CVE-2023-3089: fallo de gravedad alta en openshift
Ocp & fips mode
Publicada el · Actualizada el
Seguir esta CVE+ Monitorear Red Hat OpenShift Container Platform+ Monitorear Red Hat Advanced Cluster Management for Kubernetes
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7epss 0.5%
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Productos afectados
n/a · openshiftRed Hat · OpenShift ServerlessRed Hat · OpenShift Service Mesh 2.2.xRed Hat · OpenShift Service Mesh 2.3.xRed Hat · OpenShift Service Mesh 2.4Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2Red Hat · Red Hat JBoss A-MQ StreamsRed Hat · Red Hat OpenShift Container Platform 3.11Red Hat · Red Hat OpenShift Container Platform 4Red Hat · Red Hat Openshift Data Foundation 4Red Hat · Red Hat Openshift sandboxed containersRed Hat · Red Hat OpenShift Virtualization 4CVEs relacionadas — openshift
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-1635HIGHUndertow: out-of-memory error after several closed connections with wildfly-http-client protocolEPSS 4.6%CVE-2024-3653MEDIUMUndertow: learningpushhandler can lead to remote memory dos attacksEPSS 1.9%CVE-2024-1023MEDIUMIo.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertxEPSS 1.7%CVE-2024-1394HIGHGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloadsEPSS 1.5%CVE-2024-3884HIGHUndertow: outofmemory when parsing form data encoding with application/x-www-form-urlencodedEPSS 1.5%CVE-2024-3727HIGHContainers/image: digest type does not guarantee valid typeEPSS 1.3%