Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2021:2705
HistoryJul 13, 2021 - 4:31 p.m.

(RHSA-2021:2705) Moderate: Release of OpenShift Serverless 1.16.0

2021-07-1316:31:04
access.redhat.com
130

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.02

Percentile

89.1%

JSON

Red Hat OpenShift Serverless 1.16.0 release of the OpenShift Serverless Operator. This version of the OpenShift Serverless Operator is supported on Red Hat OpenShift Container Platform versions 4.6 and 4.7, and includes security and bug fixes and enhancements. For more information, see the documentation listed in the References section.

Security Fix(es):

  • golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader (CVE-2021-27918)

  • golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header (CVE-2021-31525)

  • golang: archive/zip: malformed archive may cause panic or memory exhaustion (CVE-2021-33196)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Related

redhat 13
nessus 75
oraclelinux 8
osv 16
almalinux 6
rocky 6
openvas 31
mageia 2
gentoo 1
amazon 3
cloudfoundry 2
ubuntu 3
debian 4
freebsd 2
slackware 2
suse 2
ibm 4
fedora 2
photon 3
nvd 2
archlinux 2
cve 2
cvelist 2
prion 2
debiancve 1
ubuntucve 1
redhatcve 1
f5 1
redhat
redhat
(RHSA-2021:2130) Moderate: Windows Container Support for Red Hat OpenShift 2.0.1 security and bug fix update
2021-06-23 05:30:08
(RHSA-2021:2532) Moderate: Red Hat OpenShift Jaeger 1.17.9 security update
2021-06-23 15:33:42
(RHSA-2021:1585) Moderate: glibc security, bug fix, and enhancement update
2021-05-18 05:35:07
nessus
nessus
Oracle Linux 8 : glibc (ELSA-2021-9344)
2021-11-05 00:00:00
Rocky Linux 8 : glibc (RLSA-2021:1585)
2023-11-07 00:00:00
RHEL 8 : glibc (RHSA-2021:1585)
2021-05-19 00:00:00
oraclelinux
oraclelinux
glibc security, bug fix, and enhancement update
2021-05-25 00:00:00
glibc security update
2021-06-04 00:00:00
glibc security update
2021-07-02 00:00:00
osv
osv
Moderate: glibc security, bug fix, and enhancement update
2021-05-18 05:35:07
Moderate: glibc security, bug fix, and enhancement update
2021-05-18 05:35:07
curl vulnerabilities
2020-12-09 12:10:47
almalinux
almalinux
Moderate: glibc security, bug fix, and enhancement update
2021-05-18 05:35:07
Moderate: curl security and bug fix update
2021-05-18 05:39:00
Moderate: p11-kit security, bug fix, and enhancement update
2021-05-18 05:38:50
rocky
rocky
glibc security, bug fix, and enhancement update
2021-05-18 05:35:07
curl security and bug fix update
2021-05-18 05:39:00
p11-kit security, bug fix, and enhancement update
2021-05-18 05:38:50
openvas
openvas
Ubuntu: Security Advisory (USN-4665-1)
2020-12-10 00:00:00
Mageia: Security Advisory (MGASA-2020-0482)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for p11-kit (EulerOS-SA-2021-1015)
2021-01-08 00:00:00
mageia
mageia
Updated curl packages fix security vulnerabilities
2020-12-31 17:32:44
Updated p11-kit packages fix security vulnerabilities
2021-01-17 19:07:01
gentoo
gentoo
cURL: Multiple vulnerabilities
2020-12-23 00:00:00
amazon
amazon
Medium: curl
2021-08-04 20:32:00
Medium: p11-kit
2021-02-17 18:10:00
Medium: glibc
2021-06-16 20:37:00
cloudfoundry
cloudfoundry
USN-4665-1: curl vulnerabilities | Cloud Foundry
2021-01-12 00:00:00
USN-4677-1: p11-kit vulnerabilities | Cloud Foundry
2021-02-10 00:00:00
ubuntu
ubuntu
curl vulnerabilities
2020-12-09 00:00:00
p11-kit vulnerabilities
2021-01-05 00:00:00
GNU C Library vulnerabilities
2022-12-08 00:00:00
debian
debian
[SECURITY] [DSA 4822-1] p11-kit security update
2021-01-01 07:03:54
[SECURITY] [DSA 4822-1] p11-kit security update
2021-01-01 07:03:54
[SECURITY] [DLA 2500-1] curl security update
2020-12-19 02:59:56
freebsd
freebsd
p11-kit -- Multiple vulnerabilities
2020-12-12 00:00:00
cURL -- Multiple vulnerabilities
2020-12-09 00:00:00
slackware
slackware
[slackware-security] p11-kit
2020-12-12 22:32:00
[slackware-security] curl
2020-12-09 21:22:01
suse
suse
Security update for curl (moderate)
2020-12-14 00:00:00
Security update for curl (moderate)
2020-12-13 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Curl affect PowerSC (CVE-2020-8284, CVE-2020-8285, and CVE-2020-8286)
2021-03-15 17:09:05
Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - curl (Multiple CVEs)
2022-04-22 12:50:25
Security Bulletin: cURL libcurl vulnerabilites impacting Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint 4.0 and earlier (CVE-2020-8284, CVE-2020-8286, CVE-2020-8285)
2021-06-04 16:40:33
fedora
fedora
[SECURITY] Fedora 33 Update: curl-7.71.1-8.fc33
2020-12-15 01:22:19
[SECURITY] Fedora 32 Update: curl-7.69.1-7.fc32
2020-12-21 01:36:25
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0346
2020-12-10 00:00:00
Important Photon OS Security Update - PHSA-2020-0346
2020-12-10 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0304
2020-12-10 00:00:00
nvd
nvd
CVE-2020-27618
2021-02-26 23:15:11
CVE-2021-3703
2022-08-26 16:15:09
archlinux
archlinux
[ASA-202102-17] glibc: denial of service
2021-02-07 00:00:00
[ASA-202102-16] lib32-glibc: denial of service
2021-02-07 00:00:00
cve
cve
CVE-2020-27618
2021-02-26 23:15:11
CVE-2021-3703
2022-08-26 16:15:09
cvelist
cvelist
CVE-2021-3703
2022-08-26 15:25:40
CVE-2020-27618
2021-02-26 00:00:00
prion
prion
Design/Logic Flaw
2022-08-26 16:15:00
Input validation
2021-02-26 23:15:00
debiancve
debiancve
CVE-2020-27618
2021-02-26 23:15:11
ubuntucve
ubuntucve
CVE-2020-27618
2021-02-26 00:00:00
redhatcve
redhatcve
CVE-2021-3703
2021-09-13 23:23:31
f5
f5
K08641512: glibc vulnerability CVE-2020-27618
2021-07-13 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.02

Percentile

89.1%

JSON
Related for RHSA-2021:2705
redhat13nessus75oraclelinux8osv16almalinux6rocky6openvas31mageia2gentoo1amazon3cloudfoundry2ubuntu3debian4freebsd2slackware2suse2ibm4fedora2photon3nvd2archlinux2cve2cvelist2prion2debiancve1ubuntucve1redhatcve1f51