DeutschShown in its original language — a full translation is planned for a future version.
Red Hat OpenShift: Mehrere Schwachstellen
view advisory published 2023-01-17
Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-3466US | medium5.3OT elevated | — | ||
The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-2022:6658, respectively, included… | ||||
| CVE-2021-4235US | medium5.5 | — | ||
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of… | ||||
| CVE-2022-2880US | high7.5 | — | ||
Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query paramete… | ||||
| CVE-2022-2995US | high7.1 | — | ||
Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2023-0446 vom 2023-01-26external
- RHSA-2022:7398 - Security Advisory vom 2023-01-17external
- RHSA-2022:7399 - Security Advisory vom 2023-01-17external
- Red Hat Security Advisory RHSA-2023:0264 vom 2023-01-19external
- Red Hat Security Advisory RHSA-2023:0328 vom 2023-01-23external
- Red Hat Security Advisory RHSA-2023:0445 vom 2023-01-25external
- Red Hat Security Advisory RHSA-2023:0446 vom 2023-01-25external
- Red Hat Security Advisory RHSA-2023:0569 vom 2023-02-08external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan