DeutschShown in its original language — a full translation is planned for a future version.
Red Hat OpenShift: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2021-11-10
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-37137US | high7.5 | — | ||
The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the who… | ||||
| CVE-2021-37136US | high7.5 | — | ||
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2021:3959 vom 2021-11-10external
- Red Hat Security Advisory RHSA-2021:4851 vom 2021-11-30external
- Red Hat Security Advisory RHSA-2021:5127 vom 2021-12-14external
- Red Hat Security Advisory RHSA-2021:5128 vom 2021-12-14external
- Red Hat Security Advisory RHSA-2021:5129 vom 2021-12-14external
- Red Hat Security Advisory RHSA-2022:0138 vom 2022-01-13external
- Red Hat Security Advisory RHSA-2022:0520 vom 2022-02-14external
- Red Hat Security Advisory RHSA-2022:0589 vom 2022-02-21external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan