DeutschShown in its original language — a full translation is planned for a future version.
Red Hat OpenShift: Mehrere Schwachstellen
view advisory published 2021-08-09
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um die Integrität und die Verfügbarkeit zu gefährden.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-29923US | high7.5 | — | ||
Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control t… | ||||
| CVE-2021-33198US | high7.5 | — | ||
In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method. | ||||
| CVE-2021-33197US | medium5.3OT elevated | — | ||
In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary header… | ||||
| CVE-2021-33195US | high7.3 | — | ||
Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2021-3585 vom 2021-09-22external
- RedHat Security Advisory RHSA-2021:2983 vom 2021-08-10external
- RedHat Security Advisory RHSA-2021:2984 vom 2021-08-09external
- Red Hat Security Advisory RHSA-2021:3009 vom 2021-08-12external
- Red Hat Security Advisory RHSA-2021:3146 vom 2021-08-12external
- Red Hat Security Advisory RHSA-2021:3229 vom 2021-08-20external
- Red Hat Security Advisory RHSA-2021:3248 vom 2021-08-31external
- Red Hat Security Advisory RHSA-2021:3361 vom 2021-08-31external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan