Lucene search

K
redhatRedHatRHSA-2024:4785
HistoryAug 07, 2024 - 12:47 a.m.

(RHSA-2024:4785) Moderate: Network Observability 1.6.1 for OpenShift

2024-08-0700:47:01
access.redhat.com
7
cve-2024-24789
golang
archive/zip
incorrect handling
zip files
cve-2024-24790
net/netip
unexpected behavior
ipv4-mapped ipv6
unix

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8

Confidence

Low

Network Observability 1.6.1

Security Fix(es):

  • CVE-2024-24789 golang: archive/zip: Incorrect handling of certain ZIP files
  • CVE-2024-24790 golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8

Confidence

Low