Lucene search

K
redosRedosROS-20240329-10
HistoryMar 29, 2024 - 12:00 a.m.

ROS-20240329-10

2024-03-2900:00:00
redos.red-soft.ru
6
http2
go programming language
denial of service
openrapid rapidcms
password recovery
data integrity
cri-o container
access control
unix

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

50.9%

Vulnerability of http2 package of Go programming language is related to uncontrolled server resources consumption as a result of resetting Server.MaxConcurrentStreams parameter during request stream processing.
as a result of resetting the Server.MaxConcurrentStreams parameter when processing a request stream. Exploitation
vulnerability could allow a remote attacker to cause a denial of service.

A vulnerability in the dmin/run-movepass.php file in OpenRapid RapidCMS is related to the manipulation of arguments of
passwords, leading to unreliable password recovery. Exploitation of the vulnerability could allow
an attacker acting remotely to impact data integrity

Vulnerability in the CRI-O container mechanism is related to improper access control. Exploitation of the vulnerability
could allow an attacker to disclose confidential information

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64cri-o<= 1.24.1-4UNKNOWN

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

50.9%