WID-SEC-W-2023-0861

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Red Hat OpenShift API for Data Protection: Mehrere Schwachstellen ermöglichen Denial of Service

view advisory published 2023-04-04

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift API for Data Protection ausnutzen, um einen Denial of Service Angriff durchzuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2022-41725UShigh7.5—
A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely u…
CVE-2022-41724UShigh7.5—
Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when a…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan