DeutschShown in its original language — a full translation is planned for a future version.
Red Hat OpenShift: Mehrere Schwachstellen
view advisory published 2022-06-01
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-23806US | critical9.1 | — | ||
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element. | ||||
| CVE-2022-23773US | high7.5 | Exploit | ||
cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is… | ||||
| CVE-2022-23772US | high7.5 | — | ||
Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption. | ||||
02
references
External citations — patches, advisories, analysis.
- RedHat Security Advisory vom 2022-06-01external
- Red Hat Security Advisory RHSA-2022:4956 vom 2022-06-09external
- Red Hat Security Advisory RHSA-2022:5004 vom 2022-07-04external
- Red Hat Security Advisory RHSA-2022:5068 vom 2022-08-10external
- Red Hat Security Advisory RHSA-2022:5201 vom 2022-06-28external
- Red Hat Security Advisory RHSA-2022:5392 vom 2022-06-28external
- Red Hat Security Advisory RHSA-2022:5875 vom 2022-08-09external
- Red Hat Security Advisory RHSA-2022:6094 vom 2022-08-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan