Lucene search

K
redhatRedHatRHSA-2024:4697
HistoryJul 22, 2024 - 10:10 a.m.

(RHSA-2024:4697) Moderate: Red Hat build of Cryostat security update

2024-07-2210:10:07
access.redhat.com
4
red hat
cryostat
security update
rhel 8
golang
netip
cve-2024-24788
cve-2024-24790
cvss score
references section

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.004

Percentile

75.3%

An update is now available for the Red Hat build of Cryostat 3 on RHEL 8.

Security Fix(es):

  • golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)

  • golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.004

Percentile

75.3%