CVE-2018-14632
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.7epss 2.0%
exploitation probability
2.0%top 21% of all CVEs
observed exploitation
nono source reports it
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Affected products
Red Hat · atomic-openshiftReferences
https://access.redhat.com/errata/RHBA-2018:2652https://access.redhat.com/errata/RHSA-2018:2654https://access.redhat.com/errata/RHSA-2018:2709https://access.redhat.com/errata/RHSA-2018:2906https://access.redhat.com/errata/RHSA-2018:2908https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14632https://github.com/evanphx/json-patch/commit/4c9aadca8f89e349c999f04e28199e96e81aba03#diff-65c563bba473be9d94ce4d033f74810e