Lucene search
RedHatRHSA-2024:4269HistoryJul 02, 2024 - 2:48 p.m.
(RHSA-2024:4269) Moderate: OpenShift Virtualization 4.12.12 Images security update
2024-07-0214:48:37
CWE-787
access.redhat.com
8
openshift virtualization
red hat
security update
axios vulnerability
cve-2023-45857
virtualization solution
container platform
cvss score
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.4
Confidence
High
EPSS
0.05
Percentile
93.1%
OpenShift Virtualization is Red Hat’s virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization 4.12.12 images.
Security Fix(es):
- axios: exposure of confidential data stored in cookies (CVE-2023-45857)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected configurations
Node
redhatlibsshRange≤0.9.6-14.el8
ORredhatlibsshRange≤0.10.4-13.el9
ORredhatglibcRange≤2.17-326.el7_9.3
ORredhatglibcRange≤2.28-251.el8_10.2
ORredhatglibc-0Range≤2.28-101.el8_2.2
ORredhatglibc-0Range≤2.28-151.el8_4.2
ORredhatglibc-0Range≤2.28-189.10.el8_6
ORredhatglibc-0Range≤2.28-225.el8_8.11
ORredhatglibcRange≤2.34-100.el9_4.2
ORredhatglibc-0Range≤2.34-28.el9_0.6
ORredhatglibc-0Range≤2.34-60.el9_2.14
ORredhatservice_interconnectRange≤1.4.5-2
ORredhatservice_interconnectRange≤1.4.5-2
ORredhatservice_interconnectRange≤1.4.5-4
ORredhatservice_interconnectRange≤2.4.3-4
ORredhatservice_interconnectRange≤1.4.5-2
ORredhatservice_interconnectRange≤1.4.5-2
ORredhatbind-32Range≤9.11.4-26.P2.el7_9.13
ORredhatbind9.16-32Range≤9.16.23-0.14.el8
ORredhatbind-32Range≤9.11.36-8.el8
ORredhatbind-32Range≤9.11.36-3.el8_6.7
ORredhatdhcp-12Range≤4.3.6-47.el8_6.2
ORredhatbind-32Range≤9.16.23-11.el9
ORredhatjbcs-httpd24-curl-0Range≤8.7.1-2.el8jbcs
ORredhatjbcs-httpd24-httpd-0Range≤2.4.57-10.el8jbcs
ORredhatjbcs-httpd24-mod_http2-0Range≤1.15.19-37.el8jbcs
ORredhatjbcs-httpd24-mod_jk-0Range≤1.2.49-6.redhat_1.el8jbcs
ORredhatjbcs-httpd24-mod_md-1Range≤2.4.24-6.el8jbcs
ORredhatmod_clusterRange≤1.3.20-4.el8jbcs
ORredhatjbcs-httpd24-mod_security-0Range≤2.9.3-36.el8jbcs
ORredhatjbcs-httpd24-nghttp2-0Range≤1.43.0-13.el8jbcs
ORredhatjbcs-httpd24-curl-0Range≤8.7.1-2.el7jbcs
ORredhatjbcs-httpd24-httpd-0Range≤2.4.57-10.el7jbcs
ORredhatjbcs-httpd24-mod_http2-0Range≤1.15.19-37.el7jbcs
ORredhatjbcs-httpd24-mod_jk-0Range≤1.2.49-6.redhat_1.el7jbcs
ORredhatjbcs-httpd24-mod_md-1Range≤2.4.24-6.el7jbcs
ORredhatmod_clusterRange≤1.3.20-4.el7jbcs
ORredhatjbcs-httpd24-mod_security-0Range≤2.9.3-36.el7jbcs
ORredhatjbcs-httpd24-nghttp2-0Range≤1.43.0-13.el7jbcs
ORredhatnodejsRange≤20-8090020240422150739.a75119d5
ORredhatnodejsRange≤18-8090020240429131734.a75119d5
ORredhatnghttp2Range≤1.33.0-6.el8_10.1
ORredhatnghttp2-0Range≤1.33.0-3.el8_2.3
ORredhatnghttp2-0Range≤1.33.0-4.el8_4.2
ORredhatnghttp2-0Range≤1.33.0-4.el8_6.2
ORredhatnodejsRange≤18-8080020240621122004.63b34585
ORredhatnghttp2-0Range≤1.33.0-5.el8_8.1
ORredhatnodejsRange≤18-9040020240422140329.rhel9
ORredhatnodejsRange≤20-9040020240419140200.rhel9
ORredhatnodejsRange≤16.20.2-8.el9_4
ORredhatnghttp2Range≤1.43.0-5.el9_4.3
ORredhatnodejs-1Range≤16.20.2-9.el9_0
ORredhatnghttp2-0Range≤1.43.0-5.el9_0.3
ORredhatnodejs-1Range≤16.20.2-5.el9_2.3
ORredhatnodejsRange≤18-9020020240516091141.rhel9
ORredhatnghttp2-0Range≤1.43.0-5.el9_2.3
ORredhatgnutlsRange≤3.6.16-8.el8_9.3
ORredhatgnutls-0Range≤3.6.16-5.el8_6.4
ORredhatgnutls-0Range≤3.6.16-7.el8_8.3
ORredhatgnutlsRange≤3.7.6-23.el9_3.4
ORredhatgnutlsRange≤3.8.3-4.el9_4
ORredhatgnutls-0Range≤3.7.6-21.el9_2.3
ORredhatpam_smbRange≤1.3.1-33.el8
ORredhatpam_smbRange≤1.5.1-19.el9
ORredhatyajlRange≤2.1.0-11.el8
ORredhatyajl-0Range≤2.1.0-13.el8_6
ORredhatyajlRange≤2.1.0-21.el9
ORredhatsystemdRange≤239-82.el8
ORredhatsystemdRange≤252-32.el9_4
ORredhatkrb5Range≤1.18.2-27.el8_10
ORredhatkrb5Range≤1.21.1-3.el9
ORredhatpython3Range≤3.6.8-62.el8_10
ORredhatpython39Range≤3.9-8100020240516111311.d47b87a4
ORredhatkdelibs_develRange≤3.9-8100020240516111311.d47b87a4
ORredhatpython3.11Range≤3.11.9-1.el8_10
ORredhatpython3.12Range≤3.12.3-2.el8_10
ORredhatpython3-0Range≤3.6.8-47.el8_6.6
ORredhatpython3-0Range≤3.6.8-51.el8_8.6
ORredhatpython3.9Range≤3.9.18-3.el9_4.1
ORredhatpython3.12Range≤3.12.5-2.el9
ORredhatpython3.11Range≤3.11.9-7.el9
ORredhatservice_interconnectRange≤2.4.3-5
ORredhatservice_interconnectRange≤2.5.3-2
ORredhatbind-32Range≤9.11.36-11.el8_9
ORredhatbind-32Range≤9.11.36-8.el8_8.3
ORredhatyajlRange≤2.1.0-12.el8
ORredhatyajl-0Range≤2.1.0-12.el8_8
ORredhatyajlRange≤2.1.0-22.el9
ORredhatmta\/mta-windup-addon-rhel9Range≤6.2.3-2
ORredhatmta\/mta-cli-rhel9Range≤7.0.3-16
ORredhatmta\/mta-ui-rhel9Range≤7.0.3-13
ORredhatansible_automation_controllerRange≤4.5.5-2.el8ap
ORredhatansible_automation_controllerRange≤4.5.5-2.el9ap
ORredhatopenshiftRange≤v1.8.3-4
ORredhatvirtualizationRange≤v4.12.12-7
ORredhatvirtualizationRange≤v4.13.10-387
ORredhatvirtualizationRange≤v4.14.6-195
ORredhatvirtualizationRange≤v4.15.2-383
ORredhatvirtualizationRange≤v4.16.0-4001
ORredhatpython3x-idna-0Range≤3.7-1.el8ap
ORredhatpython-idna-0Range≤3.7-1.el9ap
ORredhatpython-idna-0Range≤2.4-2.el7_9
ORredhatpython-idnaRange≤2.5-7.el8_10
ORredhatpython-idna-0Range≤2.5-5.el8_6.1
ORredhatpython-idna-0Range≤2.5-5.el8_8.1
ORredhatpython-idnaRange≤2.10-7.el9_4.1
ORredhatgdiskRange≤1.0.3-11.el8
ORredhatgdisk-0Range≤1.0.3-9.el8_6.1
ORredhatbind9.16-32Range≤9.16.23-0.9.el8.1
ORredhatbind-32Range≤9.11.36-5.el8
ORredhatbind-32Range≤9.16.23-5.el9_1
ORredhatdhcp-12Range≤4.4.2-17.b1.el9
ORredhatlessRange≤530-2.el8_9
ORredhatlessRange≤530-3.el8_10
ORredhatless-0Range≤530-2.el8_6
ORredhatless-0Range≤530-2.el8_8
ORredhatlessRange≤590-3.el9_3
ORredhatopenshift_loggingRange≤v5.6.18-16
ORredhatopenshift_loggingRange≤v5.6.18-7
ORredhatopenshift_loggingRange≤v6.8.1-409
ORredhatopenshift_loggingRange≤v5.6.18-16
ORredhatopenshift_loggingRange≤v1.0.0-481
ORredhatopenshift_loggingRange≤v5.6.18-7
ORredhatopenshift_loggingRange≤v0.4.0-246
ORredhatopenshift_loggingRange≤v1.14.6-216
ORredhatopenshift_loggingRange≤v6.8.1-430
ORredhatopenshift_loggingRange≤v1.1.0-226
ORredhatopenshift_loggingRange≤v5.8.1-472
ORredhatopenshift_loggingRange≤v2.9.6-16
ORredhatopenshift_loggingRange≤v5.6.18-3
ORredhatopenshift_loggingRange≤v5.6.18-30
ORredhatopenshift_loggingRange≤v5.6.18-12
ORredhatopenshift_loggingRange≤v0.1.0-528
ORredhatopenshift_loggingRange≤v0.1.0-226
ORredhatopenshift_loggingRange≤v0.21.0-127
ORredhatopenshift_loggingRange≤v5.7.13-16
ORredhatopenshift_loggingRange≤v5.7.13-7
ORredhatopenshift_loggingRange≤v6.8.1-408
ORredhatopenshift_loggingRange≤v5.7.13-19
ORredhatopenshift_loggingRange≤v1.0.0-480
ORredhatopenshift_loggingRange≤v5.7.13-9
ORredhatopenshift_loggingRange≤v0.4.0-248
ORredhatopenshift_loggingRange≤v1.14.6-215
ORredhatopenshift_loggingRange≤v6.8.1-431
ORredhatopenshift_loggingRange≤v1.1.0-228
ORredhatopenshift_loggingRange≤v5.8.1-471
ORredhatopenshift_loggingRange≤v2.9.6-15
ORredhatopenshift_loggingRange≤v5.7.13-3
ORredhatopenshift_loggingRange≤v5.7.13-27
ORredhatopenshift_loggingRange≤v5.7.13-12
ORredhatopenshift_loggingRange≤v0.1.0-527
ORredhatopenshift_loggingRange≤v0.1.0-225
ORredhatopenshift_loggingRange≤v0.28.1-57
ORredhatbind-32Range≤9.11.4-26.P2.el7_9.16
ORredhatbind-dyndb-ldapRange≤11.1-7.el7_9.1
ORredhatdhcp-12Range≤4.2.5-83.el7_9.2
ORredhatbind9.16-32Range≤9.16.23-0.16.el8_9.2
ORredhatbind-32Range≤9.11.36-11.el8_9.1
ORredhatbind-32Range≤9.11.36-14.el8_10
ORredhatbind-32Range≤9.11.13-6.el8_2.7
ORredhatdhcp-12Range≤4.3.6-40.el8_2.3
ORredhatbind-32Range≤9.11.26-4.el8_4.4
ORredhatdhcp-12Range≤4.3.6-44.el8_4.3
ORredhatbind9.16-32Range≤9.16.23-0.7.el8_6.5
ORredhatbind9.16-32Range≤9.16.23-0.14.el8_8.4
ORredhatbind-32Range≤9.11.36-8.el8_8.4
ORredhatdhcp-12Range≤4.3.6-49.el8_8.1
ORredhatbind-32Range≤9.16.23-14.el9_3.4
ORredhatbind-dyndb-ldapRange≤11.9-8.el9_3.3
ORredhatbind-32Range≤9.16.23-18.el9_4.1
ORredhatbind-dyndb-ldapRange≤11.9-9.el9_4
ORredhatbind-32Range≤9.16.23-1.el9_0.5
ORredhatbind-dyndb-ldap-0Range≤11.9-7.el9_0.1
ORredhatbind-32Range≤9.16.23-11.el9_2.4
ORredhatbind-dyndb-ldap-0Range≤11.9-8.el9_2.2
ORredhatunboundRange≤1.16.2-5.el8_9.2
ORredhatdnsmasqRange≤2.79-31.el8_9.2
ORredhatunbound-0Range≤1.7.3-12.el8_2.1
ORredhatdnsmasq-0Range≤2.79-11.el8_2.3
ORredhatunbound-0Range≤1.7.3-15.el8_4.1
ORredhatdnsmasq-0Range≤2.79-15.el8_4.2
ORredhatdnsmasq-0Range≤2.79-21.el8_6.5
ORredhatunbound-0Range≤1.7.3-17.el8_6.4
ORredhatunbound-0Range≤1.16.2-5.el8_8.1
ORredhatdnsmasq-0Range≤2.79-26.el8_8.4
ORredhatunboundRange≤1.16.2-3.el9_3.1
ORredhatdnsmasqRange≤2.85-14.el9_3.1
ORredhatdnsmasq-0Range≤2.85-3.el9_0.1
ORredhatunbound-0Range≤1.13.1-13.el9_0.4
ORredhatunbound-0Range≤1.16.2-3.el9_2.1
ORredhatdnsmasq-0Range≤2.85-6.el9_2.3
ORredhatexpatRange≤2.2.5-11.el8_9.1
ORredhatxmlrpc-cRange≤1.51.0-9.el8_10
ORredhatexpat-0Range≤2.2.5-8.el8_6.5
ORredhatexpat-0Range≤2.2.5-11.el8_8.2
ORredhatexpatRange≤2.5.0-1.el9_3.1
ORredhatexpat-0Range≤2.5.0-1.el9_2.1
ORredhatlibxml2Range≤2.9.7-18.el8_10.1
ORredhatlibxml2-0Range≤2.9.7-13.el8_6.5
ORredhatlibxml2-0Range≤2.9.7-16.el8_8.4
ORredhatlibxml2Range≤2.9.13-6.el9_4
ORredhatlibxml2-0Range≤2.9.13-3.el9_2.3
ORredhatpython3-0Range≤3.6.8-24.el8_2.3
ORredhatpython3-0Range≤3.6.8-39.el8_4.5
ORredhatpython3.11-0Range≤3.11.2-2.el8_8.3
ORredhatpython3.11Range≤3.11.7-1.el9_4.1
ORredhatpython3.9-0Range≤3.9.10-4.el9_0.4
ORredhatpython3.11-0Range≤3.11.2-2.el9_2.4
ORredhatpython3.9-0Range≤3.9.16-1.el9_2.5
ORredhatedk2Range≤20220126gitbb1bba3d77-6.el8_9.6
ORredhatedk2-0Range≤20190829git37eef91017ad-9.el8_2.3
ORredhatedk2-0Range≤20200602gitca407c7246bf-4.el8_4.4
ORredhatedk2-0Range≤20220126gitbb1bba3d77-2.el8_6.4
ORredhatedk2-0Range≤20220126gitbb1bba3d77-4.el8_8.3
ORredhatedk2Range≤20230524-4.el9_3.2
ORredhatedk2-0Range≤20220126gitbb1bba3d77-3.el9_0.4
ORredhatedk2-0Range≤20221207gitfff6d81270b5-9.el9_2.2
ORredhatedk2-0Range≤20190829git37eef91017ad-9.el8_2.4
ORredhatedk2-0Range≤20200602gitca407c7246bf-4.el8_4.5
ORredhatglibcRange≤2.28-236.el8_9.13
ORredhatglibcRange≤2.28-251.el8_10.1
redhatenterprise_linuxMatch8
ORredhatenterprise_linuxMatch9
ORredhatenterprise_linuxMatch7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| redhat | libssh | * | cpe:2.3:a:redhat:libssh:*:*:*:*:*:*:*:* |
| redhat | glibc | * | cpe:2.3:a:redhat:glibc:*:*:*:*:*:*:*:* |
| redhat | glibc-0 | * | cpe:2.3:a:redhat:glibc-0:*:*:*:*:*:*:*:* |
| redhat | service_interconnect | * | cpe:2.3:a:redhat:service_interconnect:*:*:*:*:*:*:*:* |
| redhat | bind-32 | * | cpe:2.3:a:redhat:bind-32:*:*:*:*:*:*:*:* |
| redhat | bind9.16-32 | * | cpe:2.3:a:redhat:bind9.16-32:*:*:*:*:*:*:*:* |
| redhat | dhcp-12 | * | cpe:2.3:a:redhat:dhcp-12:*:*:*:*:*:*:*:* |
| redhat | jbcs-httpd24-curl-0 | * | cpe:2.3:a:redhat:jbcs-httpd24-curl-0:*:*:*:*:*:*:*:* |
| redhat | jbcs-httpd24-httpd-0 | * | cpe:2.3:a:redhat:jbcs-httpd24-httpd-0:*:*:*:*:*:*:*:* |
| redhat | jbcs-httpd24-mod_http2-0 | * | cpe:2.3:a:redhat:jbcs-httpd24-mod_http2-0:*:*:*:*:*:*:*:* |
Related
ibm
ibm
redhat
redhat
osv
osv
Red Hat Security Advisory: bind and dhcp security update
2024-09-16 17:58:09
Red Hat Security Advisory: glibc security update
2024-09-19 11:53:26
Important: glibc security update
2024-05-23 00:00:00
nessus
nessus
RHEL 8 : bind and dhcp (RHSA-2024:2720)
2024-05-07 00:00:00
Oracle Linux 8 : glibc (ELSA-2024-12440)
2024-06-18 00:00:00
EulerOS 2.0 SP12 : glibc (EulerOS-SA-2024-2351)
2024-09-10 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-1932)
2024-07-16 00:00:00
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-2179)
2024-08-20 00:00:00
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-2632)
2024-10-28 00:00:00
almalinux
almalinux
Important: glibc security update
2024-05-23 00:00:00
Important: glibc security update
2024-05-23 00:00:00
Important: python39:3.9 and python39-devel:3.9 security update
2024-05-29 00:00:00
oraclelinux
oraclelinux
glibc security update
2024-06-18 00:00:00
glibc security update
2024-05-29 00:00:00
glibc security update
2024-07-03 00:00:00
rocky
rocky
glibc security update
2024-06-14 14:00:33
glibc security update
2024-06-14 13:59:16
python39:3.9 and python39-devel:3.9 security update
2024-06-14 13:59:30
gentoo
gentoo
glibc: Multiple Vulnerabilities
2024-05-06 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: glibc-2.38-19.fc39
2024-10-28 01:04:52
ubuntu
ubuntu
GNU C Library vulnerabilities
2024-05-31 00:00:00
slackware
slackware
[slackware-security] glibc
2024-07-23 19:09:08
[slackware-security] python3
2024-03-20 21:14:26
redos
redos
ROS-20240815-07
2024-08-15 00:00:00
mageia
mageia
Updated glibc packages fix security vulnerabilities
2024-05-10 19:09:48
debian
debian
[SECURITY] [DSA 5678-1] glibc security update
2024-05-03 19:53:11
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0293
2024-06-17 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0633
2024-06-17 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.4
Confidence
High
EPSS
0.05
Percentile
93.1%
Related for RHSA-2024:4269