Lucene search
RedHatRHSA-2024:3265HistoryMay 22, 2024 - 10:41 a.m.
(RHSA-2024:3265) Important: grafana security update
2024-05-2210:41:24
access.redhat.com
9
grafana
security update
memory leaks
authorization bypass
cve-2024-1394
cve-2024-1313
cvss score
Grafana is an open source, feature rich metrics dashboard and graph editor for
Graphite, InfluxDB & OpenTSDB.
Security Fix(es):
-
golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
-
grafana: vulnerable to authorization bypass (CVE-2024-1313)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | aarch64 | grafana-debuginfo | < 9.2.10-16.el8_10 | grafana-debuginfo-9.2.10-16.el8_10.aarch64.rpm |
| RedHat | 8 | ppc64le | grafana-selinux | < 9.2.10-16.el8_10 | grafana-selinux-9.2.10-16.el8_10.ppc64le.rpm |
| RedHat | 8 | x86_64 | grafana | < 9.2.10-16.el8_10 | grafana-9.2.10-16.el8_10.x86_64.rpm |
| RedHat | 8 | ppc64le | grafana-debuginfo | < 9.2.10-16.el8_10 | grafana-debuginfo-9.2.10-16.el8_10.ppc64le.rpm |
| RedHat | 8 | x86_64 | grafana-debugsource | < 9.2.10-16.el8_10 | grafana-debugsource-9.2.10-16.el8_10.x86_64.rpm |
| RedHat | 8 | s390x | grafana-selinux | < 9.2.10-16.el8_10 | grafana-selinux-9.2.10-16.el8_10.s390x.rpm |
| RedHat | 8 | s390x | grafana-debuginfo | < 9.2.10-16.el8_10 | grafana-debuginfo-9.2.10-16.el8_10.s390x.rpm |
| RedHat | 8 | s390x | grafana-debugsource | < 9.2.10-16.el8_10 | grafana-debugsource-9.2.10-16.el8_10.s390x.rpm |
| RedHat | 8 | s390x | grafana | < 9.2.10-16.el8_10 | grafana-9.2.10-16.el8_10.s390x.rpm |
| RedHat | 8 | aarch64 | grafana-debugsource | < 9.2.10-16.el8_10 | grafana-debugsource-9.2.10-16.el8_10.aarch64.rpm |
Related
redhat
redhat
(RHSA-2024:2568) Moderate: grafana security update
2024-04-30 11:38:54
(RHSA-2024:1462) Important: golang security update
2024-03-21 08:05:03
osv
osv
Moderate: grafana security update
2024-04-30 00:00:00
Important: grafana security update
2024-06-14 13:59:30
Important: grafana security update
2024-05-22 00:00:00
almalinux
almalinux
Moderate: grafana security update
2024-04-30 00:00:00
Important: grafana security update
2024-05-22 00:00:00
Important: grafana-pcp security and bug fix update
2024-04-02 00:00:00
nessus
nessus
Rocky Linux 9 : grafana (RLSA-2024:2568)
2024-05-14 00:00:00
CentOS 8 : grafana (CESA-2024:3265)
2024-05-22 00:00:00
Oracle Linux 9 : grafana (ELSA-2024-2568)
2024-05-07 00:00:00
rocky
rocky
grafana security update
2024-06-14 13:59:30
grafana security update
2024-05-10 14:32:42
grafana-pcp security update
2024-05-10 14:32:42
oraclelinux
oraclelinux
grafana security update
2024-05-07 00:00:00
grafana security update
2024-05-29 00:00:00
grafana-pcp security and bug fix update
2024-04-03 00:00:00
cvelist
cvelist
veracode
veracode
Authorization Bypass
2024-03-28 06:56:13
Memory Leak
2024-03-28 05:55:40
vulnrichment
vulnrichment
nvd
nvd
CVE-2024-1394
2024-03-21 13:00:08
CVE-2024-1313
2024-03-26 18:15:09
github
github
Memory leaks in code encrypting and verifying RSA payloads
2024-03-20 18:10:36
Grafana: Users outside an organization can delete a snapshot with its key
2024-04-05 19:29:10
redhatcve
redhatcve
CVE-2024-1313
2024-03-27 17:56:01
CVE-2024-1394
2024-03-20 18:01:24
cve
cve
CVE-2024-1394
2024-03-21 13:00:08
CVE-2024-1313
2024-03-26 18:15:09
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:1508-1)
2024-05-07 00:00:00
redos
redos
ROS-20240521-08
2024-05-21 00:00:00
ibm
ibm