Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2024:2933
HistoryMay 23, 2024 - 6:15 a.m.

(RHSA-2024:2933) Important: logging for Red Hat OpenShift security update

2024-05-2306:15:17
access.redhat.com
11
rhsa-2024
rhol-5.9-rhel-9
golang
net/http
x/net/http2
dos
cve-2023-45288
security fix
cvss score
references
unix

7.5 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

JSON

An update is now available for RHOL-5.9-RHEL-9.

Security Fix(es):

  • golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Related

redhat 12
osv 13
almalinux 4
nessus 85
oraclelinux 6
openvas 43
mageia 5
cloudfoundry 3
ubuntu 6
ibm 8
fedora 3
rocky 1
slackware 1
aix 1
freebsd 1
amazon 1
cvelist 1
alpinelinux 1
cve 1
debiancve 2
broadcom 1
redhat
redhat
(RHSA-2024:2447) Low: openssl and openssl-fips-provider security update
2024-04-30 06:15:44
(RHSA-2024:2901) Low: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.12.1-394 Security Update
2024-05-23 14:07:36
(RHSA-2024:2728) Important: Red Hat OpenStack Platform 17.1 director Operator container images security update
2024-05-29 19:48:27
osv
osv
Low: openssl and openssl-fips-provider security update
2024-04-30 00:00:00
openssl vulnerabilities
2024-02-05 12:18:56
openssl1.0 vulnerabilities
2024-03-21 16:53:43
almalinux
almalinux
Low: openssl and openssl-fips-provider security update
2024-04-30 00:00:00
Moderate: gnutls security update
2024-04-18 00:00:00
Low: openssl security update
2023-12-19 00:00:00
nessus
nessus
Oracle Linux 9 : openssl / and / openssl-fips-provider (ELSA-2024-2447)
2024-05-06 00:00:00
RHEL 9 : openssl and openssl-fips-provider (RHSA-2024:2447)
2024-04-30 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : OpenSSL vulnerabilities (USN-6622-1)
2024-02-05 00:00:00
oraclelinux
oraclelinux
openssl and openssl-fips-provider security update
2024-05-03 00:00:00
gnutls security update
2024-05-08 00:00:00
openssl security update
2023-12-18 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0020)
2024-02-05 00:00:00
Ubuntu: Security Advisory (USN-6622-1)
2024-02-06 00:00:00
Mageia: Security Advisory (MGASA-2024-0036)
2024-02-15 00:00:00
mageia
mageia
Updated quictls packages fix security vulnerabilities
2024-02-15 02:02:34
Updated openssl packages fix security vulnerabilities
2024-02-04 05:49:27
Updated gnutls packages fix security vulnerabilities
2024-03-26 11:00:24
cloudfoundry
cloudfoundry
USN-6622-1: OpenSSL vulnerabilities | Cloud Foundry
2024-02-29 00:00:00
USN-6733-1: GnuTLS vulnerabilities | Cloud Foundry
2024-05-23 00:00:00
USN-6450-1: OpenSSL vulnerabilities | Cloud Foundry
2023-11-09 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2024-02-05 00:00:00
OpenSSL vulnerabilities
2024-03-21 00:00:00
GnuTLS vulnerabilities
2024-04-15 00:00:00
ibm
ibm
Security Bulletin: openssl-src-300.2.1+3.2.0.crate is vulnerable to CVE-2024-0727, CVE-2023-6129, and CVE-2023-6237 used in IBM Maximo Application Suite - Edge Data Collector
2024-06-03 12:11:45
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues
2024-06-20 20:39:36
Security Bulletin: AIX is vulnerable to a denial of service (CVE-2023-5678, CVE-2023-6129, CVE-2023-6237) and an attacker may obtain sensitive information (CVE-2023-5363) due to OpenSSL
2024-01-25 21:15:41
fedora
fedora
[SECURITY] Fedora 38 Update: gnutls-3.8.4-1.fc38
2024-03-31 01:54:40
[SECURITY] Fedora 39 Update: gnutls-3.8.4-1.fc39
2024-03-24 01:07:12
[SECURITY] Fedora 40 Update: gnutls-3.8.5-1.fc40
2024-04-19 21:42:06
rocky
rocky
gnutls security update
2024-05-10 14:32:36
slackware
slackware
[slackware-security] gnutls
2024-03-20 00:27:18
aix
aix
AIX is vulnerable to a denial of service (CVE-2023-5678 CVE-2023-6129 CVE-2023-6237) and an attacker may obtain sensitive information (CVE-2023-5363) due to OpenSSL
2024-01-25 14:11:09
freebsd
freebsd
OpenSSL -- Multiple vulnerabilities
2024-01-30 00:00:00
amazon
amazon
Medium: openssl
2023-11-29 22:19:00
cvelist
cvelist
CVE-2023-5678 Excessive time spent in DH check / generation with large Q parameter value
2023-11-06 15:47:30
alpinelinux
alpinelinux
CVE-2023-5678
2023-11-06 16:15:42
cve
cve
CVE-2023-5678
2023-11-06 16:15:42
debiancve
debiancve
CVE-2023-5678
2023-11-06 16:15:42
CVE-2023-3817
2023-07-31 16:15:10
broadcom
broadcom
Excessive time spent checking DH q parameter value (CVE-2023-3817)
2024-04-16 00:00:00

7.5 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

JSON
Related for RHSA-2024:2933
redhat12osv13almalinux4nessus85oraclelinux6openvas43mageia5cloudfoundry3ubuntu6ibm8fedora3rocky1slackware1aix1freebsd1amazon1cvelist1alpinelinux1cve1debiancve2broadcom1