debug',
'content/dist/rhel9/9/x86_64/rt/os',
'content/dist/rhel9/9/x86_64/rt/source/SRPMS',
'content/dist/rhel9/9/x86_64/sap-solutions/debug',
'content/dist/rhel9/9/x86_64/sap-solutions/os',
'content/dist/rhel9/9/x86_64/sap-solutions/source/SRPMS',
'content/dist/rhel9/9/x86_64/sap/debug',
'content/dist/rhel9/9/x86_64/sap/os',
'content/dist/rhel9/9/x86_64/sap/source/SRPMS',
'content/dist/rhel9/9/x86_64/supplementary/debug',
'content/dist/rhel9/9/x86_64/supplementary/os',
'content/dist/rhel9/9/x86_64/supplementary/source/SRPMS'
],
'pkgs': [
{'reference':'git-lfs-3.4.1-2.el9_4', 'release':'9', 'rpm_spec_vers_cmp':TRUE}
]
}
];
var applicable_repo_urls = rhel_determine_applicable_repository_urls(constraints:constraints);
if(applicable_repo_urls == RHEL_REPOS_NO_OVERLAP_MESSAGE) exit(0, RHEL_REPO_NOT_ENABLED);
var flag = 0;
foreach var constraint_array ( constraints ) {
var repo_relative_urls = NULL;
if (!empty_or_null(constraint_array['repo_relative_urls'])) repo_relative_urls = constraint_array['repo_relative_urls'];
foreach var pkg ( constraint_array['pkgs'] ) {
var reference = NULL;
var _release = NULL;
var sp = NULL;
var _cpu = NULL;
var el_string = NULL;
var rpm_spec_vers_cmp = NULL;
var epoch = NULL;
var allowmaj = NULL;
var exists_check = NULL;
var cves = NULL;
if (!empty_or_null(pkg['reference'])) reference = pkg['reference'];
if (!empty_or_null(pkg['release'])) _release = 'RHEL' + pkg['release'];
if (!empty_or_null(pkg['sp'])) sp = pkg['sp'];
if (!empty_or_null(pkg['cpu'])) _cpu = pkg['cpu'];
if (!empty_or_null(pkg['el_string'])) el_string = pkg['el_string'];
if (!empty_or_null(pkg['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = pkg['rpm_spec_vers_cmp'];
if (!empty_or_null(pkg['epoch'])) epoch = pkg['epoch'];
if (!empty_or_null(pkg['allowmaj'])) allowmaj = pkg['allowmaj'];
if (!empty_or_null(pkg['exists_check'])) exists_check = pkg['exists_check'];
if (!empty_or_null(pkg['cves'])) cves = pkg['cves'];
if (reference &&
_release &&
rhel_decide_repo_relative_url_check(required_repo_url_list:repo_relative_urls) &&
(applicable_repo_urls || (!exists_check || rpm_exists(release:_release, rpm:exists_check))) &&
rpm_check(release:_release, sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
}
}
if (flag)
{
var extra = NULL;
if (isnull(applicable_repo_urls) || !applicable_repo_urls) extra = rpm_report_get() + redhat_report_repo_caveat();
else extra = rpm_report_get();
security_report_v4(
port : 0,
severity : SECURITY_HOLE,
extra : extra
);
exit(0);
}
else
{
var tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'git-lfs');
}
| Vendor | Product | Version | CPE |
|---|---|---|---|
| redhat | enterprise_linux | git-lfs | p-cpe:/a:redhat:enterprise_linux:git-lfs |
| redhat | enterprise_linux | 9 | cpe:/o:redhat:enterprise_linux:9 |
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783
access.redhat.com/errata/RHSA-2024:2724
access.redhat.com/security/cve/CVE-2023-45288
access.redhat.com/security/cve/CVE-2023-45289
access.redhat.com/security/cve/CVE-2023-45290
access.redhat.com/security/cve/CVE-2024-24783
Related
osv
osv
Important: git-lfs security update
2024-05-07 00:00:00
Important: git-lfs security update
2024-05-23 00:00:00
Important: git-lfs security update
2024-05-10 14:32:42
nessus
nessus
AlmaLinux 9 : git-lfs (ALSA-2024:2724)
2024-05-09 00:00:00
Oracle Linux 9 : git-lfs (ELSA-2024-2724)
2024-05-07 00:00:00
Rocky Linux 9 : git-lfs (RLSA-2024:2724)
2024-05-14 00:00:00
oraclelinux
oraclelinux
git-lfs security update
2024-05-07 00:00:00
git-lfs security update
2024-05-29 00:00:00
go-toolset:ol8 security update
2024-05-29 00:00:00
almalinux
almalinux
Important: git-lfs security update
2024-05-07 00:00:00
Important: git-lfs security update
2024-05-23 00:00:00
Important: go-toolset:rhel8 security update
2024-05-22 00:00:00
redhat
redhat
(RHSA-2024:3346) Important: git-lfs security update
2024-05-23 14:21:44
(RHSA-2024:2724) Important: git-lfs security update
2024-05-07 09:06:06
(RHSA-2024:3259) Important: go-toolset:rhel8 security update
2024-05-22 10:41:22
rocky
rocky
git-lfs security update
2024-05-10 14:32:42
golang security update
2024-05-10 14:32:42
git-lfs security update
2024-05-09 18:50:42
redos
redos
ROS-20240422-05
2024-04-22 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-1589)
2024-05-10 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-1567)
2024-05-10 00:00:00
openSUSE: Security Advisory for go1.22 (SUSE-SU-2024:0812-1)
2024-03-25 00:00:00
amazon
amazon
Medium: golang
2024-05-23 22:04:00
Medium: cni-plugins
2024-05-23 22:04:00
Medium: amazon-cloudwatch-agent
2024-05-23 22:04:00
freebsd
freebsd
go -- multiple vulnerabilities
2024-03-05 00:00:00
go -- http2: close connections when receiving too many headers
2024-04-03 00:00:00
forgejo -- HTTP/2 CONTINUATION flood in net/http
2024-04-04 00:00:00
ubuntucve
ubuntucve
cvelist
cvelist
cbl_mariner
cbl_mariner
CVE-2024-24783 affecting package golang for versions less than 1.21.6-1
2024-06-08 03:07:59
CVE-2023-45289 affecting package golang for versions less than 1.21.6-1
2024-06-08 03:07:59
CVE-2023-45290 affecting package golang for versions less than 1.21.6-1
2024-06-08 03:07:59
redhatcve
redhatcve
cve
cve
prion
prion
Design/Logic Flaw
2024-03-05 23:15:00
Authorization
2024-03-05 23:15:00
Design/Logic Flaw
2024-03-05 23:15:00
cgr
cgr
CVE-2024-24783 vulnerabilities
2024-05-19 03:07:16
CVE-2023-45289 vulnerabilities
2024-05-19 03:07:16
CVE-2023-45290 vulnerabilities
2024-05-19 03:07:16
debiancve
debiancve
veracode
veracode
Denial Of Service
2024-03-17 17:31:04
Memory Exhaustion
2024-03-17 15:19:33
Sensitive Information Disclosure
2024-03-17 15:19:39
alpinelinux
alpinelinux
nvd
nvd
wolfi
wolfi
CVE-2024-24783 vulnerabilities
2024-06-08 09:07:53
CVE-2023-45290 vulnerabilities
2024-06-08 09:07:53
CVE-2023-45289 vulnerabilities
2024-06-08 09:07:53
mageia
mageia
Updated golang packages fix security vulnerability
2024-04-13 19:56:38
github
github
net/http, x/net/http2: close connections when receiving too many headers
2024-04-04 21:30:32
Traefik affected by HTTP/2 CONTINUATION flood in net/http
2024-04-15 18:14:51
githubexploit
githubexploit
Exploit for CVE-2023-45288
2024-04-06 06:33:45
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0589
2024-04-04 00:00:00
7.2 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
13.1%
Related for REDHAT-RHSA-2024-2724.NASL