Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-26146 (GCVE-0-2024-26146)
Vulnerability from cvelistv5 – Published: 2024-02-28 23:28 – Updated: 2025-02-13 17:41
VLAI?
EPSS
Summary
Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.
Severity ?
5.3 (Medium)
CWE
- CWE-1333 - Inefficient Regular Expression Complexity
Assigner
References
| URL | Tags | ||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:rack_project:rack:2.2.0:*:*:*:*:ruby:*:*",
"cpe:2.3:a:rack_project:rack:2.1.0:*:*:*:*:ruby:*:*",
"cpe:2.3:a:rack_project:rack:3.0.0:-:*:*:*:ruby:*:*"
],
"defaultStatus": "unknown",
"product": "rack",
"vendor": "rack_project",
"versions": [
{
"lessThan": "2.1.4.4",
"status": "affected",
"version": "2.1.0",
"versionType": "custom"
},
{
"lessThan": "2.2.8.1",
"status": "affected",
"version": "2.2.0",
"versionType": "custom"
},
{
"lessThan": "3.0.9.1",
"status": "affected",
"version": "3.0.0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:rack_project:rack:*:*:*:*:*:ruby:*:*"
],
"defaultStatus": "unknown",
"product": "rack",
"vendor": "rack_project",
"versions": [
{
"lessThan": "2.0.9.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-26146",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-02-29T17:31:54.207314Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-25T16:39:52.274Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T23:59:32.576Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f",
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f"
},
{
"name": "https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716"
},
{
"name": "https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582"
},
{
"name": "https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f"
},
{
"name": "https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd"
},
{
"name": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
},
{
"name": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml"
},
{
"tags": [
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20240510-0006/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "rack",
"vendor": "rack",
"versions": [
{
"status": "affected",
"version": "\u003e= 3.0.0, \u003c 3.0.9.1"
},
{
"status": "affected",
"version": "\u003e= 2.2.0, \u003c 2.2.8.1"
},
{
"status": "affected",
"version": "\u003e= 2.1.0, \u003c 2.1.4.4"
},
{
"status": "affected",
"version": "\u003c 2.0.9.4"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1333",
"description": "CWE-1333: Inefficient Regular Expression Complexity",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-10T17:12:58.798Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f"
},
{
"name": "https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716"
},
{
"name": "https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582"
},
{
"name": "https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f"
},
{
"name": "https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd"
},
{
"name": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"tags": [
"x_refsource_MISC"
],
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
},
{
"name": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html"
},
{
"url": "https://security.netapp.com/advisory/ntap-20240510-0006/"
}
],
"source": {
"advisory": "GHSA-54rr-7fvw-6x8f",
"discovery": "UNKNOWN"
},
"title": "Possible Denial of Service Vulnerability in Rack Header Parsing"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2024-26146",
"datePublished": "2024-02-28T23:28:01.158Z",
"dateReserved": "2024-02-14T17:40:03.689Z",
"dateUpdated": "2025-02-13T17:41:07.669Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"descriptions": "[{\"lang\": \"en\", \"value\": \"Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.\\n\"}, {\"lang\": \"es\", \"value\": \"Rack es una interfaz modular de servidor web Ruby. Los encabezados cuidadosamente elaborados pueden hacer que el an\\u00e1lisis de encabezados en Rack demore m\\u00e1s de lo esperado, lo que resulta en un posible problema de denegaci\\u00f3n de servicio. Los encabezados Aceptar y Reenviar se ven afectados. Ruby 3.2 tiene mitigaciones para este problema, por lo que las aplicaciones Rack que usan Ruby 3.2 o posterior no se ven afectadas. Esta vulnerabilidad se solucion\\u00f3 en 2.0.9.4, 2.1.4.4, 2.2.8.1 y 3.0.9.1.\"}]",
"id": "CVE-2024-26146",
"lastModified": "2024-11-21T09:02:01.697",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"security-advisories@github.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 1.4}]}",
"published": "2024-02-29T00:15:51.597",
"references": "[{\"url\": \"https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942\", \"source\": \"security-advisories@github.com\"}, {\"url\": \"https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716\", \"source\": \"security-advisories@github.com\"}, {\"url\": \"https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582\", \"source\": \"security-advisories@github.com\"}, {\"url\": \"https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f\", \"source\": \"security-advisories@github.com\"}, {\"url\": \"https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd\", \"source\": \"security-advisories@github.com\"}, {\"url\": \"https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f\", \"source\": \"security-advisories@github.com\"}, {\"url\": \"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml\", \"source\": \"security-advisories@github.com\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html\", \"source\": \"security-advisories@github.com\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240510-0006/\", \"source\": \"security-advisories@github.com\"}, {\"url\": \"https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240510-0006/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "security-advisories@github.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": "[{\"source\": \"security-advisories@github.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-1333\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2024-26146\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2024-02-29T00:15:51.597\",\"lastModified\":\"2025-02-14T15:51:42.200\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.\"},{\"lang\":\"es\",\"value\":\"Rack es una interfaz modular de servidor web Ruby. Los encabezados cuidadosamente elaborados pueden hacer que el an\u00e1lisis de encabezados en Rack demore m\u00e1s de lo esperado, lo que resulta en un posible problema de denegaci\u00f3n de servicio. Los encabezados Aceptar y Reenviar se ven afectados. Ruby 3.2 tiene mitigaciones para este problema, por lo que las aplicaciones Rack que usan Ruby 3.2 o posterior no se ven afectadas. Esta vulnerabilidad se solucion\u00f3 en 2.0.9.4, 2.1.4.4, 2.2.8.1 y 3.0.9.1.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1333\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1333\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*\",\"versionStartIncluding\":\"0.4\",\"versionEndExcluding\":\"2.0.9.4\",\"matchCriteriaId\":\"8C61CB94-A5BE-4B72-B243-F935A4652B0B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*\",\"versionStartIncluding\":\"2.1.0\",\"versionEndExcluding\":\"2.1.4.4\",\"matchCriteriaId\":\"B5402B9E-EE8A-41A3-87CB-E17C57E5F692\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*\",\"versionStartIncluding\":\"2.2.0\",\"versionEndExcluding\":\"2.2.8.1\",\"matchCriteriaId\":\"4F7D6529-12DB-4466-A0AB-DED4653D3E0B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]}],\"references\":[{\"url\":\"https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240510-0006/\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240510-0006/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f\", \"name\": \"https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716\", \"name\": \"https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582\", \"name\": \"https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f\", \"name\": \"https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd\", \"name\": \"https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942\", \"name\": \"https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml\", \"name\": \"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240510-0006/\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-01T23:59:32.576Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-26146\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-02-29T17:31:54.207314Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:rack_project:rack:2.2.0:*:*:*:*:ruby:*:*\", \"cpe:2.3:a:rack_project:rack:2.1.0:*:*:*:*:ruby:*:*\", \"cpe:2.3:a:rack_project:rack:3.0.0:-:*:*:*:ruby:*:*\"], \"vendor\": \"rack_project\", \"product\": \"rack\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\", \"lessThan\": \"2.1.4.4\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"2.2.0\", \"lessThan\": \"2.2.8.1\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"3.0.0\", \"lessThan\": \"3.0.9.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:2.3:a:rack_project:rack:*:*:*:*:*:ruby:*:*\"], \"vendor\": \"rack_project\", \"product\": \"rack\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"2.0.9.4\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-07-25T16:39:01.836Z\"}}], \"cna\": {\"title\": \"Possible Denial of Service Vulnerability in Rack Header Parsing\", \"source\": {\"advisory\": \"GHSA-54rr-7fvw-6x8f\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"rack\", \"product\": \"rack\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e= 3.0.0, \u003c 3.0.9.1\"}, {\"status\": \"affected\", \"version\": \"\u003e= 2.2.0, \u003c 2.2.8.1\"}, {\"status\": \"affected\", \"version\": \"\u003e= 2.1.0, \u003c 2.1.4.4\"}, {\"status\": \"affected\", \"version\": \"\u003c 2.0.9.4\"}]}], \"references\": [{\"url\": \"https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f\", \"name\": \"https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716\", \"name\": \"https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582\", \"name\": \"https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f\", \"name\": \"https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd\", \"name\": \"https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942\", \"name\": \"https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml\", \"name\": \"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240510-0006/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1333\", \"description\": \"CWE-1333: Inefficient Regular Expression Complexity\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2024-06-10T17:12:58.798Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2024-26146\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-02-13T17:41:07.669Z\", \"dateReserved\": \"2024-02-14T17:40:03.689Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2024-02-28T23:28:01.158Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
RHSA-2024:3431
Vulnerability from csaf_redhat - Published: 2024-05-28 14:28 - Updated: 2025-11-21 19:03Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:3431",
"url": "https://access.redhat.com/errata/RHSA-2024:3431"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3431.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2025-11-21T19:03:10+00:00",
"generator": {
"date": "2025-11-21T19:03:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:3431",
"initial_release_date": "2024-05-28T14:28:05+00:00",
"revision_history": [
{
"date": "2024-05-28T14:28:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-05-28T14:28:05+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T19:03:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:8.6::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:8.6::resilientstorage"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.12-6.el8_6.5.src",
"product": {
"name": "pcs-0:0.10.12-6.el8_6.5.src",
"product_id": "pcs-0:0.10.12-6.el8_6.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.12-6.el8_6.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.12-6.el8_6.5.aarch64",
"product": {
"name": "pcs-0:0.10.12-6.el8_6.5.aarch64",
"product_id": "pcs-0:0.10.12-6.el8_6.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.12-6.el8_6.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"product": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"product_id": "pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.12-6.el8_6.5?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.12-6.el8_6.5.ppc64le",
"product": {
"name": "pcs-0:0.10.12-6.el8_6.5.ppc64le",
"product_id": "pcs-0:0.10.12-6.el8_6.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.12-6.el8_6.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"product": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"product_id": "pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.12-6.el8_6.5?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.12-6.el8_6.5.x86_64",
"product": {
"name": "pcs-0:0.10.12-6.el8_6.5.x86_64",
"product_id": "pcs-0:0.10.12-6.el8_6.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.12-6.el8_6.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"product": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"product_id": "pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.12-6.el8_6.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.12-6.el8_6.5.s390x",
"product": {
"name": "pcs-0:0.10.12-6.el8_6.5.s390x",
"product_id": "pcs-0:0.10.12-6.el8_6.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.12-6.el8_6.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"product": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"product_id": "pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.12-6.el8_6.5?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.aarch64",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.ppc64le",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.s390x",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.src as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.src",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.aarch64",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.s390x",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.src as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.src",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.x86_64",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-28T14:28:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:3431"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-28T14:28:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:3431"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-28T14:28:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:3431"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024_2113
Vulnerability from csaf_redhat - Published: 2024-04-30 10:32 - Updated: 2024-12-16 18:29Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:2113",
"url": "https://access.redhat.com/errata/RHSA-2024:2113"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "RHEL-15217",
"url": "https://issues.redhat.com/browse/RHEL-15217"
},
{
"category": "external",
"summary": "RHEL-7582",
"url": "https://issues.redhat.com/browse/RHEL-7582"
},
{
"category": "external",
"summary": "RHEL-7583",
"url": "https://issues.redhat.com/browse/RHEL-7583"
},
{
"category": "external",
"summary": "RHEL-7669",
"url": "https://issues.redhat.com/browse/RHEL-7669"
},
{
"category": "external",
"summary": "RHEL-7672",
"url": "https://issues.redhat.com/browse/RHEL-7672"
},
{
"category": "external",
"summary": "RHEL-7697",
"url": "https://issues.redhat.com/browse/RHEL-7697"
},
{
"category": "external",
"summary": "RHEL-7698",
"url": "https://issues.redhat.com/browse/RHEL-7698"
},
{
"category": "external",
"summary": "RHEL-7700",
"url": "https://issues.redhat.com/browse/RHEL-7700"
},
{
"category": "external",
"summary": "RHEL-7703",
"url": "https://issues.redhat.com/browse/RHEL-7703"
},
{
"category": "external",
"summary": "RHEL-7719",
"url": "https://issues.redhat.com/browse/RHEL-7719"
},
{
"category": "external",
"summary": "RHEL-7724",
"url": "https://issues.redhat.com/browse/RHEL-7724"
},
{
"category": "external",
"summary": "RHEL-7725",
"url": "https://issues.redhat.com/browse/RHEL-7725"
},
{
"category": "external",
"summary": "RHEL-7730",
"url": "https://issues.redhat.com/browse/RHEL-7730"
},
{
"category": "external",
"summary": "RHEL-7738",
"url": "https://issues.redhat.com/browse/RHEL-7738"
},
{
"category": "external",
"summary": "RHEL-7739",
"url": "https://issues.redhat.com/browse/RHEL-7739"
},
{
"category": "external",
"summary": "RHEL-7740",
"url": "https://issues.redhat.com/browse/RHEL-7740"
},
{
"category": "external",
"summary": "RHEL-7744",
"url": "https://issues.redhat.com/browse/RHEL-7744"
},
{
"category": "external",
"summary": "RHEL-7746",
"url": "https://issues.redhat.com/browse/RHEL-7746"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2113.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2024-12-16T18:29:38+00:00",
"generator": {
"date": "2024-12-16T18:29:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2024:2113",
"initial_release_date": "2024-04-30T10:32:37+00:00",
"revision_history": [
{
"date": "2024-04-30T10:32:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-30T10:32:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-16T18:29:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HighAvailability (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::resilientstorage"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.7-2.el9_4.src",
"product": {
"name": "pcs-0:0.11.7-2.el9_4.src",
"product_id": "pcs-0:0.11.7-2.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.7-2.el9_4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.7-2.el9_4.aarch64",
"product": {
"name": "pcs-0:0.11.7-2.el9_4.aarch64",
"product_id": "pcs-0:0.11.7-2.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.7-2.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"product": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"product_id": "pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.7-2.el9_4?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.7-2.el9_4.ppc64le",
"product": {
"name": "pcs-0:0.11.7-2.el9_4.ppc64le",
"product_id": "pcs-0:0.11.7-2.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.7-2.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"product": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"product_id": "pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.7-2.el9_4?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.7-2.el9_4.x86_64",
"product": {
"name": "pcs-0:0.11.7-2.el9_4.x86_64",
"product_id": "pcs-0:0.11.7-2.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.7-2.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"product": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"product_id": "pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.7-2.el9_4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.7-2.el9_4.s390x",
"product": {
"name": "pcs-0:0.11.7-2.el9_4.s390x",
"product_id": "pcs-0:0.11.7-2.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.7-2.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.7-2.el9_4.s390x",
"product": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.s390x",
"product_id": "pcs-snmp-0:0.11.7-2.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.7-2.el9_4?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.aarch64",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.ppc64le",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.s390x as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.s390x",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.src as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.src",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.x86_64",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.s390x as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.s390x",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.aarch64",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.ppc64le",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.s390x as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.s390x",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.src as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.src",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.x86_64",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.s390x as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.s390x",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T10:32:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2113"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T10:32:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2113"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T10:32:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2113"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024_10806
Vulnerability from csaf_redhat - Published: 2024-12-04 20:43 - Updated: 2024-12-16 18:30Summary
Red Hat Security Advisory: Satellite 6.15.5 Async Update
Notes
Topic
An update is now available for Red Hat Satellite 6.15 for RHEL 8.
Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.
Details
Red Hat Satellite is a system management solution that allows organizations
to configure and maintain their systems without the necessity to provide
public Internet access to their servers or other client systems. It
performs provisioning and configuration management of predefined standard
operating environments.
Security Fix(es):
* rubygem-activestorage: Possible Sensitive Session Information Leak in Active Storage (CVE-2024-26144)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* python-ecdsa: vulnerable to the Minerva attack (CVE-2024-23342)
Users of Red Hat Satellite are advised to upgrade to these updated
packages, which fix these bugs.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat Satellite 6.15 for RHEL 8.\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Satellite is a system management solution that allows organizations\nto configure and maintain their systems without the necessity to provide\npublic Internet access to their servers or other client systems. It\nperforms provisioning and configuration management of predefined standard\noperating environments.\n\nSecurity Fix(es):\n\n* rubygem-activestorage: Possible Sensitive Session Information Leak in Active Storage (CVE-2024-26144)\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n* python-ecdsa: vulnerable to the Minerva attack (CVE-2024-23342)\n\nUsers of Red Hat Satellite are advised to upgrade to these updated\npackages, which fix these bugs.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:10806",
"url": "https://access.redhat.com/errata/RHSA-2024:10806"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index"
},
{
"category": "external",
"summary": "2259780",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259780"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "2266063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2266063"
},
{
"category": "external",
"summary": "SAT-28466",
"url": "https://issues.redhat.com/browse/SAT-28466"
},
{
"category": "external",
"summary": "SAT-28665",
"url": "https://issues.redhat.com/browse/SAT-28665"
},
{
"category": "external",
"summary": "SAT-28689",
"url": "https://issues.redhat.com/browse/SAT-28689"
},
{
"category": "external",
"summary": "SAT-28690",
"url": "https://issues.redhat.com/browse/SAT-28690"
},
{
"category": "external",
"summary": "SAT-28691",
"url": "https://issues.redhat.com/browse/SAT-28691"
},
{
"category": "external",
"summary": "SAT-28693",
"url": "https://issues.redhat.com/browse/SAT-28693"
},
{
"category": "external",
"summary": "SAT-28695",
"url": "https://issues.redhat.com/browse/SAT-28695"
},
{
"category": "external",
"summary": "SAT-28696",
"url": "https://issues.redhat.com/browse/SAT-28696"
},
{
"category": "external",
"summary": "SAT-28697",
"url": "https://issues.redhat.com/browse/SAT-28697"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10806.json"
}
],
"title": "Red Hat Security Advisory: Satellite 6.15.5 Async Update",
"tracking": {
"current_release_date": "2024-12-16T18:30:32+00:00",
"generator": {
"date": "2024-12-16T18:30:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2024:10806",
"initial_release_date": "2024-12-04T20:43:54+00:00",
"revision_history": [
{
"date": "2024-12-04T20:43:54+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-12-04T20:43:54+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-16T18:30:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product": {
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.15::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product": {
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.15::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product": {
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_utils:6.15::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-installer-1:3.9.3.7-1.el8sat.src",
"product": {
"name": "foreman-installer-1:3.9.3.7-1.el8sat.src",
"product_id": "foreman-installer-1:3.9.3.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.9.3.7-1.el8sat?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"product": {
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"product_id": "pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pulpcore-obsolete-packages@1.0-10.el8pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppetserver-0:7.17.2-1.el8sat.src",
"product": {
"name": "puppetserver-0:7.17.2-1.el8sat.src",
"product_id": "puppetserver-0:7.17.2-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppetserver@7.17.2-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pulp-container-0:2.16.9-2.el8pc.src",
"product": {
"name": "python-pulp-container-0:2.16.9-2.el8pc.src",
"product_id": "python-pulp-container-0:2.16.9-2.el8pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulp-container@2.16.9-2.el8pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actioncable@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionmailbox@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionmailer@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionpack@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actiontext@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionview@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activejob@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activemodel@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activerecord@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activestorage@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activesupport@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"product": {
"name": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"product_id": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@9.0.59-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.src",
"product": {
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.src",
"product_id": "rubygem-rack-0:2.2.8.1-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rack@2.2.8.1-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-rails-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-rails-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-rails-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rails@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-railties-0:6.1.7.7-2.el8sat.src",
"product": {
"name": "rubygem-railties-0:6.1.7.7-2.el8sat.src",
"product_id": "rubygem-railties-0:6.1.7.7-2.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-railties@6.1.7.7-2.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"product": {
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"product_id": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-smart_proxy_ansible@3.5.6-0.1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.15.5-1.el8sat.src",
"product": {
"name": "satellite-0:6.15.5-1.el8sat.src",
"product_id": "satellite-0:6.15.5-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.15.5-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "foreman-0:3.9.1.12-1.el8sat.src",
"product": {
"name": "foreman-0:3.9.1.12-1.el8sat.src",
"product_id": "foreman-0:3.9.1.12-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.9.1.12-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.11.0.19-1.el8sat.src",
"product": {
"name": "rubygem-katello-0:4.11.0.19-1.el8sat.src",
"product_id": "rubygem-katello-0:4.11.0.19-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.11.0.19-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"product": {
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"product_id": "foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-fapolicyd@1.0.1-3.el8sat?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"product": {
"name": "foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"product_id": "foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.9.3.7-1.el8sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"product": {
"name": "foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"product_id": "foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer-katello@3.9.3.7-1.el8sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"product": {
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"product_id": "pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pulpcore-obsolete-packages@1.0-10.el8pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppetserver-0:7.17.2-1.el8sat.noarch",
"product": {
"name": "puppetserver-0:7.17.2-1.el8sat.noarch",
"product_id": "puppetserver-0:7.17.2-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppetserver@7.17.2-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"product": {
"name": "python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"product_id": "python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-pulp-container@2.16.9-2.el8pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actioncable@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionmailbox@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionmailer@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionpack@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actiontext@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionview@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activejob@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activemodel@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activerecord@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activestorage@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activesupport@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"product": {
"name": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"product_id": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@9.0.59-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"product": {
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"product_id": "rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rack@2.2.8.1-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rails@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"product": {
"name": "rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"product_id": "rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-railties@6.1.7.7-2.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"product": {
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"product_id": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-smart_proxy_ansible@3.5.6-0.1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.15.5-1.el8sat.noarch",
"product": {
"name": "satellite-0:6.15.5-1.el8sat.noarch",
"product_id": "satellite-0:6.15.5-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.15.5-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-cli-0:6.15.5-1.el8sat.noarch",
"product": {
"name": "satellite-cli-0:6.15.5-1.el8sat.noarch",
"product_id": "satellite-cli-0:6.15.5-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-cli@6.15.5-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-common-0:6.15.5-1.el8sat.noarch",
"product": {
"name": "satellite-common-0:6.15.5-1.el8sat.noarch",
"product_id": "satellite-common-0:6.15.5-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-common@6.15.5-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-capsule-0:6.15.5-1.el8sat.noarch",
"product": {
"name": "satellite-capsule-0:6.15.5-1.el8sat.noarch",
"product_id": "satellite-capsule-0:6.15.5-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-capsule@6.15.5-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-cli@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-debug@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-dynflow-sidekiq@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ec2@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-journald@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-libvirt@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-openstack@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ovirt@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-pcp@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-postgresql@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-redis@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-service-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-service-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-service-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-service@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-telemetry@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-vmware@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"product": {
"name": "rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"product_id": "rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.11.0.19-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"product": {
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"product_id": "foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-fapolicyd@1.0.1-3.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"product": {
"name": "foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"product_id": "foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-proxy-fapolicyd@1.0.1-3.el8sat?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.12-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src"
},
"product_reference": "foreman-0:3.9.1.12-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch"
},
"product_reference": "foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src"
},
"product_reference": "foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.9.3.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch"
},
"product_reference": "foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.9.3.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src"
},
"product_reference": "foreman-installer-1:3.9.3.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch"
},
"product_reference": "foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-service-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch"
},
"product_reference": "pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src"
},
"product_reference": "pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppetserver-0:7.17.2-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch"
},
"product_reference": "puppetserver-0:7.17.2-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppetserver-0:7.17.2-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src"
},
"product_reference": "puppetserver-0:7.17.2-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-container-0:2.16.9-2.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src"
},
"product_reference": "python-pulp-container-0:2.16.9-2.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pulp-container-0:2.16.9-2.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch"
},
"product_reference": "python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch"
},
"product_reference": "rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src"
},
"product_reference": "rubygem-rack-0:2.2.8.1-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch"
},
"product_reference": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src"
},
"product_reference": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.5-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src"
},
"product_reference": "satellite-0:6.15.5-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-capsule-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-cli-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-common-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.12-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src"
},
"product_reference": "foreman-0:3.9.1.12-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-service-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.5-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src"
},
"product_reference": "satellite-0:6.15.5-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-capsule-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-cli-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-common-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.12-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src"
},
"product_reference": "foreman-0:3.9.1.12-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch"
},
"product_reference": "foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src"
},
"product_reference": "foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.9.3.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch"
},
"product_reference": "foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.9.3.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src"
},
"product_reference": "foreman-installer-1:3.9.3.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch"
},
"product_reference": "foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-service-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch"
},
"product_reference": "pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src"
},
"product_reference": "pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppetserver-0:7.17.2-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch"
},
"product_reference": "puppetserver-0:7.17.2-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppetserver-0:7.17.2-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src"
},
"product_reference": "puppetserver-0:7.17.2-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-container-0:2.16.9-2.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src"
},
"product_reference": "python-pulp-container-0:2.16.9-2.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pulp-container-0:2.16.9-2.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch"
},
"product_reference": "python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actioncable-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionpack-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actiontext-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionview-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionview-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activejob-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activejob-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activemodel-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activerecord-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activestorage-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch"
},
"product_reference": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src"
},
"product_reference": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.11.0.19-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch"
},
"product_reference": "rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.11.0.19-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src"
},
"product_reference": "rubygem-katello-0:4.11.0.19-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch"
},
"product_reference": "rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src"
},
"product_reference": "rubygem-rack-0:2.2.8.1-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rails-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rails-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-rails-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-railties-0:6.1.7.7-2.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch"
},
"product_reference": "rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-railties-0:6.1.7.7-2.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src"
},
"product_reference": "rubygem-railties-0:6.1.7.7-2.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch"
},
"product_reference": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src"
},
"product_reference": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.5-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src"
},
"product_reference": "satellite-0:6.15.5-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-capsule-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-cli-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-common-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-23342",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2024-01-23T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2259780"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `ecdsa` PyPI package, a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior may be vulnerable to the Minerva attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-ecdsa: vulnerable to the Minerva attack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch"
],
"known_not_affected": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-23342"
},
{
"category": "external",
"summary": "RHBZ#2259780",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259780"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-23342",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-23342"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-23342",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23342"
},
{
"category": "external",
"summary": "https://github.com/tlsfuzzer/python-ecdsa/blob/master/SECURITY.md",
"url": "https://github.com/tlsfuzzer/python-ecdsa/blob/master/SECURITY.md"
},
{
"category": "external",
"summary": "https://github.com/tlsfuzzer/python-ecdsa/security/advisories/GHSA-wj6h-64fc-37mp",
"url": "https://github.com/tlsfuzzer/python-ecdsa/security/advisories/GHSA-wj6h-64fc-37mp"
},
{
"category": "external",
"summary": "https://minerva.crocs.fi.muni.cz/",
"url": "https://minerva.crocs.fi.muni.cz/"
},
{
"category": "external",
"summary": "https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/",
"url": "https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/"
}
],
"release_date": "2024-01-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-12-04T20:43:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"product_ids": [
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:10806"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python-ecdsa: vulnerable to the Minerva attack"
},
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src"
],
"known_not_affected": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-12-04T20:43:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"product_ids": [
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:10806"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src"
],
"known_not_affected": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-12-04T20:43:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"product_ids": [
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:10806"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26144",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2024-02-26T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2266063"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Active Storage that may lead to a sensitive session information leak. By default, Active Storage sends a `Set-Cookie` header along with the user\u2019s session cookie when serving blobs and sets `Cache-Control` to public. Certain proxies may cache `Set-Cookie`, leading to an information leak.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-activestorage: Possible Sensitive Session Information Leak in Active Storage",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src"
],
"known_not_affected": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26144"
},
{
"category": "external",
"summary": "RHBZ#2266063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2266063"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26144",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26144"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26144",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26144"
},
{
"category": "external",
"summary": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activestorage/CVE-2024-26144.yml",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activestorage/CVE-2024-26144.yml"
}
],
"release_date": "2024-02-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-12-04T20:43:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"product_ids": [
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:10806"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-activestorage: Possible Sensitive Session Information Leak in Active Storage"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src"
],
"known_not_affected": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-12-04T20:43:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"product_ids": [
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:10806"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024:2581
Vulnerability from csaf_redhat - Published: 2024-04-30 14:37 - Updated: 2025-11-21 19:00Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:2581",
"url": "https://access.redhat.com/errata/RHSA-2024:2581"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2581.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2025-11-21T19:00:21+00:00",
"generator": {
"date": "2025-11-21T19:00:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:2581",
"initial_release_date": "2024-04-30T14:37:16+00:00",
"revision_history": [
{
"date": "2024-04-30T14:37:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-30T14:37:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T19:00:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:8.8::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:8.8::resilientstorage"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.15-4.el8_8.2.src",
"product": {
"name": "pcs-0:0.10.15-4.el8_8.2.src",
"product_id": "pcs-0:0.10.15-4.el8_8.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.15-4.el8_8.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.15-4.el8_8.2.ppc64le",
"product": {
"name": "pcs-0:0.10.15-4.el8_8.2.ppc64le",
"product_id": "pcs-0:0.10.15-4.el8_8.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.15-4.el8_8.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"product": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"product_id": "pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.15-4.el8_8.2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.15-4.el8_8.2.x86_64",
"product": {
"name": "pcs-0:0.10.15-4.el8_8.2.x86_64",
"product_id": "pcs-0:0.10.15-4.el8_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.15-4.el8_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"product": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"product_id": "pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.15-4.el8_8.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.15-4.el8_8.2.s390x",
"product": {
"name": "pcs-0:0.10.15-4.el8_8.2.s390x",
"product_id": "pcs-0:0.10.15-4.el8_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.15-4.el8_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"product": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"product_id": "pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.15-4.el8_8.2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.15-4.el8_8.2.aarch64",
"product": {
"name": "pcs-0:0.10.15-4.el8_8.2.aarch64",
"product_id": "pcs-0:0.10.15-4.el8_8.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.15-4.el8_8.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"product": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"product_id": "pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.15-4.el8_8.2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.aarch64",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.ppc64le",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.s390x",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.src as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.src",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.x86_64",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.aarch64",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.s390x",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.src as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.src",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.x86_64",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T14:37:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2581"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T14:37:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2581"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T14:37:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2581"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024_3431
Vulnerability from csaf_redhat - Published: 2024-05-28 14:28 - Updated: 2024-12-16 18:30Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:3431",
"url": "https://access.redhat.com/errata/RHSA-2024:3431"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3431.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2024-12-16T18:30:22+00:00",
"generator": {
"date": "2024-12-16T18:30:22+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2024:3431",
"initial_release_date": "2024-05-28T14:28:05+00:00",
"revision_history": [
{
"date": "2024-05-28T14:28:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-05-28T14:28:05+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-16T18:30:22+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:8.6::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:8.6::resilientstorage"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.12-6.el8_6.5.src",
"product": {
"name": "pcs-0:0.10.12-6.el8_6.5.src",
"product_id": "pcs-0:0.10.12-6.el8_6.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.12-6.el8_6.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.12-6.el8_6.5.aarch64",
"product": {
"name": "pcs-0:0.10.12-6.el8_6.5.aarch64",
"product_id": "pcs-0:0.10.12-6.el8_6.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.12-6.el8_6.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"product": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"product_id": "pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.12-6.el8_6.5?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.12-6.el8_6.5.ppc64le",
"product": {
"name": "pcs-0:0.10.12-6.el8_6.5.ppc64le",
"product_id": "pcs-0:0.10.12-6.el8_6.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.12-6.el8_6.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"product": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"product_id": "pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.12-6.el8_6.5?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.12-6.el8_6.5.x86_64",
"product": {
"name": "pcs-0:0.10.12-6.el8_6.5.x86_64",
"product_id": "pcs-0:0.10.12-6.el8_6.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.12-6.el8_6.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"product": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"product_id": "pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.12-6.el8_6.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.12-6.el8_6.5.s390x",
"product": {
"name": "pcs-0:0.10.12-6.el8_6.5.s390x",
"product_id": "pcs-0:0.10.12-6.el8_6.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.12-6.el8_6.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"product": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"product_id": "pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.12-6.el8_6.5?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.aarch64",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.ppc64le",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.s390x",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.src as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.src",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.6)",
"product_id": "HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.aarch64",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.s390x",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.src as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.src",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.12-6.el8_6.5.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64"
},
"product_reference": "pcs-0:0.10.12-6.el8_6.5.x86_64",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.12-6.el8_6.5.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.6)",
"product_id": "ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"relates_to_product_reference": "ResilientStorage-8.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-28T14:28:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:3431"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-28T14:28:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:3431"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-28T14:28:05+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:3431"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"HighAvailability-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"HighAvailability-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.src",
"ResilientStorage-8.6.0.Z.EUS:pcs-0:0.10.12-6.el8_6.5.x86_64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.aarch64",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.ppc64le",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.s390x",
"ResilientStorage-8.6.0.Z.EUS:pcs-snmp-0:0.10.12-6.el8_6.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024_1841
Vulnerability from csaf_redhat - Published: 2024-04-16 14:56 - Updated: 2024-12-16 18:29Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:1841",
"url": "https://access.redhat.com/errata/RHSA-2024:1841"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1841.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2024-12-16T18:29:04+00:00",
"generator": {
"date": "2024-12-16T18:29:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2024:1841",
"initial_release_date": "2024-04-16T14:56:06+00:00",
"revision_history": [
{
"date": "2024-04-16T14:56:06+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-16T14:56:06+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-16T18:29:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product": {
"name": "Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.0::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product": {
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.0::resilientstorage"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.1-10.el9_0.5.src",
"product": {
"name": "pcs-0:0.11.1-10.el9_0.5.src",
"product_id": "pcs-0:0.11.1-10.el9_0.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.1-10.el9_0.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.1-10.el9_0.5.ppc64le",
"product": {
"name": "pcs-0:0.11.1-10.el9_0.5.ppc64le",
"product_id": "pcs-0:0.11.1-10.el9_0.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.1-10.el9_0.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"product": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"product_id": "pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.1-10.el9_0.5?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.1-10.el9_0.5.x86_64",
"product": {
"name": "pcs-0:0.11.1-10.el9_0.5.x86_64",
"product_id": "pcs-0:0.11.1-10.el9_0.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.1-10.el9_0.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"product": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"product_id": "pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.1-10.el9_0.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.1-10.el9_0.5.s390x",
"product": {
"name": "pcs-0:0.11.1-10.el9_0.5.s390x",
"product_id": "pcs-0:0.11.1-10.el9_0.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.1-10.el9_0.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"product": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"product_id": "pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.1-10.el9_0.5?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.1-10.el9_0.5.aarch64",
"product": {
"name": "pcs-0:0.11.1-10.el9_0.5.aarch64",
"product_id": "pcs-0:0.11.1-10.el9_0.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.1-10.el9_0.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"product": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"product_id": "pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.1-10.el9_0.5?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.aarch64",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.ppc64le",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.s390x",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.src as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.src",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.x86_64",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.aarch64",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.ppc64le",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.s390x",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.src as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.src",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.x86_64",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-16T14:56:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1841"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-16T14:56:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1841"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-16T14:56:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1841"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024:1846
Vulnerability from csaf_redhat - Published: 2024-04-16 15:26 - Updated: 2025-11-21 18:58Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:1846",
"url": "https://access.redhat.com/errata/RHSA-2024:1846"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1846.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2025-11-21T18:58:53+00:00",
"generator": {
"date": "2025-11-21T18:58:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:1846",
"initial_release_date": "2024-04-16T15:26:07+00:00",
"revision_history": [
{
"date": "2024-04-16T15:26:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-16T15:26:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:58:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.2::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.2::resilientstorage"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.4-7.el9_2.1.src",
"product": {
"name": "pcs-0:0.11.4-7.el9_2.1.src",
"product_id": "pcs-0:0.11.4-7.el9_2.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.4-7.el9_2.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.4-7.el9_2.1.aarch64",
"product": {
"name": "pcs-0:0.11.4-7.el9_2.1.aarch64",
"product_id": "pcs-0:0.11.4-7.el9_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.4-7.el9_2.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"product": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"product_id": "pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.4-7.el9_2.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.4-7.el9_2.1.ppc64le",
"product": {
"name": "pcs-0:0.11.4-7.el9_2.1.ppc64le",
"product_id": "pcs-0:0.11.4-7.el9_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.4-7.el9_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"product": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"product_id": "pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.4-7.el9_2.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.4-7.el9_2.1.x86_64",
"product": {
"name": "pcs-0:0.11.4-7.el9_2.1.x86_64",
"product_id": "pcs-0:0.11.4-7.el9_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.4-7.el9_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"product": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"product_id": "pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.4-7.el9_2.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.4-7.el9_2.1.s390x",
"product": {
"name": "pcs-0:0.11.4-7.el9_2.1.s390x",
"product_id": "pcs-0:0.11.4-7.el9_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.4-7.el9_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"product": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"product_id": "pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.4-7.el9_2.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.aarch64",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.ppc64le",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.s390x",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.src as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.src",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.x86_64",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.aarch64",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.ppc64le",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.s390x",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.src as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.src",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.x86_64",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-16T15:26:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1846"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-16T15:26:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1846"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-16T15:26:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1846"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024:2113
Vulnerability from csaf_redhat - Published: 2024-04-30 10:32 - Updated: 2025-11-21 18:59Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:2113",
"url": "https://access.redhat.com/errata/RHSA-2024:2113"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "RHEL-15217",
"url": "https://issues.redhat.com/browse/RHEL-15217"
},
{
"category": "external",
"summary": "RHEL-7582",
"url": "https://issues.redhat.com/browse/RHEL-7582"
},
{
"category": "external",
"summary": "RHEL-7583",
"url": "https://issues.redhat.com/browse/RHEL-7583"
},
{
"category": "external",
"summary": "RHEL-7669",
"url": "https://issues.redhat.com/browse/RHEL-7669"
},
{
"category": "external",
"summary": "RHEL-7672",
"url": "https://issues.redhat.com/browse/RHEL-7672"
},
{
"category": "external",
"summary": "RHEL-7697",
"url": "https://issues.redhat.com/browse/RHEL-7697"
},
{
"category": "external",
"summary": "RHEL-7698",
"url": "https://issues.redhat.com/browse/RHEL-7698"
},
{
"category": "external",
"summary": "RHEL-7700",
"url": "https://issues.redhat.com/browse/RHEL-7700"
},
{
"category": "external",
"summary": "RHEL-7703",
"url": "https://issues.redhat.com/browse/RHEL-7703"
},
{
"category": "external",
"summary": "RHEL-7719",
"url": "https://issues.redhat.com/browse/RHEL-7719"
},
{
"category": "external",
"summary": "RHEL-7724",
"url": "https://issues.redhat.com/browse/RHEL-7724"
},
{
"category": "external",
"summary": "RHEL-7725",
"url": "https://issues.redhat.com/browse/RHEL-7725"
},
{
"category": "external",
"summary": "RHEL-7730",
"url": "https://issues.redhat.com/browse/RHEL-7730"
},
{
"category": "external",
"summary": "RHEL-7738",
"url": "https://issues.redhat.com/browse/RHEL-7738"
},
{
"category": "external",
"summary": "RHEL-7739",
"url": "https://issues.redhat.com/browse/RHEL-7739"
},
{
"category": "external",
"summary": "RHEL-7740",
"url": "https://issues.redhat.com/browse/RHEL-7740"
},
{
"category": "external",
"summary": "RHEL-7744",
"url": "https://issues.redhat.com/browse/RHEL-7744"
},
{
"category": "external",
"summary": "RHEL-7746",
"url": "https://issues.redhat.com/browse/RHEL-7746"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2113.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2025-11-21T18:59:45+00:00",
"generator": {
"date": "2025-11-21T18:59:45+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:2113",
"initial_release_date": "2024-04-30T10:32:37+00:00",
"revision_history": [
{
"date": "2024-04-30T10:32:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-30T10:32:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:59:45+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HighAvailability (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::resilientstorage"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.7-2.el9_4.src",
"product": {
"name": "pcs-0:0.11.7-2.el9_4.src",
"product_id": "pcs-0:0.11.7-2.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.7-2.el9_4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.7-2.el9_4.aarch64",
"product": {
"name": "pcs-0:0.11.7-2.el9_4.aarch64",
"product_id": "pcs-0:0.11.7-2.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.7-2.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"product": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"product_id": "pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.7-2.el9_4?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.7-2.el9_4.ppc64le",
"product": {
"name": "pcs-0:0.11.7-2.el9_4.ppc64le",
"product_id": "pcs-0:0.11.7-2.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.7-2.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"product": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"product_id": "pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.7-2.el9_4?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.7-2.el9_4.x86_64",
"product": {
"name": "pcs-0:0.11.7-2.el9_4.x86_64",
"product_id": "pcs-0:0.11.7-2.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.7-2.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"product": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"product_id": "pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.7-2.el9_4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.7-2.el9_4.s390x",
"product": {
"name": "pcs-0:0.11.7-2.el9_4.s390x",
"product_id": "pcs-0:0.11.7-2.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.7-2.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.7-2.el9_4.s390x",
"product": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.s390x",
"product_id": "pcs-snmp-0:0.11.7-2.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.7-2.el9_4?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.aarch64",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.ppc64le",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.s390x as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.s390x",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.src as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.src",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.x86_64",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.s390x as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.s390x",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 9)",
"product_id": "HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"relates_to_product_reference": "HighAvailability-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.aarch64",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.ppc64le",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.s390x as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.s390x",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.src as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.src",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.7-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64"
},
"product_reference": "pcs-0:0.11.7-2.el9_4.x86_64",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.s390x as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.s390x",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.7-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 9)",
"product_id": "ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
},
"product_reference": "pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"relates_to_product_reference": "ResilientStorage-9.4.0.GA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T10:32:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2113"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T10:32:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2113"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T10:32:37+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2113"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"HighAvailability-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"HighAvailability-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.src",
"ResilientStorage-9.4.0.GA:pcs-0:0.11.7-2.el9_4.x86_64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.aarch64",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.ppc64le",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.s390x",
"ResilientStorage-9.4.0.GA:pcs-snmp-0:0.11.7-2.el9_4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024:1841
Vulnerability from csaf_redhat - Published: 2024-04-16 14:56 - Updated: 2025-11-21 18:58Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:1841",
"url": "https://access.redhat.com/errata/RHSA-2024:1841"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1841.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2025-11-21T18:58:51+00:00",
"generator": {
"date": "2025-11-21T18:58:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:1841",
"initial_release_date": "2024-04-16T14:56:06+00:00",
"revision_history": [
{
"date": "2024-04-16T14:56:06+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-16T14:56:06+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:58:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product": {
"name": "Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.0::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product": {
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.0::resilientstorage"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.1-10.el9_0.5.src",
"product": {
"name": "pcs-0:0.11.1-10.el9_0.5.src",
"product_id": "pcs-0:0.11.1-10.el9_0.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.1-10.el9_0.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.1-10.el9_0.5.ppc64le",
"product": {
"name": "pcs-0:0.11.1-10.el9_0.5.ppc64le",
"product_id": "pcs-0:0.11.1-10.el9_0.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.1-10.el9_0.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"product": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"product_id": "pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.1-10.el9_0.5?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.1-10.el9_0.5.x86_64",
"product": {
"name": "pcs-0:0.11.1-10.el9_0.5.x86_64",
"product_id": "pcs-0:0.11.1-10.el9_0.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.1-10.el9_0.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"product": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"product_id": "pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.1-10.el9_0.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.1-10.el9_0.5.s390x",
"product": {
"name": "pcs-0:0.11.1-10.el9_0.5.s390x",
"product_id": "pcs-0:0.11.1-10.el9_0.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.1-10.el9_0.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"product": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"product_id": "pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.1-10.el9_0.5?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.1-10.el9_0.5.aarch64",
"product": {
"name": "pcs-0:0.11.1-10.el9_0.5.aarch64",
"product_id": "pcs-0:0.11.1-10.el9_0.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.1-10.el9_0.5?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"product": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"product_id": "pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.1-10.el9_0.5?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.aarch64",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.ppc64le",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.s390x",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.src as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.src",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.x86_64",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.0)",
"product_id": "HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"relates_to_product_reference": "HighAvailability-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.aarch64",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.ppc64le",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.s390x",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.src as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.src",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.1-10.el9_0.5.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64"
},
"product_reference": "pcs-0:0.11.1-10.el9_0.5.x86_64",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.1-10.el9_0.5.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.0)",
"product_id": "ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"relates_to_product_reference": "ResilientStorage-9.0.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-16T14:56:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1841"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-16T14:56:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1841"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-16T14:56:06+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1841"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"HighAvailability-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"HighAvailability-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.src",
"ResilientStorage-9.0.0.Z.EUS:pcs-0:0.11.1-10.el9_0.5.x86_64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.aarch64",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.ppc64le",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.s390x",
"ResilientStorage-9.0.0.Z.EUS:pcs-snmp-0:0.11.1-10.el9_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024_2581
Vulnerability from csaf_redhat - Published: 2024-04-30 14:37 - Updated: 2024-12-16 18:30Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:2581",
"url": "https://access.redhat.com/errata/RHSA-2024:2581"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2581.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2024-12-16T18:30:00+00:00",
"generator": {
"date": "2024-12-16T18:30:00+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2024:2581",
"initial_release_date": "2024-04-30T14:37:16+00:00",
"revision_history": [
{
"date": "2024-04-30T14:37:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-30T14:37:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-16T18:30:00+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:8.8::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:8.8::resilientstorage"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.15-4.el8_8.2.src",
"product": {
"name": "pcs-0:0.10.15-4.el8_8.2.src",
"product_id": "pcs-0:0.10.15-4.el8_8.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.15-4.el8_8.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.15-4.el8_8.2.ppc64le",
"product": {
"name": "pcs-0:0.10.15-4.el8_8.2.ppc64le",
"product_id": "pcs-0:0.10.15-4.el8_8.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.15-4.el8_8.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"product": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"product_id": "pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.15-4.el8_8.2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.15-4.el8_8.2.x86_64",
"product": {
"name": "pcs-0:0.10.15-4.el8_8.2.x86_64",
"product_id": "pcs-0:0.10.15-4.el8_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.15-4.el8_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"product": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"product_id": "pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.15-4.el8_8.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.15-4.el8_8.2.s390x",
"product": {
"name": "pcs-0:0.10.15-4.el8_8.2.s390x",
"product_id": "pcs-0:0.10.15-4.el8_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.15-4.el8_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"product": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"product_id": "pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.15-4.el8_8.2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.15-4.el8_8.2.aarch64",
"product": {
"name": "pcs-0:0.10.15-4.el8_8.2.aarch64",
"product_id": "pcs-0:0.10.15-4.el8_8.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.15-4.el8_8.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"product": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"product_id": "pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.15-4.el8_8.2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.aarch64",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.ppc64le",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.s390x",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.src as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.src",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.x86_64",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.8.8)",
"product_id": "HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"relates_to_product_reference": "HighAvailability-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.aarch64",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.s390x",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.src as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.src",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.15-4.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64"
},
"product_reference": "pcs-0:0.10.15-4.el8_8.2.x86_64",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.15-4.el8_8.2.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.8.8)",
"product_id": "ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"relates_to_product_reference": "ResilientStorage-8.8.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T14:37:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2581"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T14:37:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2581"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T14:37:16+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2581"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"HighAvailability-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"HighAvailability-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.src",
"ResilientStorage-8.8.0.Z.EUS:pcs-0:0.10.15-4.el8_8.2.x86_64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.aarch64",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.ppc64le",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.s390x",
"ResilientStorage-8.8.0.Z.EUS:pcs-snmp-0:0.10.15-4.el8_8.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024_2007
Vulnerability from csaf_redhat - Published: 2024-04-23 16:29 - Updated: 2024-12-16 18:29Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:2007",
"url": "https://access.redhat.com/errata/RHSA-2024:2007"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2007.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2024-12-16T18:29:26+00:00",
"generator": {
"date": "2024-12-16T18:29:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2024:2007",
"initial_release_date": "2024-04-23T16:29:04+00:00",
"revision_history": [
{
"date": "2024-04-23T16:29:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-23T16:29:04+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-16T18:29:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux High Availability TUS (v. 8.2)",
"product": {
"name": "Red Hat Enterprise Linux High Availability TUS (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.TUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_tus:8.2::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux High Availability E4S (v. 8.2)",
"product": {
"name": "Red Hat Enterprise Linux High Availability E4S (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:8.2::highavailability"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.4-6.el8_2.5.src",
"product": {
"name": "pcs-0:0.10.4-6.el8_2.5.src",
"product_id": "pcs-0:0.10.4-6.el8_2.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.4-6.el8_2.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.4-6.el8_2.5.x86_64",
"product": {
"name": "pcs-0:0.10.4-6.el8_2.5.x86_64",
"product_id": "pcs-0:0.10.4-6.el8_2.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.4-6.el8_2.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"product": {
"name": "pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"product_id": "pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.4-6.el8_2.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.4-6.el8_2.5.ppc64le",
"product": {
"name": "pcs-0:0.10.4-6.el8_2.5.ppc64le",
"product_id": "pcs-0:0.10.4-6.el8_2.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.4-6.el8_2.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"product": {
"name": "pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"product_id": "pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.4-6.el8_2.5?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.4-6.el8_2.5.ppc64le as a component of Red Hat Enterprise Linux High Availability E4S (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le"
},
"product_reference": "pcs-0:0.10.4-6.el8_2.5.ppc64le",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.4-6.el8_2.5.src as a component of Red Hat Enterprise Linux High Availability E4S (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src"
},
"product_reference": "pcs-0:0.10.4-6.el8_2.5.src",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.4-6.el8_2.5.x86_64 as a component of Red Hat Enterprise Linux High Availability E4S (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64"
},
"product_reference": "pcs-0:0.10.4-6.el8_2.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le as a component of Red Hat Enterprise Linux High Availability E4S (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.4-6.el8_2.5.x86_64 as a component of Red Hat Enterprise Linux High Availability E4S (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.4-6.el8_2.5.src as a component of Red Hat Enterprise Linux High Availability TUS (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src"
},
"product_reference": "pcs-0:0.10.4-6.el8_2.5.src",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.4-6.el8_2.5.x86_64 as a component of Red Hat Enterprise Linux High Availability TUS (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64"
},
"product_reference": "pcs-0:0.10.4-6.el8_2.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.4-6.el8_2.5.x86_64 as a component of Red Hat Enterprise Linux High Availability TUS (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.TUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-23T16:29:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2007"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-23T16:29:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2007"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-23T16:29:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2007"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024_2584
Vulnerability from csaf_redhat - Published: 2024-04-30 14:52 - Updated: 2024-12-16 18:29Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:2584",
"url": "https://access.redhat.com/errata/RHSA-2024:2584"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2584.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2024-12-16T18:29:48+00:00",
"generator": {
"date": "2024-12-16T18:29:48+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2024:2584",
"initial_release_date": "2024-04-30T14:52:26+00:00",
"revision_history": [
{
"date": "2024-04-30T14:52:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-30T14:52:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-16T18:29:48+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HighAvailability TUS (v.8.4)",
"product": {
"name": "Red Hat Enterprise Linux HighAvailability TUS (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.TUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_tus:8.4::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
"product": {
"name": "Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:8.4::highavailability"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.8-1.el8_4.5.src",
"product": {
"name": "pcs-0:0.10.8-1.el8_4.5.src",
"product_id": "pcs-0:0.10.8-1.el8_4.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.8-1.el8_4.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.8-1.el8_4.5.x86_64",
"product": {
"name": "pcs-0:0.10.8-1.el8_4.5.x86_64",
"product_id": "pcs-0:0.10.8-1.el8_4.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.8-1.el8_4.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"product": {
"name": "pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"product_id": "pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.8-1.el8_4.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.8-1.el8_4.5.ppc64le",
"product": {
"name": "pcs-0:0.10.8-1.el8_4.5.ppc64le",
"product_id": "pcs-0:0.10.8-1.el8_4.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.8-1.el8_4.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"product": {
"name": "pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"product_id": "pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.8-1.el8_4.5?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.8-1.el8_4.5.ppc64le as a component of Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le"
},
"product_reference": "pcs-0:0.10.8-1.el8_4.5.ppc64le",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.8-1.el8_4.5.src as a component of Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src"
},
"product_reference": "pcs-0:0.10.8-1.el8_4.5.src",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.8-1.el8_4.5.x86_64 as a component of Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64"
},
"product_reference": "pcs-0:0.10.8-1.el8_4.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le as a component of Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.8-1.el8_4.5.x86_64 as a component of Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.8-1.el8_4.5.src as a component of Red Hat Enterprise Linux HighAvailability TUS (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src"
},
"product_reference": "pcs-0:0.10.8-1.el8_4.5.src",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.8-1.el8_4.5.x86_64 as a component of Red Hat Enterprise Linux HighAvailability TUS (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64"
},
"product_reference": "pcs-0:0.10.8-1.el8_4.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.8-1.el8_4.5.x86_64 as a component of Red Hat Enterprise Linux HighAvailability TUS (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.TUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T14:52:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2584"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T14:52:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2584"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T14:52:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2584"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024_2953
Vulnerability from csaf_redhat - Published: 2024-05-22 09:40 - Updated: 2024-12-16 18:30Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:2953",
"url": "https://access.redhat.com/errata/RHSA-2024:2953"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "RHEL-17280",
"url": "https://issues.redhat.com/browse/RHEL-17280"
},
{
"category": "external",
"summary": "RHEL-7584",
"url": "https://issues.redhat.com/browse/RHEL-7584"
},
{
"category": "external",
"summary": "RHEL-7668",
"url": "https://issues.redhat.com/browse/RHEL-7668"
},
{
"category": "external",
"summary": "RHEL-7729",
"url": "https://issues.redhat.com/browse/RHEL-7729"
},
{
"category": "external",
"summary": "RHEL-7731",
"url": "https://issues.redhat.com/browse/RHEL-7731"
},
{
"category": "external",
"summary": "RHEL-7732",
"url": "https://issues.redhat.com/browse/RHEL-7732"
},
{
"category": "external",
"summary": "RHEL-7741",
"url": "https://issues.redhat.com/browse/RHEL-7741"
},
{
"category": "external",
"summary": "RHEL-7742",
"url": "https://issues.redhat.com/browse/RHEL-7742"
},
{
"category": "external",
"summary": "RHEL-7743",
"url": "https://issues.redhat.com/browse/RHEL-7743"
},
{
"category": "external",
"summary": "RHEL-7745",
"url": "https://issues.redhat.com/browse/RHEL-7745"
},
{
"category": "external",
"summary": "RHEL-8467",
"url": "https://issues.redhat.com/browse/RHEL-8467"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2953.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2024-12-16T18:30:11+00:00",
"generator": {
"date": "2024-12-16T18:30:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2024:2953",
"initial_release_date": "2024-05-22T09:40:38+00:00",
"revision_history": [
{
"date": "2024-05-22T09:40:38+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-05-22T09:40:38+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-16T18:30:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HighAvailability (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::resilientstorage"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.18-2.el8_10.src",
"product": {
"name": "pcs-0:0.10.18-2.el8_10.src",
"product_id": "pcs-0:0.10.18-2.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.18-2.el8_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.18-2.el8_10.aarch64",
"product": {
"name": "pcs-0:0.10.18-2.el8_10.aarch64",
"product_id": "pcs-0:0.10.18-2.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.18-2.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"product": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"product_id": "pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.18-2.el8_10?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.18-2.el8_10.ppc64le",
"product": {
"name": "pcs-0:0.10.18-2.el8_10.ppc64le",
"product_id": "pcs-0:0.10.18-2.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.18-2.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"product": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"product_id": "pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.18-2.el8_10?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.18-2.el8_10.x86_64",
"product": {
"name": "pcs-0:0.10.18-2.el8_10.x86_64",
"product_id": "pcs-0:0.10.18-2.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.18-2.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"product": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"product_id": "pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.18-2.el8_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.18-2.el8_10.s390x",
"product": {
"name": "pcs-0:0.10.18-2.el8_10.s390x",
"product_id": "pcs-0:0.10.18-2.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.18-2.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.18-2.el8_10.s390x",
"product": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.s390x",
"product_id": "pcs-snmp-0:0.10.18-2.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.18-2.el8_10?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.aarch64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.aarch64",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.ppc64le as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.ppc64le",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.s390x as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.s390x",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.src as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.src",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.x86_64",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.aarch64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.ppc64le as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.s390x as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.s390x",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.aarch64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.aarch64",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.s390x as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.s390x",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.src as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.src",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.x86_64",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.aarch64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.s390x as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.s390x",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-22T09:40:38+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2953"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-22T09:40:38+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2953"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-22T09:40:38+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2953"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024:2953
Vulnerability from csaf_redhat - Published: 2024-05-22 09:40 - Updated: 2025-11-21 19:02Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:2953",
"url": "https://access.redhat.com/errata/RHSA-2024:2953"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "RHEL-17280",
"url": "https://issues.redhat.com/browse/RHEL-17280"
},
{
"category": "external",
"summary": "RHEL-7584",
"url": "https://issues.redhat.com/browse/RHEL-7584"
},
{
"category": "external",
"summary": "RHEL-7668",
"url": "https://issues.redhat.com/browse/RHEL-7668"
},
{
"category": "external",
"summary": "RHEL-7729",
"url": "https://issues.redhat.com/browse/RHEL-7729"
},
{
"category": "external",
"summary": "RHEL-7731",
"url": "https://issues.redhat.com/browse/RHEL-7731"
},
{
"category": "external",
"summary": "RHEL-7732",
"url": "https://issues.redhat.com/browse/RHEL-7732"
},
{
"category": "external",
"summary": "RHEL-7741",
"url": "https://issues.redhat.com/browse/RHEL-7741"
},
{
"category": "external",
"summary": "RHEL-7742",
"url": "https://issues.redhat.com/browse/RHEL-7742"
},
{
"category": "external",
"summary": "RHEL-7743",
"url": "https://issues.redhat.com/browse/RHEL-7743"
},
{
"category": "external",
"summary": "RHEL-7745",
"url": "https://issues.redhat.com/browse/RHEL-7745"
},
{
"category": "external",
"summary": "RHEL-8467",
"url": "https://issues.redhat.com/browse/RHEL-8467"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2953.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2025-11-21T19:02:07+00:00",
"generator": {
"date": "2025-11-21T19:02:07+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:2953",
"initial_release_date": "2024-05-22T09:40:38+00:00",
"revision_history": [
{
"date": "2024-05-22T09:40:38+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-05-22T09:40:38+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T19:02:07+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HighAvailability (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::resilientstorage"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.18-2.el8_10.src",
"product": {
"name": "pcs-0:0.10.18-2.el8_10.src",
"product_id": "pcs-0:0.10.18-2.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.18-2.el8_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.18-2.el8_10.aarch64",
"product": {
"name": "pcs-0:0.10.18-2.el8_10.aarch64",
"product_id": "pcs-0:0.10.18-2.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.18-2.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"product": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"product_id": "pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.18-2.el8_10?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.18-2.el8_10.ppc64le",
"product": {
"name": "pcs-0:0.10.18-2.el8_10.ppc64le",
"product_id": "pcs-0:0.10.18-2.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.18-2.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"product": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"product_id": "pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.18-2.el8_10?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.18-2.el8_10.x86_64",
"product": {
"name": "pcs-0:0.10.18-2.el8_10.x86_64",
"product_id": "pcs-0:0.10.18-2.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.18-2.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"product": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"product_id": "pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.18-2.el8_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.18-2.el8_10.s390x",
"product": {
"name": "pcs-0:0.10.18-2.el8_10.s390x",
"product_id": "pcs-0:0.10.18-2.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.18-2.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.18-2.el8_10.s390x",
"product": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.s390x",
"product_id": "pcs-snmp-0:0.10.18-2.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.18-2.el8_10?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.aarch64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.aarch64",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.ppc64le as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.ppc64le",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.s390x as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.s390x",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.src as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.src",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.x86_64",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.aarch64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.ppc64le as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.s390x as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.s390x",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"relates_to_product_reference": "HighAvailability-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.aarch64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.aarch64",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.s390x as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.s390x",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.src as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.src",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.18-2.el8_10.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64"
},
"product_reference": "pcs-0:0.10.18-2.el8_10.x86_64",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.aarch64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.s390x as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.s390x",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.18-2.el8_10.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"relates_to_product_reference": "ResilientStorage-8.10.0.GA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-22T09:40:38+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2953"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-22T09:40:38+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2953"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-22T09:40:38+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2953"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"HighAvailability-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"HighAvailability-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.src",
"ResilientStorage-8.10.0.GA:pcs-0:0.10.18-2.el8_10.x86_64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.aarch64",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.ppc64le",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.s390x",
"ResilientStorage-8.10.0.GA:pcs-snmp-0:0.10.18-2.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024_1846
Vulnerability from csaf_redhat - Published: 2024-04-16 15:26 - Updated: 2024-12-16 18:29Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:1846",
"url": "https://access.redhat.com/errata/RHSA-2024:1846"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1846.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2024-12-16T18:29:16+00:00",
"generator": {
"date": "2024-12-16T18:29:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2024:1846",
"initial_release_date": "2024-04-16T15:26:07+00:00",
"revision_history": [
{
"date": "2024-04-16T15:26:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-16T15:26:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-16T18:29:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.2::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.2::resilientstorage"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.4-7.el9_2.1.src",
"product": {
"name": "pcs-0:0.11.4-7.el9_2.1.src",
"product_id": "pcs-0:0.11.4-7.el9_2.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.4-7.el9_2.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.4-7.el9_2.1.aarch64",
"product": {
"name": "pcs-0:0.11.4-7.el9_2.1.aarch64",
"product_id": "pcs-0:0.11.4-7.el9_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.4-7.el9_2.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"product": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"product_id": "pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.4-7.el9_2.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.4-7.el9_2.1.ppc64le",
"product": {
"name": "pcs-0:0.11.4-7.el9_2.1.ppc64le",
"product_id": "pcs-0:0.11.4-7.el9_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.4-7.el9_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"product": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"product_id": "pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.4-7.el9_2.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.4-7.el9_2.1.x86_64",
"product": {
"name": "pcs-0:0.11.4-7.el9_2.1.x86_64",
"product_id": "pcs-0:0.11.4-7.el9_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.4-7.el9_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"product": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"product_id": "pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.4-7.el9_2.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.11.4-7.el9_2.1.s390x",
"product": {
"name": "pcs-0:0.11.4-7.el9_2.1.s390x",
"product_id": "pcs-0:0.11.4-7.el9_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.11.4-7.el9_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"product": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"product_id": "pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.11.4-7.el9_2.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.aarch64",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.ppc64le",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.s390x",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.src as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.src",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.x86_64",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.aarch64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.x86_64 as a component of Red Hat Enterprise Linux High Availability EUS (v.9.2)",
"product_id": "HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"relates_to_product_reference": "HighAvailability-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.aarch64",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.ppc64le",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.s390x",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.src as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.src",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.11.4-7.el9_2.1.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64"
},
"product_reference": "pcs-0:0.11.4-7.el9_2.1.x86_64",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.aarch64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.s390x as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.11.4-7.el9_2.1.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)",
"product_id": "ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
},
"product_reference": "pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"relates_to_product_reference": "ResilientStorage-9.2.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-16T15:26:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1846"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-16T15:26:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1846"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-16T15:26:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1846"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"HighAvailability-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"HighAvailability-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.src",
"ResilientStorage-9.2.0.Z.EUS:pcs-0:0.11.4-7.el9_2.1.x86_64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.aarch64",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.ppc64le",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.s390x",
"ResilientStorage-9.2.0.Z.EUS:pcs-snmp-0:0.11.4-7.el9_2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024:2007
Vulnerability from csaf_redhat - Published: 2024-04-23 16:29 - Updated: 2025-11-21 18:59Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:2007",
"url": "https://access.redhat.com/errata/RHSA-2024:2007"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2007.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2025-11-21T18:59:25+00:00",
"generator": {
"date": "2025-11-21T18:59:25+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:2007",
"initial_release_date": "2024-04-23T16:29:04+00:00",
"revision_history": [
{
"date": "2024-04-23T16:29:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-23T16:29:04+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:59:25+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux High Availability TUS (v. 8.2)",
"product": {
"name": "Red Hat Enterprise Linux High Availability TUS (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.TUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_tus:8.2::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux High Availability E4S (v. 8.2)",
"product": {
"name": "Red Hat Enterprise Linux High Availability E4S (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:8.2::highavailability"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.4-6.el8_2.5.src",
"product": {
"name": "pcs-0:0.10.4-6.el8_2.5.src",
"product_id": "pcs-0:0.10.4-6.el8_2.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.4-6.el8_2.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.4-6.el8_2.5.x86_64",
"product": {
"name": "pcs-0:0.10.4-6.el8_2.5.x86_64",
"product_id": "pcs-0:0.10.4-6.el8_2.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.4-6.el8_2.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"product": {
"name": "pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"product_id": "pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.4-6.el8_2.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.4-6.el8_2.5.ppc64le",
"product": {
"name": "pcs-0:0.10.4-6.el8_2.5.ppc64le",
"product_id": "pcs-0:0.10.4-6.el8_2.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.4-6.el8_2.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"product": {
"name": "pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"product_id": "pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.4-6.el8_2.5?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.4-6.el8_2.5.ppc64le as a component of Red Hat Enterprise Linux High Availability E4S (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le"
},
"product_reference": "pcs-0:0.10.4-6.el8_2.5.ppc64le",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.4-6.el8_2.5.src as a component of Red Hat Enterprise Linux High Availability E4S (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src"
},
"product_reference": "pcs-0:0.10.4-6.el8_2.5.src",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.4-6.el8_2.5.x86_64 as a component of Red Hat Enterprise Linux High Availability E4S (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64"
},
"product_reference": "pcs-0:0.10.4-6.el8_2.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le as a component of Red Hat Enterprise Linux High Availability E4S (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.4-6.el8_2.5.x86_64 as a component of Red Hat Enterprise Linux High Availability E4S (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.4-6.el8_2.5.src as a component of Red Hat Enterprise Linux High Availability TUS (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src"
},
"product_reference": "pcs-0:0.10.4-6.el8_2.5.src",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.4-6.el8_2.5.x86_64 as a component of Red Hat Enterprise Linux High Availability TUS (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64"
},
"product_reference": "pcs-0:0.10.4-6.el8_2.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.4-6.el8_2.5.x86_64 as a component of Red Hat Enterprise Linux High Availability TUS (v. 8.2)",
"product_id": "HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.2.0.Z.TUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-23T16:29:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2007"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-23T16:29:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2007"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-23T16:29:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2007"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.E4S:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.ppc64le",
"HighAvailability-8.2.0.Z.E4S:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.src",
"HighAvailability-8.2.0.Z.TUS:pcs-0:0.10.4-6.el8_2.5.x86_64",
"HighAvailability-8.2.0.Z.TUS:pcs-snmp-0:0.10.4-6.el8_2.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024:2584
Vulnerability from csaf_redhat - Published: 2024-04-30 14:52 - Updated: 2025-11-21 19:00Summary
Red Hat Security Advisory: pcs security update
Notes
Topic
An update for pcs is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.
Security Fix(es):
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for pcs is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:2584",
"url": "https://access.redhat.com/errata/RHSA-2024:2584"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2584.json"
}
],
"title": "Red Hat Security Advisory: pcs security update",
"tracking": {
"current_release_date": "2025-11-21T19:00:23+00:00",
"generator": {
"date": "2025-11-21T19:00:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:2584",
"initial_release_date": "2024-04-30T14:52:26+00:00",
"revision_history": [
{
"date": "2024-04-30T14:52:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-30T14:52:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T19:00:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HighAvailability TUS (v.8.4)",
"product": {
"name": "Red Hat Enterprise Linux HighAvailability TUS (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.TUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_tus:8.4::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
"product": {
"name": "Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:8.4::highavailability"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.8-1.el8_4.5.src",
"product": {
"name": "pcs-0:0.10.8-1.el8_4.5.src",
"product_id": "pcs-0:0.10.8-1.el8_4.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.8-1.el8_4.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.8-1.el8_4.5.x86_64",
"product": {
"name": "pcs-0:0.10.8-1.el8_4.5.x86_64",
"product_id": "pcs-0:0.10.8-1.el8_4.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.8-1.el8_4.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"product": {
"name": "pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"product_id": "pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.8-1.el8_4.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "pcs-0:0.10.8-1.el8_4.5.ppc64le",
"product": {
"name": "pcs-0:0.10.8-1.el8_4.5.ppc64le",
"product_id": "pcs-0:0.10.8-1.el8_4.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs@0.10.8-1.el8_4.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"product": {
"name": "pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"product_id": "pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pcs-snmp@0.10.8-1.el8_4.5?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.8-1.el8_4.5.ppc64le as a component of Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le"
},
"product_reference": "pcs-0:0.10.8-1.el8_4.5.ppc64le",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.8-1.el8_4.5.src as a component of Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src"
},
"product_reference": "pcs-0:0.10.8-1.el8_4.5.src",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.8-1.el8_4.5.x86_64 as a component of Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64"
},
"product_reference": "pcs-0:0.10.8-1.el8_4.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le as a component of Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le"
},
"product_reference": "pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.8-1.el8_4.5.x86_64 as a component of Red Hat Enterprise Linux HighAvailability E4S (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.8-1.el8_4.5.src as a component of Red Hat Enterprise Linux HighAvailability TUS (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src"
},
"product_reference": "pcs-0:0.10.8-1.el8_4.5.src",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-0:0.10.8-1.el8_4.5.x86_64 as a component of Red Hat Enterprise Linux HighAvailability TUS (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64"
},
"product_reference": "pcs-0:0.10.8-1.el8_4.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pcs-snmp-0:0.10.8-1.el8_4.5.x86_64 as a component of Red Hat Enterprise Linux HighAvailability TUS (v.8.4)",
"product_id": "HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
},
"product_reference": "pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"relates_to_product_reference": "HighAvailability-8.4.0.Z.TUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T14:52:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2584"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T14:52:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2584"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T14:52:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2584"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.E4S:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.ppc64le",
"HighAvailability-8.4.0.Z.E4S:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.src",
"HighAvailability-8.4.0.Z.TUS:pcs-0:0.10.8-1.el8_4.5.x86_64",
"HighAvailability-8.4.0.Z.TUS:pcs-snmp-0:0.10.8-1.el8_4.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
RHSA-2024:10806
Vulnerability from csaf_redhat - Published: 2024-12-04 20:43 - Updated: 2025-11-21 18:55Summary
Red Hat Security Advisory: Satellite 6.15.5 Async Update
Notes
Topic
An update is now available for Red Hat Satellite 6.15 for RHEL 8.
Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.
Details
Red Hat Satellite is a system management solution that allows organizations
to configure and maintain their systems without the necessity to provide
public Internet access to their servers or other client systems. It
performs provisioning and configuration management of predefined standard
operating environments.
Security Fix(es):
* rubygem-activestorage: Possible Sensitive Session Information Leak in Active Storage (CVE-2024-26144)
* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
* python-ecdsa: vulnerable to the Minerva attack (CVE-2024-23342)
Users of Red Hat Satellite are advised to upgrade to these updated
packages, which fix these bugs.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat Satellite 6.15 for RHEL 8.\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Satellite is a system management solution that allows organizations\nto configure and maintain their systems without the necessity to provide\npublic Internet access to their servers or other client systems. It\nperforms provisioning and configuration management of predefined standard\noperating environments.\n\nSecurity Fix(es):\n\n* rubygem-activestorage: Possible Sensitive Session Information Leak in Active Storage (CVE-2024-26144)\n* rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)\n* rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)\n* rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)\n* python-ecdsa: vulnerable to the Minerva attack (CVE-2024-23342)\n\nUsers of Red Hat Satellite are advised to upgrade to these updated\npackages, which fix these bugs.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:10806",
"url": "https://access.redhat.com/errata/RHSA-2024:10806"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index"
},
{
"category": "external",
"summary": "2259780",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259780"
},
{
"category": "external",
"summary": "2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "2266063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2266063"
},
{
"category": "external",
"summary": "SAT-28466",
"url": "https://issues.redhat.com/browse/SAT-28466"
},
{
"category": "external",
"summary": "SAT-28665",
"url": "https://issues.redhat.com/browse/SAT-28665"
},
{
"category": "external",
"summary": "SAT-28689",
"url": "https://issues.redhat.com/browse/SAT-28689"
},
{
"category": "external",
"summary": "SAT-28690",
"url": "https://issues.redhat.com/browse/SAT-28690"
},
{
"category": "external",
"summary": "SAT-28691",
"url": "https://issues.redhat.com/browse/SAT-28691"
},
{
"category": "external",
"summary": "SAT-28693",
"url": "https://issues.redhat.com/browse/SAT-28693"
},
{
"category": "external",
"summary": "SAT-28695",
"url": "https://issues.redhat.com/browse/SAT-28695"
},
{
"category": "external",
"summary": "SAT-28696",
"url": "https://issues.redhat.com/browse/SAT-28696"
},
{
"category": "external",
"summary": "SAT-28697",
"url": "https://issues.redhat.com/browse/SAT-28697"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10806.json"
}
],
"title": "Red Hat Security Advisory: Satellite 6.15.5 Async Update",
"tracking": {
"current_release_date": "2025-11-21T18:55:23+00:00",
"generator": {
"date": "2025-11-21T18:55:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2024:10806",
"initial_release_date": "2024-12-04T20:43:54+00:00",
"revision_history": [
{
"date": "2024-12-04T20:43:54+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-12-04T20:43:54+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:55:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product": {
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.15::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product": {
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.15::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product": {
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_utils:6.15::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-installer-1:3.9.3.7-1.el8sat.src",
"product": {
"name": "foreman-installer-1:3.9.3.7-1.el8sat.src",
"product_id": "foreman-installer-1:3.9.3.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.9.3.7-1.el8sat?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"product": {
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"product_id": "pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pulpcore-obsolete-packages@1.0-10.el8pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppetserver-0:7.17.2-1.el8sat.src",
"product": {
"name": "puppetserver-0:7.17.2-1.el8sat.src",
"product_id": "puppetserver-0:7.17.2-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppetserver@7.17.2-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pulp-container-0:2.16.9-2.el8pc.src",
"product": {
"name": "python-pulp-container-0:2.16.9-2.el8pc.src",
"product_id": "python-pulp-container-0:2.16.9-2.el8pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulp-container@2.16.9-2.el8pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actioncable@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionmailbox@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionmailer@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionpack@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actiontext@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionview@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activejob@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activemodel@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activerecord@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activestorage@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activesupport@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"product": {
"name": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"product_id": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@9.0.59-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.src",
"product": {
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.src",
"product_id": "rubygem-rack-0:2.2.8.1-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rack@2.2.8.1-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-rails-0:6.1.7.7-1.el8sat.src",
"product": {
"name": "rubygem-rails-0:6.1.7.7-1.el8sat.src",
"product_id": "rubygem-rails-0:6.1.7.7-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rails@6.1.7.7-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-railties-0:6.1.7.7-2.el8sat.src",
"product": {
"name": "rubygem-railties-0:6.1.7.7-2.el8sat.src",
"product_id": "rubygem-railties-0:6.1.7.7-2.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-railties@6.1.7.7-2.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"product": {
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"product_id": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-smart_proxy_ansible@3.5.6-0.1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.15.5-1.el8sat.src",
"product": {
"name": "satellite-0:6.15.5-1.el8sat.src",
"product_id": "satellite-0:6.15.5-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.15.5-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "foreman-0:3.9.1.12-1.el8sat.src",
"product": {
"name": "foreman-0:3.9.1.12-1.el8sat.src",
"product_id": "foreman-0:3.9.1.12-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.9.1.12-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.11.0.19-1.el8sat.src",
"product": {
"name": "rubygem-katello-0:4.11.0.19-1.el8sat.src",
"product_id": "rubygem-katello-0:4.11.0.19-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.11.0.19-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"product": {
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"product_id": "foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-fapolicyd@1.0.1-3.el8sat?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"product": {
"name": "foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"product_id": "foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.9.3.7-1.el8sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"product": {
"name": "foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"product_id": "foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer-katello@3.9.3.7-1.el8sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"product": {
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"product_id": "pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pulpcore-obsolete-packages@1.0-10.el8pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppetserver-0:7.17.2-1.el8sat.noarch",
"product": {
"name": "puppetserver-0:7.17.2-1.el8sat.noarch",
"product_id": "puppetserver-0:7.17.2-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppetserver@7.17.2-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"product": {
"name": "python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"product_id": "python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-pulp-container@2.16.9-2.el8pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actioncable@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionmailbox@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionmailer@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionpack@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actiontext@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-actionview@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activejob@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activemodel@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activerecord@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activestorage@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-activesupport@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"product": {
"name": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"product_id": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@9.0.59-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"product": {
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"product_id": "rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rack@2.2.8.1-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"product": {
"name": "rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"product_id": "rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rails@6.1.7.7-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"product": {
"name": "rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"product_id": "rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-railties@6.1.7.7-2.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"product": {
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"product_id": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-smart_proxy_ansible@3.5.6-0.1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.15.5-1.el8sat.noarch",
"product": {
"name": "satellite-0:6.15.5-1.el8sat.noarch",
"product_id": "satellite-0:6.15.5-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.15.5-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-cli-0:6.15.5-1.el8sat.noarch",
"product": {
"name": "satellite-cli-0:6.15.5-1.el8sat.noarch",
"product_id": "satellite-cli-0:6.15.5-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-cli@6.15.5-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-common-0:6.15.5-1.el8sat.noarch",
"product": {
"name": "satellite-common-0:6.15.5-1.el8sat.noarch",
"product_id": "satellite-common-0:6.15.5-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-common@6.15.5-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-capsule-0:6.15.5-1.el8sat.noarch",
"product": {
"name": "satellite-capsule-0:6.15.5-1.el8sat.noarch",
"product_id": "satellite-capsule-0:6.15.5-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-capsule@6.15.5-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-cli@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-debug@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-dynflow-sidekiq@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ec2@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-journald@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-libvirt@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-openstack@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ovirt@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-pcp@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-postgresql@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-redis@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-service-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-service-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-service-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-service@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-telemetry@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"product": {
"name": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"product_id": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-vmware@3.9.1.12-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"product": {
"name": "rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"product_id": "rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.11.0.19-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"product": {
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"product_id": "foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-fapolicyd@1.0.1-3.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"product": {
"name": "foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"product_id": "foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-proxy-fapolicyd@1.0.1-3.el8sat?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.12-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src"
},
"product_reference": "foreman-0:3.9.1.12-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch"
},
"product_reference": "foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src"
},
"product_reference": "foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.9.3.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch"
},
"product_reference": "foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.9.3.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src"
},
"product_reference": "foreman-installer-1:3.9.3.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch"
},
"product_reference": "foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-service-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch"
},
"product_reference": "pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src"
},
"product_reference": "pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppetserver-0:7.17.2-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch"
},
"product_reference": "puppetserver-0:7.17.2-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppetserver-0:7.17.2-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src"
},
"product_reference": "puppetserver-0:7.17.2-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-container-0:2.16.9-2.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src"
},
"product_reference": "python-pulp-container-0:2.16.9-2.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pulp-container-0:2.16.9-2.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch"
},
"product_reference": "python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch"
},
"product_reference": "rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src"
},
"product_reference": "rubygem-rack-0:2.2.8.1-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch"
},
"product_reference": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src"
},
"product_reference": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.5-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src"
},
"product_reference": "satellite-0:6.15.5-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-capsule-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-cli-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-common-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.12-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src"
},
"product_reference": "foreman-0:3.9.1.12-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-service-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.5-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src"
},
"product_reference": "satellite-0:6.15.5-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-capsule-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-cli-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-common-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.12-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src"
},
"product_reference": "foreman-0:3.9.1.12-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch"
},
"product_reference": "foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-fapolicyd-0:1.0.1-3.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src"
},
"product_reference": "foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.9.3.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch"
},
"product_reference": "foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.9.3.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src"
},
"product_reference": "foreman-installer-1:3.9.3.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch"
},
"product_reference": "foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-service-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch"
},
"product_reference": "foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch"
},
"product_reference": "pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulpcore-obsolete-packages-0:1.0-10.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src"
},
"product_reference": "pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppetserver-0:7.17.2-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch"
},
"product_reference": "puppetserver-0:7.17.2-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppetserver-0:7.17.2-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src"
},
"product_reference": "puppetserver-0:7.17.2-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-container-0:2.16.9-2.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src"
},
"product_reference": "python-pulp-container-0:2.16.9-2.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pulp-container-0:2.16.9-2.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch"
},
"product_reference": "python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actioncable-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionpack-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actiontext-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionview-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-actionview-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activejob-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activejob-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activemodel-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activerecord-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activestorage-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-activesupport-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch"
},
"product_reference": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src"
},
"product_reference": "rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.11.0.19-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch"
},
"product_reference": "rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.11.0.19-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src"
},
"product_reference": "rubygem-katello-0:4.11.0.19-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch"
},
"product_reference": "rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rack-0:2.2.8.1-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src"
},
"product_reference": "rubygem-rack-0:2.2.8.1-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rails-0:6.1.7.7-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch"
},
"product_reference": "rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rails-0:6.1.7.7-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src"
},
"product_reference": "rubygem-rails-0:6.1.7.7-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-railties-0:6.1.7.7-2.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch"
},
"product_reference": "rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-railties-0:6.1.7.7-2.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src"
},
"product_reference": "rubygem-railties-0:6.1.7.7-2.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch"
},
"product_reference": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src"
},
"product_reference": "rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.5-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src"
},
"product_reference": "satellite-0:6.15.5-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-capsule-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-cli-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.15.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
},
"product_reference": "satellite-common-0:6.15.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-23342",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2024-01-23T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2259780"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `ecdsa` PyPI package, a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior may be vulnerable to the Minerva attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-ecdsa: vulnerable to the Minerva attack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Some of the offerings such as Quay do not rely on python-ecdsa, therefore the impact is minimal or non-existing for these products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch"
],
"known_not_affected": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-23342"
},
{
"category": "external",
"summary": "RHBZ#2259780",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259780"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-23342",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-23342"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-23342",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23342"
},
{
"category": "external",
"summary": "https://github.com/tlsfuzzer/python-ecdsa/blob/master/SECURITY.md",
"url": "https://github.com/tlsfuzzer/python-ecdsa/blob/master/SECURITY.md"
},
{
"category": "external",
"summary": "https://github.com/tlsfuzzer/python-ecdsa/security/advisories/GHSA-wj6h-64fc-37mp",
"url": "https://github.com/tlsfuzzer/python-ecdsa/security/advisories/GHSA-wj6h-64fc-37mp"
},
{
"category": "external",
"summary": "https://minerva.crocs.fi.muni.cz/",
"url": "https://minerva.crocs.fi.muni.cz/"
},
{
"category": "external",
"summary": "https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/",
"url": "https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/"
}
],
"release_date": "2024-01-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-12-04T20:43:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"product_ids": [
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:10806"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python-ecdsa: vulnerable to the Minerva attack"
},
{
"cve": "CVE-2024-25126",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265593"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Content-Type. Carefully crafted content type headers can cause Rack\u2019s media type parser to take much longer than expected, leading to a possible denial of service vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src"
],
"known_not_affected": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "RHBZ#2265593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25126"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-12-04T20:43:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"product_ids": [
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:10806"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing"
},
{
"cve": "CVE-2024-26141",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265594"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Range Header. Carefully crafted range headers can cause a server to respond with an unexpectedly large response. Responding with large responses could lead to a denial of service issue.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as a Moderate impact as this requires a specifically crafted response.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src"
],
"known_not_affected": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "RHBZ#2265594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26141"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-12-04T20:43:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"product_ids": [
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:10806"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible DoS Vulnerability with Range Header in Rack"
},
{
"cve": "CVE-2024-26144",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2024-02-26T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2266063"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Active Storage that may lead to a sensitive session information leak. By default, Active Storage sends a `Set-Cookie` header along with the user\u2019s session cookie when serving blobs and sets `Cache-Control` to public. Certain proxies may cache `Set-Cookie`, leading to an information leak.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-activestorage: Possible Sensitive Session Information Leak in Active Storage",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src"
],
"known_not_affected": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26144"
},
{
"category": "external",
"summary": "RHBZ#2266063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2266063"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26144",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26144"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26144",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26144"
},
{
"category": "external",
"summary": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activestorage/CVE-2024-26144.yml",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activestorage/CVE-2024-26144.yml"
}
],
"release_date": "2024-02-25T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-12-04T20:43:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"product_ids": [
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:10806"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-activestorage: Possible Sensitive Session Information Leak in Active Storage"
},
{
"cve": "CVE-2024-26146",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2024-02-22T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265595"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service (DoS) vulnerability was found in rubygem-rack in how it parses Rack Header. Carefully crafted headers can cause header parsing in Rack to take longer than expected, resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src"
],
"known_not_affected": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "RHBZ#2265595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"category": "external",
"summary": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
}
],
"release_date": "2024-02-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-12-04T20:43:54+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"product_ids": [
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:10806"
},
{
"category": "workaround",
"details": "No mitigation is currently available for this vulnerability. The recommendation is to perform updates as soon as they are available.",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15-capsule:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15-capsule:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15-capsule:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.12-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-fapolicyd-0:1.0.1-3.el8sat.src",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.7-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.7-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-proxy-fapolicyd-0:1.0.1-3.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.12-1.el8sat.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.noarch",
"8Base-satellite-6.15:pulpcore-obsolete-packages-0:1.0-10.el8pc.src",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.noarch",
"8Base-satellite-6.15:puppetserver-0:7.17.2-1.el8sat.src",
"8Base-satellite-6.15:python-pulp-container-0:2.16.9-2.el8pc.src",
"8Base-satellite-6.15:python3.11-pulp-container-0:2.16.9-2.el8pc.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actioncable-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailbox-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionmailer-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionpack-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actiontext-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-actionview-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activejob-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activemodel-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activerecord-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activestorage-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-activesupport-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.59-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.19-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rack-0:2.2.8.1-1.el8sat.src",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-rails-0:6.1.7.7-1.el8sat.src",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.noarch",
"8Base-satellite-6.15:rubygem-railties-0:6.1.7.7-2.el8sat.src",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-smart_proxy_ansible-0:3.5.6-0.1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.5-1.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.5-1.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.5-1.el8sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing"
}
]
}
GHSA-54RR-7FVW-6X8F
Vulnerability from github – Published: 2024-02-28 22:57 – Updated: 2024-02-29 02:30
VLAI?
Summary
Rack Header Parsing leads to Possible Denial of Service Vulnerability
Details
Possible Denial of Service Vulnerability in Rack Header Parsing
There is a possible denial of service vulnerability in the header parsing routines in Rack. This vulnerability has been assigned the CVE identifier CVE-2024-26146.
Versions Affected: All. Not affected: None Fixed Versions: 2.0.9.4, 2.1.4.4, 2.2.8.1, 3.0.9.1
Impact
Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted.
Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected.
Releases
The fixed releases are available at the normal locations.
Workarounds
There are no feasible workarounds for this issue.
Patches
To aid users who aren't able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.
- 2-0-header-redos.patch - Patch for 2.0 series
- 2-1-header-redos.patch - Patch for 2.1 series
- 2-2-header-redos.patch - Patch for 2.2 series
- 3-0-header-redos.patch - Patch for 3.0 series
Credits
Thanks to svalkanov for reporting this and providing patches!
{
"affected": [
{
"package": {
"ecosystem": "RubyGems",
"name": "rack"
},
"ranges": [
{
"events": [
{
"introduced": "3.0.0"
},
{
"fixed": "3.0.9.1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "RubyGems",
"name": "rack"
},
"ranges": [
{
"events": [
{
"introduced": "2.2.0"
},
{
"fixed": "2.2.8.1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "RubyGems",
"name": "rack"
},
"ranges": [
{
"events": [
{
"introduced": "2.1.0"
},
{
"fixed": "2.1.4.4"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "RubyGems",
"name": "rack"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.9.4"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2024-26146"
],
"database_specific": {
"cwe_ids": [
"CWE-1333"
],
"github_reviewed": true,
"github_reviewed_at": "2024-02-28T22:57:03Z",
"nvd_published_at": "2024-02-29T00:15:51Z",
"severity": "LOW"
},
"details": "# Possible Denial of Service Vulnerability in Rack Header Parsing\n\nThere is a possible denial of service vulnerability in the header parsing\nroutines in Rack. This vulnerability has been assigned the CVE identifier\nCVE-2024-26146.\n\nVersions Affected: All.\nNot affected: None\nFixed Versions: 2.0.9.4, 2.1.4.4, 2.2.8.1, 3.0.9.1\n\nImpact\n------\nCarefully crafted headers can cause header parsing in Rack to take longer than\nexpected resulting in a possible denial of service issue. Accept and Forwarded\nheaders are impacted.\n\nRuby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2\nor newer are unaffected.\n\nReleases\n--------\nThe fixed releases are available at the normal locations.\n\nWorkarounds\n-----------\nThere are no feasible workarounds for this issue.\n\nPatches\n-------\nTo aid users who aren\u0027t able to upgrade immediately we have provided patches for\nthe two supported release series. They are in git-am format and consist of a\nsingle changeset.\n\n* 2-0-header-redos.patch - Patch for 2.0 series\n* 2-1-header-redos.patch - Patch for 2.1 series\n* 2-2-header-redos.patch - Patch for 2.2 series\n* 3-0-header-redos.patch - Patch for 3.0 series\n\nCredits\n-------\n\nThanks to [svalkanov](https://hackerone.com/svalkanov) for reporting this and\nproviding patches!",
"id": "GHSA-54rr-7fvw-6x8f",
"modified": "2024-02-29T02:30:57Z",
"published": "2024-02-28T22:57:03Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26146"
},
{
"type": "WEB",
"url": "https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716"
},
{
"type": "WEB",
"url": "https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582"
},
{
"type": "WEB",
"url": "https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f"
},
{
"type": "WEB",
"url": "https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd"
},
{
"type": "WEB",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
},
{
"type": "PACKAGE",
"url": "https://github.com/rack/rack"
},
{
"type": "WEB",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml"
}
],
"schema_version": "1.4.0",
"severity": [],
"summary": "Rack Header Parsing leads to Possible Denial of Service Vulnerability"
}
FKIE_CVE-2024-26146
Vulnerability from fkie_nvd - Published: 2024-02-29 00:15 - Updated: 2025-02-14 15:51
Severity ?
5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.
References
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
"matchCriteriaId": "8C61CB94-A5BE-4B72-B243-F935A4652B0B",
"versionEndExcluding": "2.0.9.4",
"versionStartIncluding": "0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
"matchCriteriaId": "B5402B9E-EE8A-41A3-87CB-E17C57E5F692",
"versionEndExcluding": "2.1.4.4",
"versionStartIncluding": "2.1.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rack:rack:*:*:*:*:*:ruby:*:*",
"matchCriteriaId": "4F7D6529-12DB-4466-A0AB-DED4653D3E0B",
"versionEndExcluding": "2.2.8.1",
"versionStartIncluding": "2.2.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1."
},
{
"lang": "es",
"value": "Rack es una interfaz modular de servidor web Ruby. Los encabezados cuidadosamente elaborados pueden hacer que el an\u00e1lisis de encabezados en Rack demore m\u00e1s de lo esperado, lo que resulta en un posible problema de denegaci\u00f3n de servicio. Los encabezados Aceptar y Reenviar se ven afectados. Ruby 3.2 tiene mitigaciones para este problema, por lo que las aplicaciones Rack que usan Ruby 3.2 o posterior no se ven afectadas. Esta vulnerabilidad se solucion\u00f3 en 2.0.9.4, 2.1.4.4, 2.2.8.1 y 3.0.9.1."
}
],
"id": "CVE-2024-26146",
"lastModified": "2025-02-14T15:51:42.200",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4,
"source": "security-advisories@github.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2024-02-29T00:15:51.597",
"references": [
{
"source": "security-advisories@github.com",
"tags": [
"Vendor Advisory"
],
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
},
{
"source": "security-advisories@github.com",
"tags": [
"Patch"
],
"url": "https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716"
},
{
"source": "security-advisories@github.com",
"tags": [
"Patch"
],
"url": "https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582"
},
{
"source": "security-advisories@github.com",
"tags": [
"Patch"
],
"url": "https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f"
},
{
"source": "security-advisories@github.com",
"tags": [
"Patch"
],
"url": "https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd"
},
{
"source": "security-advisories@github.com",
"tags": [
"Vendor Advisory"
],
"url": "https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f"
},
{
"source": "security-advisories@github.com",
"tags": [
"Third Party Advisory"
],
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml"
},
{
"source": "security-advisories@github.com",
"tags": [
"Mailing List"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html"
},
{
"source": "security-advisories@github.com",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20240510-0006/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20240510-0006/"
}
],
"sourceIdentifier": "security-advisories@github.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-1333"
}
],
"source": "security-advisories@github.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-1333"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
CERTFR-2025-AVI-0969
Vulnerability from certfr_avis - Published: 2025-11-06 - Updated: 2025-11-06
De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| VMware | Tanzu Kubernetes Runtime | GenAI sur Tanzu Platform pour Cloud Foundry versions antérieures à 10.2.5 | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry versions antérieures à 6.0.20+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Noble) versions antérieures à 1.90.x | ||
| VMware | Tanzu Kubernetes Runtime | NodeJS Buildpack versions antérieures à 1.8.58 | ||
| VMware | Tanzu Kubernetes Runtime | Python Buildpack versions antérieures à 1.8.63 | ||
| VMware | Tanzu Kubernetes Runtime | VMware Tanzu pour MySQL sur Tanzu Platform versions antérieures à 10.1.0 | ||
| VMware | Tanzu Kubernetes Runtime | API Gateway pour VMware Tanzu Platform versions antérieures à 2.4.0 | ||
| VMware | Tanzu Kubernetes Runtime | PHP Buildpack versions antérieures à 4.6.49 | ||
| VMware | Tanzu Kubernetes Runtime | Single Sign-On pour VMware Tanzu Platform versions antérieures à 1.16.14 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy FIPS) versions antérieures à 1.915.x | ||
| VMware | Tanzu Application Service | CredHub Service Broker versions antérieures à 1.6.6 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy FIPS) versions antérieures à 1.943.x | ||
| VMware | Tanzu Kubernetes Runtime | Elastic Application Runtime Windows add-on pour VMware Tanzu Platform versions antérieures à 10.2.4+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry Windows versions antérieures à 6.0.20+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy) versions antérieures à 1.915.x | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry Windows versions antérieures à 10.2.3+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Single Sign-On pour VMware Tanzu Application Service versions antérieures à 1.16.13 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy) versions antérieures à 1.943.x | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry isolation segment versions antérieures à 6.0.20+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Noble) versions antérieures à 1.77.x | ||
| VMware | Services Suite | Platform Automation Toolkit versions antérieures à 5.3.2 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy Azure Light) versions antérieures à 1.906.x | ||
| VMware | Tanzu Kubernetes Runtime | Spring Cloud Data Flow pour VMware Tanzu versions antérieures à 1.14.9 | ||
| VMware | Tanzu Kubernetes Runtime | App Autoscaler CLI Plugin pour VMware Tanzu Platform versions antérieures à 250.5.9 | ||
| VMware | Tanzu Kubernetes Runtime | Spring Cloud Services pour VMware Tanzu versions antérieures à 3.3.10 | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry versions antérieures à 10.2.3+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Concourse pour VMware Tanzu versions antérieures à 7.14.1+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry isolation segment versions antérieures à 10.2.3+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Platform Services pour VMware Tanzu Platform versions antérieures à 10.3.0 | ||
| VMware | Tanzu Kubernetes Runtime | Ruby Buildpack versions antérieures à 1.10.46 | ||
| VMware | Tanzu Kubernetes Runtime | Elastic Application Runtime pour VMware Tanzu Platform versions antérieures à 6.0.21+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Telemetry pour VMware Tanzu Platform versions antérieures à 2.3.0 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Noble) versions antérieures à 1.103.x | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Hub versions antérieures à 10.3.0 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy) versions antérieures à 1.906.x |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "GenAI sur Tanzu Platform pour Cloud Foundry versions ant\u00e9rieures \u00e0 10.2.5",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry versions ant\u00e9rieures \u00e0 6.0.20+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Noble) versions ant\u00e9rieures \u00e0 1.90.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "NodeJS Buildpack versions ant\u00e9rieures \u00e0 1.8.58",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Python Buildpack versions ant\u00e9rieures \u00e0 1.8.63",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware Tanzu pour MySQL sur Tanzu Platform versions ant\u00e9rieures \u00e0 10.1.0",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "API Gateway pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 2.4.0",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "PHP Buildpack versions ant\u00e9rieures \u00e0 4.6.49",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Single Sign-On pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 1.16.14",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy FIPS) versions ant\u00e9rieures \u00e0 1.915.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "CredHub Service Broker versions ant\u00e9rieures \u00e0 1.6.6",
"product": {
"name": "Tanzu Application Service",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy FIPS) versions ant\u00e9rieures \u00e0 1.943.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Elastic Application Runtime Windows add-on pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 10.2.4+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry Windows versions ant\u00e9rieures \u00e0 6.0.20+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy) versions ant\u00e9rieures \u00e0 1.915.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry Windows versions ant\u00e9rieures \u00e0 10.2.3+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Single Sign-On pour VMware Tanzu Application Service versions ant\u00e9rieures \u00e0 1.16.13",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy) versions ant\u00e9rieures \u00e0 1.943.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry isolation segment versions ant\u00e9rieures \u00e0 6.0.20+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Noble) versions ant\u00e9rieures \u00e0 1.77.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Platform Automation Toolkit versions ant\u00e9rieures \u00e0 5.3.2",
"product": {
"name": "Services Suite",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy Azure Light) versions ant\u00e9rieures \u00e0 1.906.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Spring Cloud Data Flow pour VMware Tanzu versions ant\u00e9rieures \u00e0 1.14.9",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "App Autoscaler CLI Plugin pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 250.5.9",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Spring Cloud Services pour VMware Tanzu versions ant\u00e9rieures \u00e0 3.3.10",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry versions ant\u00e9rieures \u00e0 10.2.3+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Concourse pour VMware Tanzu versions ant\u00e9rieures \u00e0 7.14.1+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry isolation segment versions ant\u00e9rieures \u00e0 10.2.3+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Platform Services pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 10.3.0",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Ruby Buildpack versions ant\u00e9rieures \u00e0 1.10.46",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Elastic Application Runtime pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 6.0.21+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Telemetry pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 2.3.0",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Noble) versions ant\u00e9rieures \u00e0 1.103.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Hub versions ant\u00e9rieures \u00e0 10.3.0",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy) versions ant\u00e9rieures \u00e0 1.906.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2019-25013",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-25013"
},
{
"name": "CVE-2017-9937",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-9937"
},
{
"name": "CVE-2025-6395",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6395"
},
{
"name": "CVE-2022-1343",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1343"
},
{
"name": "CVE-2013-4235",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4235"
},
{
"name": "CVE-2024-37370",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37370"
},
{
"name": "CVE-2024-24790",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24790"
},
{
"name": "CVE-2024-57981",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57981"
},
{
"name": "CVE-2025-8715",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8715"
},
{
"name": "CVE-2017-3613",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3613"
},
{
"name": "CVE-2025-30681",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30681"
},
{
"name": "CVE-2022-25308",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25308"
},
{
"name": "CVE-2021-3996",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3996"
},
{
"name": "CVE-2024-38807",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38807"
},
{
"name": "CVE-2023-0216",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0216"
},
{
"name": "CVE-2023-27102",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27102"
},
{
"name": "CVE-2022-43236",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43236"
},
{
"name": "CVE-2024-20919",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20919"
},
{
"name": "CVE-2023-7104",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-7104"
},
{
"name": "CVE-2022-35252",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35252"
},
{
"name": "CVE-2005-0602",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-0602"
},
{
"name": "CVE-2017-6834",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6834"
},
{
"name": "CVE-2025-22003",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22003"
},
{
"name": "CVE-2022-1473",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1473"
},
{
"name": "CVE-2023-21938",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21938"
},
{
"name": "CVE-2023-3428",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3428"
},
{
"name": "CVE-2021-3933",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3933"
},
{
"name": "CVE-2022-32189",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32189"
},
{
"name": "CVE-2022-43237",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43237"
},
{
"name": "CVE-2021-23215",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23215"
},
{
"name": "CVE-2022-1115",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1115"
},
{
"name": "CVE-2024-57994",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57994"
},
{
"name": "CVE-2025-21798",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21798"
},
{
"name": "CVE-2025-3264",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3264"
},
{
"name": "CVE-2015-4789",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4789"
},
{
"name": "CVE-2025-53547",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53547"
},
{
"name": "CVE-2023-40217",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40217"
},
{
"name": "CVE-2020-14621",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14621"
},
{
"name": "CVE-2025-26465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26465"
},
{
"name": "CVE-2025-21975",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21975"
},
{
"name": "CVE-2025-21980",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21980"
},
{
"name": "CVE-2023-0401",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0401"
},
{
"name": "CVE-2025-21889",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21889"
},
{
"name": "CVE-2025-21861",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21861"
},
{
"name": "CVE-2025-38328",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38328"
},
{
"name": "CVE-2025-31115",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31115"
},
{
"name": "CVE-2021-33294",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33294"
},
{
"name": "CVE-2023-3195",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3195"
},
{
"name": "CVE-2025-59830",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59830"
},
{
"name": "CVE-2023-21843",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21843"
},
{
"name": "CVE-2021-20243",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20243"
},
{
"name": "CVE-2023-3316",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3316"
},
{
"name": "CVE-2023-1175",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1175"
},
{
"name": "CVE-2024-57948",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57948"
},
{
"name": "CVE-2025-21937",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21937"
},
{
"name": "CVE-2014-9157",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9157"
},
{
"name": "CVE-2020-2803",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2803"
},
{
"name": "CVE-2020-14803",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14803"
},
{
"name": "CVE-2024-58088",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58088"
},
{
"name": "CVE-2024-21235",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21235"
},
{
"name": "CVE-2025-53042",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53042"
},
{
"name": "CVE-2024-9681",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9681"
},
{
"name": "CVE-2021-37600",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37600"
},
{
"name": "CVE-2025-21689",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21689"
},
{
"name": "CVE-2025-21682",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21682"
},
{
"name": "CVE-2011-3374",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3374"
},
{
"name": "CVE-2025-30689",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30689"
},
{
"name": "CVE-2024-11168",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11168"
},
{
"name": "CVE-2021-26260",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-26260"
},
{
"name": "CVE-2023-0922",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0922"
},
{
"name": "CVE-2025-38100",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38100"
},
{
"name": "CVE-2017-18250",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-18250"
},
{
"name": "CVE-2025-9231",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9231"
},
{
"name": "CVE-2025-1372",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1372"
},
{
"name": "CVE-2025-40002",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40002"
},
{
"name": "CVE-2022-21426",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21426"
},
{
"name": "CVE-2025-8851",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8851"
},
{
"name": "CVE-2024-58010",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58010"
},
{
"name": "CVE-2025-38043",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38043"
},
{
"name": "CVE-2025-21697",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21697"
},
{
"name": "CVE-2025-30715",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30715"
},
{
"name": "CVE-2024-57973",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57973"
},
{
"name": "CVE-2022-24407",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24407"
},
{
"name": "CVE-2022-30631",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30631"
},
{
"name": "CVE-2022-46908",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46908"
},
{
"name": "CVE-2022-3626",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3626"
},
{
"name": "CVE-2024-28834",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28834"
},
{
"name": "CVE-2021-38604",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-38604"
},
{
"name": "CVE-2001-1268",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-1268"
},
{
"name": "CVE-2022-2874",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2874"
},
{
"name": "CVE-2025-22017",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22017"
},
{
"name": "CVE-2025-38108",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38108"
},
{
"name": "CVE-2025-21783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21783"
},
{
"name": "CVE-2025-38229",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38229"
},
{
"name": "CVE-2023-46218",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46218"
},
{
"name": "CVE-2021-3733",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3733"
},
{
"name": "CVE-2025-9714",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9714"
},
{
"name": "CVE-2025-21786",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21786"
},
{
"name": "CVE-2024-11187",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11187"
},
{
"name": "CVE-2020-27769",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27769"
},
{
"name": "CVE-2025-30682",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30682"
},
{
"name": "CVE-2021-35586",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35586"
},
{
"name": "CVE-2014-9748",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9748"
},
{
"name": "CVE-2025-25186",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25186"
},
{
"name": "CVE-2014-8141",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8141"
},
{
"name": "CVE-2022-1623",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1623"
},
{
"name": "CVE-2025-21881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21881"
},
{
"name": "CVE-2025-21951",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21951"
},
{
"name": "CVE-2024-38829",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38829"
},
{
"name": "CVE-2025-10148",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10148"
},
{
"name": "CVE-2017-6831",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6831"
},
{
"name": "CVE-2024-58034",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58034"
},
{
"name": "CVE-2025-25724",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25724"
},
{
"name": "CVE-2025-27818",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27818"
},
{
"name": "CVE-2021-3997",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3997"
},
{
"name": "CVE-2025-50102",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50102"
},
{
"name": "CVE-2023-38471",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38471"
},
{
"name": "CVE-2022-0158",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0158"
},
{
"name": "CVE-2020-27776",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27776"
},
{
"name": "CVE-2025-5222",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5222"
},
{
"name": "CVE-2025-21743",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21743"
},
{
"name": "CVE-2025-38147",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38147"
},
{
"name": "CVE-2023-6780",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6780"
},
{
"name": "CVE-2023-34475",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34475"
},
{
"name": "CVE-2024-26896",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26896"
},
{
"name": "CVE-2025-38286",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38286"
},
{
"name": "CVE-2025-55248",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55248"
},
{
"name": "CVE-2024-24762",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24762"
},
{
"name": "CVE-2025-53643",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53643"
},
{
"name": "CVE-2022-0696",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0696"
},
{
"name": "CVE-2025-27516",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27516"
},
{
"name": "CVE-2024-21144",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21144"
},
{
"name": "CVE-2024-3220",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3220"
},
{
"name": "CVE-2022-3599",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3599"
},
{
"name": "CVE-2021-39537",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-39537"
},
{
"name": "CVE-2025-12380",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12380"
},
{
"name": "CVE-2022-42010",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42010"
},
{
"name": "CVE-2015-4787",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4787"
},
{
"name": "CVE-2021-35550",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35550"
},
{
"name": "CVE-2022-27781",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27781"
},
{
"name": "CVE-2025-21847",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21847"
},
{
"name": "CVE-2022-2929",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2929"
},
{
"name": "CVE-2018-15120",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-15120"
},
{
"name": "CVE-2024-58069",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58069"
},
{
"name": "CVE-2025-8556",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8556"
},
{
"name": "CVE-2023-0796",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0796"
},
{
"name": "CVE-2025-21853",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21853"
},
{
"name": "CVE-2025-21871",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21871"
},
{
"name": "CVE-2023-51385",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51385"
},
{
"name": "CVE-2016-0682",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0682"
},
{
"name": "CVE-2025-4287",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4287"
},
{
"name": "CVE-2024-43788",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43788"
},
{
"name": "CVE-2025-21731",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21731"
},
{
"name": "CVE-2023-48237",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48237"
},
{
"name": "CVE-2023-48706",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48706"
},
{
"name": "CVE-2021-3605",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3605"
},
{
"name": "CVE-2025-38515",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38515"
},
{
"name": "CVE-2025-22872",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22872"
},
{
"name": "CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"name": "CVE-2025-21941",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21941"
},
{
"name": "CVE-2025-8277",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8277"
},
{
"name": "CVE-2025-8941",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8941"
},
{
"name": "CVE-2017-10928",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10928"
},
{
"name": "CVE-2023-52425",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52425"
},
{
"name": "CVE-2025-38163",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38163"
},
{
"name": "CVE-2021-35567",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35567"
},
{
"name": "CVE-2017-12429",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12429"
},
{
"name": "CVE-2025-38444",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38444"
},
{
"name": "CVE-2023-38546",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38546"
},
{
"name": "CVE-2019-8322",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8322"
},
{
"name": "CVE-2024-52615",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52615"
},
{
"name": "CVE-2020-14579",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14579"
},
{
"name": "CVE-2023-2157",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2157"
},
{
"name": "CVE-2025-32386",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32386"
},
{
"name": "CVE-2025-21823",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21823"
},
{
"name": "CVE-2025-11731",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11731"
},
{
"name": "CVE-2019-1010238",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1010238"
},
{
"name": "CVE-2024-26700",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26700"
},
{
"name": "CVE-2024-58082",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58082"
},
{
"name": "CVE-2024-35176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35176"
},
{
"name": "CVE-2024-33602",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33602"
},
{
"name": "CVE-2025-55551",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55551"
},
{
"name": "CVE-2025-50100",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50100"
},
{
"name": "CVE-2023-29404",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29404"
},
{
"name": "CVE-2025-21763",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21763"
},
{
"name": "CVE-2023-21954",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21954"
},
{
"name": "CVE-2025-40780",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40780"
},
{
"name": "CVE-2023-48368",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48368"
},
{
"name": "CVE-2014-4715",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-4715"
},
{
"name": "CVE-2022-4304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4304"
},
{
"name": "CVE-2023-21939",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21939"
},
{
"name": "CVE-2022-48554",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48554"
},
{
"name": "CVE-2022-0563",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0563"
},
{
"name": "CVE-2025-38157",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38157"
},
{
"name": "CVE-2023-24757",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24757"
},
{
"name": "CVE-2024-20926",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20926"
},
{
"name": "CVE-2025-21678",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21678"
},
{
"name": "CVE-2025-4056",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4056"
},
{
"name": "CVE-2024-28757",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28757"
},
{
"name": "CVE-2020-29562",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29562"
},
{
"name": "CVE-2022-31683",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-31683"
},
{
"name": "CVE-2020-22218",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-22218"
},
{
"name": "CVE-2025-0913",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0913"
},
{
"name": "CVE-2025-53062",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53062"
},
{
"name": "CVE-2015-4776",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4776"
},
{
"name": "CVE-2025-21872",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21872"
},
{
"name": "CVE-2017-3616",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3616"
},
{
"name": "CVE-2021-2163",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2163"
},
{
"name": "CVE-2025-21922",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21922"
},
{
"name": "CVE-2025-27817",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27817"
},
{
"name": "CVE-2023-30086",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-30086"
},
{
"name": "CVE-2017-6832",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6832"
},
{
"name": "CVE-2022-2208",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2208"
},
{
"name": "CVE-2024-45720",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45720"
},
{
"name": "CVE-2022-1056",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1056"
},
{
"name": "CVE-2018-10805",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10805"
},
{
"name": "CVE-2019-19906",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19906"
},
{
"name": "CVE-2025-38219",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38219"
},
{
"name": "CVE-2015-4785",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4785"
},
{
"name": "CVE-2025-38466",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38466"
},
{
"name": "CVE-2022-24921",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24921"
},
{
"name": "CVE-2022-32208",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32208"
},
{
"name": "CVE-2020-15095",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15095"
},
{
"name": "CVE-2018-16328",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16328"
},
{
"name": "CVE-2024-38949",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38949"
},
{
"name": "CVE-2022-28327",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28327"
},
{
"name": "CVE-2025-5745",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5745"
},
{
"name": "CVE-2025-47907",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47907"
},
{
"name": "CVE-2022-43239",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43239"
},
{
"name": "CVE-2022-41409",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41409"
},
{
"name": "CVE-2022-32546",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32546"
},
{
"name": "CVE-2025-0838",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0838"
},
{
"name": "CVE-2024-57980",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57980"
},
{
"name": "CVE-2023-5441",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5441"
},
{
"name": "CVE-2025-55553",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55553"
},
{
"name": "CVE-2024-12797",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12797"
},
{
"name": "CVE-2024-58011",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58011"
},
{
"name": "CVE-2025-21796",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21796"
},
{
"name": "CVE-2024-12086",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12086"
},
{
"name": "CVE-2025-27219",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27219"
},
{
"name": "CVE-2025-21691",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21691"
},
{
"name": "CVE-2021-4219",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4219"
},
{
"name": "CVE-2018-15798",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-15798"
},
{
"name": "CVE-2025-55154",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55154"
},
{
"name": "CVE-2025-49146",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49146"
},
{
"name": "CVE-2025-40026",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40026"
},
{
"name": "CVE-2022-1292",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1292"
},
{
"name": "CVE-2022-3153",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3153"
},
{
"name": "CVE-2022-2057",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2057"
},
{
"name": "CVE-2025-5197",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5197"
},
{
"name": "CVE-2023-45283",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45283"
},
{
"name": "CVE-2023-39328",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39328"
},
{
"name": "CVE-2023-45853",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45853"
},
{
"name": "CVE-2024-47611",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47611"
},
{
"name": "CVE-2017-11447",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11447"
},
{
"name": "CVE-2019-8323",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8323"
},
{
"name": "CVE-2023-39593",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39593"
},
{
"name": "CVE-2025-45582",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-45582"
},
{
"name": "CVE-2025-46569",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46569"
},
{
"name": "CVE-2024-21068",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21068"
},
{
"name": "CVE-2018-14434",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14434"
},
{
"name": "CVE-2019-6293",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6293"
},
{
"name": "CVE-2025-30703",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30703"
},
{
"name": "CVE-2025-21738",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21738"
},
{
"name": "CVE-2022-48522",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48522"
},
{
"name": "CVE-2025-21684",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21684"
},
{
"name": "CVE-2023-50868",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-50868"
},
{
"name": "CVE-2023-45288",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45288"
},
{
"name": "CVE-2023-21830",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21830"
},
{
"name": "CVE-2023-26965",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26965"
},
{
"name": "CVE-2023-2602",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2602"
},
{
"name": "CVE-2021-2161",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2161"
},
{
"name": "CVE-2025-6069",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6069"
},
{
"name": "CVE-2023-3817",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3817"
},
{
"name": "CVE-2017-10140",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10140"
},
{
"name": "CVE-2021-2341",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2341"
},
{
"name": "CVE-2021-3468",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3468"
},
{
"name": "CVE-2024-6232",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6232"
},
{
"name": "CVE-2024-58061",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58061"
},
{
"name": "CVE-2025-46148",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46148"
},
{
"name": "CVE-2024-58058",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58058"
},
{
"name": "CVE-2025-21768",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21768"
},
{
"name": "CVE-2025-21864",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21864"
},
{
"name": "CVE-2025-2149",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2149"
},
{
"name": "CVE-2021-3502",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3502"
},
{
"name": "CVE-2025-6052",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6052"
},
{
"name": "CVE-2018-16329",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16329"
},
{
"name": "CVE-2022-41725",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41725"
},
{
"name": "CVE-2025-24813",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24813"
},
{
"name": "CVE-2024-58056",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58056"
},
{
"name": "CVE-2023-52426",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52426"
},
{
"name": "CVE-2025-50080",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50080"
},
{
"name": "CVE-2025-21725",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21725"
},
{
"name": "CVE-2024-43790",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43790"
},
{
"name": "CVE-2025-38313",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38313"
},
{
"name": "CVE-2025-38336",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38336"
},
{
"name": "CVE-2022-2058",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2058"
},
{
"name": "CVE-2025-22009",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22009"
},
{
"name": "CVE-2025-38061",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38061"
},
{
"name": "CVE-2022-45061",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-45061"
},
{
"name": "CVE-2025-21727",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21727"
},
{
"name": "CVE-2024-45492",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45492"
},
{
"name": "CVE-2015-4764",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4764"
},
{
"name": "CVE-2025-22228",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22228"
},
{
"name": "CVE-2022-43240",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43240"
},
{
"name": "CVE-2020-1752",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1752"
},
{
"name": "CVE-2025-5987",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5987"
},
{
"name": "CVE-2023-4091",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4091"
},
{
"name": "CVE-2022-30635",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30635"
},
{
"name": "CVE-2025-38375",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38375"
},
{
"name": "CVE-2015-4779",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4779"
},
{
"name": "CVE-2021-20312",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20312"
},
{
"name": "CVE-2025-4330",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4330"
},
{
"name": "CVE-2025-2953",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2953"
},
{
"name": "CVE-2020-14593",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14593"
},
{
"name": "CVE-2025-21904",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21904"
},
{
"name": "CVE-2019-20838",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20838"
},
{
"name": "CVE-2025-37798",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37798"
},
{
"name": "CVE-2022-41715",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41715"
},
{
"name": "CVE-2025-50078",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50078"
},
{
"name": "CVE-2022-28739",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28739"
},
{
"name": "CVE-2024-26726",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26726"
},
{
"name": "CVE-2023-52593",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52593"
},
{
"name": "CVE-2025-3933",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3933"
},
{
"name": "CVE-2023-26785",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26785"
},
{
"name": "CVE-2025-49794",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49794"
},
{
"name": "CVE-2020-14664",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14664"
},
{
"name": "CVE-2023-48235",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48235"
},
{
"name": "CVE-2024-57970",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57970"
},
{
"name": "CVE-2024-9287",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9287"
},
{
"name": "CVE-2025-21668",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21668"
},
{
"name": "CVE-2025-22004",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22004"
},
{
"name": "CVE-2022-32207",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32207"
},
{
"name": "CVE-2024-44939",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-44939"
},
{
"name": "CVE-2024-43374",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43374"
},
{
"name": "CVE-2023-50782",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-50782"
},
{
"name": "CVE-2025-21929",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21929"
},
{
"name": "CVE-2025-4138",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4138"
},
{
"name": "CVE-2022-41722",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41722"
},
{
"name": "CVE-2022-3627",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3627"
},
{
"name": "CVE-2020-14797",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14797"
},
{
"name": "CVE-2025-21735",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21735"
},
{
"name": "CVE-2024-3596",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3596"
},
{
"name": "CVE-2023-0215",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0215"
},
{
"name": "CVE-2024-27280",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27280"
},
{
"name": "CVE-2025-3000",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3000"
},
{
"name": "CVE-2022-3213",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3213"
},
{
"name": "CVE-2022-2867",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2867"
},
{
"name": "CVE-2023-36632",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-36632"
},
{
"name": "CVE-2021-23177",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23177"
},
{
"name": "CVE-2020-14798",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14798"
},
{
"name": "CVE-2007-4559",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4559"
},
{
"name": "CVE-2025-21839",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21839"
},
{
"name": "CVE-2025-38112",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38112"
},
{
"name": "CVE-2025-5878",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5878"
},
{
"name": "CVE-2023-0286",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0286"
},
{
"name": "CVE-2022-3715",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3715"
},
{
"name": "CVE-2023-4016",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4016"
},
{
"name": "CVE-2024-58063",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58063"
},
{
"name": "CVE-2015-4780",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4780"
},
{
"name": "CVE-2024-41957",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41957"
},
{
"name": "CVE-2025-38500",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38500"
},
{
"name": "CVE-2024-56171",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56171"
},
{
"name": "CVE-2025-24293",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24293"
},
{
"name": "CVE-2025-8961",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8961"
},
{
"name": "CVE-2025-21977",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21977"
},
{
"name": "CVE-2022-25147",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25147"
},
{
"name": "CVE-2025-21779",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21779"
},
{
"name": "CVE-2024-58005",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58005"
},
{
"name": "CVE-2025-21674",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21674"
},
{
"name": "CVE-2022-3598",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3598"
},
{
"name": "CVE-2025-30696",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30696"
},
{
"name": "CVE-2023-0798",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0798"
},
{
"name": "CVE-2025-21918",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21918"
},
{
"name": "CVE-2025-38203",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38203"
},
{
"name": "CVE-2023-45285",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45285"
},
{
"name": "CVE-2022-0909",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0909"
},
{
"name": "CVE-2025-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8176"
},
{
"name": "CVE-2023-28154",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28154"
},
{
"name": "CVE-2023-48231",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48231"
},
{
"name": "CVE-2025-55752",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
},
{
"name": "CVE-2023-38633",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38633"
},
{
"name": "CVE-2025-21948",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21948"
},
{
"name": "CVE-2023-2609",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2609"
},
{
"name": "CVE-2025-53905",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53905"
},
{
"name": "CVE-2025-24970",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24970"
},
{
"name": "CVE-2021-46312",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46312"
},
{
"name": "CVE-2018-14628",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14628"
},
{
"name": "CVE-2022-21299",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21299"
},
{
"name": "CVE-2022-38476",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38476"
},
{
"name": "CVE-2019-6461",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6461"
},
{
"name": "CVE-2022-3515",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3515"
},
{
"name": "CVE-2025-38004",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38004"
},
{
"name": "CVE-2020-2773",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2773"
},
{
"name": "CVE-2015-5262",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5262"
},
{
"name": "CVE-2022-43244",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43244"
},
{
"name": "CVE-2024-24783",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24783"
},
{
"name": "CVE-2025-21753",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21753"
},
{
"name": "CVE-2017-6004",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6004"
},
{
"name": "CVE-2023-45284",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45284"
},
{
"name": "CVE-2015-7696",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7696"
},
{
"name": "CVE-2023-29403",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29403"
},
{
"name": "CVE-2025-38387",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38387"
},
{
"name": "CVE-2023-45922",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45922"
},
{
"name": "CVE-2015-4754",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4754"
},
{
"name": "CVE-2025-21699",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21699"
},
{
"name": "CVE-2025-38362",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38362"
},
{
"name": "CVE-2022-27776",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27776"
},
{
"name": "CVE-2023-45322",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45322"
},
{
"name": "CVE-2024-24791",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24791"
},
{
"name": "CVE-2024-20921",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20921"
},
{
"name": "CVE-2022-39046",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-39046"
},
{
"name": "CVE-2020-14578",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14578"
},
{
"name": "CVE-2025-21584",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21584"
},
{
"name": "CVE-2022-42916",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42916"
},
{
"name": "CVE-2025-40004",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40004"
},
{
"name": "CVE-2017-7619",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7619"
},
{
"name": "CVE-2024-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8176"
},
{
"name": "CVE-2020-2805",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2805"
},
{
"name": "CVE-2025-21712",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21712"
},
{
"name": "CVE-2025-38371",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38371"
},
{
"name": "CVE-2023-2731",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2731"
},
{
"name": "CVE-2025-58767",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58767"
},
{
"name": "CVE-2021-35939",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35939"
},
{
"name": "CVE-2024-57982",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57982"
},
{
"name": "CVE-2025-38445",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38445"
},
{
"name": "CVE-2024-38819",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38819"
},
{
"name": "CVE-2023-0803",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0803"
},
{
"name": "CVE-2023-4807",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4807"
},
{
"name": "CVE-2025-21746",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21746"
},
{
"name": "CVE-2022-0391",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0391"
},
{
"name": "CVE-2023-1170",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1170"
},
{
"name": "CVE-2022-24070",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24070"
},
{
"name": "CVE-2025-38461",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38461"
},
{
"name": "CVE-2019-17547",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17547"
},
{
"name": "CVE-2024-45341",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45341"
},
{
"name": "CVE-2021-36411",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36411"
},
{
"name": "CVE-2023-30774",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-30774"
},
{
"name": "CVE-2018-10919",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10919"
},
{
"name": "CVE-2024-13176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-13176"
},
{
"name": "CVE-2020-2830",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2830"
},
{
"name": "CVE-2025-53014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53014"
},
{
"name": "CVE-2025-7962",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7962"
},
{
"name": "CVE-2022-21624",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21624"
},
{
"name": "CVE-2020-2781",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2781"
},
{
"name": "CVE-2023-28322",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28322"
},
{
"name": "CVE-2018-10804",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10804"
},
{
"name": "CVE-2025-38159",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38159"
},
{
"name": "CVE-2022-0907",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0907"
},
{
"name": "CVE-2021-3421",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3421"
},
{
"name": "CVE-2022-21305",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21305"
},
{
"name": "CVE-2025-38066",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38066"
},
{
"name": "CVE-2023-29405",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29405"
},
{
"name": "CVE-2021-3670",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3670"
},
{
"name": "CVE-2021-38297",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-38297"
},
{
"name": "CVE-2025-4373",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4373"
},
{
"name": "CVE-2015-4790",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4790"
},
{
"name": "CVE-2025-4598",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4598"
},
{
"name": "CVE-2025-27144",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27144"
},
{
"name": "CVE-2025-21836",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21836"
},
{
"name": "CVE-2025-21715",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21715"
},
{
"name": "CVE-2024-6174",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6174"
},
{
"name": "CVE-2022-30629",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30629"
},
{
"name": "CVE-2020-10735",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10735"
},
{
"name": "CVE-2025-38305",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38305"
},
{
"name": "CVE-2020-14556",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14556"
},
{
"name": "CVE-2025-38067",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38067"
},
{
"name": "CVE-2025-50085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50085"
},
{
"name": "CVE-2025-21781",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21781"
},
{
"name": "CVE-2024-58054",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58054"
},
{
"name": "CVE-2024-43398",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43398"
},
{
"name": "CVE-2020-14792",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14792"
},
{
"name": "CVE-2019-16776",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16776"
},
{
"name": "CVE-2023-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44487"
},
{
"name": "CVE-2024-29857",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-29857"
},
{
"name": "CVE-2023-6779",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6779"
},
{
"name": "CVE-2022-28738",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28738"
},
{
"name": "CVE-2023-5363",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5363"
},
{
"name": "CVE-2024-8508",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8508"
},
{
"name": "CVE-2023-45289",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45289"
},
{
"name": "CVE-2025-41248",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41248"
},
{
"name": "CVE-2022-49043",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-49043"
},
{
"name": "CVE-2015-2624",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2624"
},
{
"name": "CVE-2022-2068",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2068"
},
{
"name": "CVE-2025-40364",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40364"
},
{
"name": "CVE-2023-29491",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29491"
},
{
"name": "CVE-2025-38068",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38068"
},
{
"name": "CVE-2025-61985",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61985"
},
{
"name": "CVE-2013-2064",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-2064"
},
{
"name": "CVE-2025-38401",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38401"
},
{
"name": "CVE-2025-21772",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21772"
},
{
"name": "CVE-2021-20266",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20266"
},
{
"name": "CVE-2022-21271",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21271"
},
{
"name": "CVE-2024-58070",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58070"
},
{
"name": "CVE-2025-61919",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61919"
},
{
"name": "CVE-2023-25193",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25193"
},
{
"name": "CVE-2024-34447",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34447"
},
{
"name": "CVE-2020-25663",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-25663"
},
{
"name": "CVE-2022-0156",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0156"
},
{
"name": "CVE-2025-21914",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21914"
},
{
"name": "CVE-2024-58057",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58057"
},
{
"name": "CVE-2025-0306",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0306"
},
{
"name": "CVE-2025-1371",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1371"
},
{
"name": "CVE-2024-12798",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12798"
},
{
"name": "CVE-2022-40897",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40897"
},
{
"name": "CVE-2024-58007",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58007"
},
{
"name": "CVE-2023-1355",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1355"
},
{
"name": "CVE-2025-21995",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21995"
},
{
"name": "CVE-2023-0466",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0466"
},
{
"name": "CVE-2025-21868",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21868"
},
{
"name": "CVE-2025-0938",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0938"
},
{
"name": "CVE-2025-5372",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5372"
},
{
"name": "CVE-2022-27782",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27782"
},
{
"name": "CVE-2022-37967",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37967"
},
{
"name": "CVE-2022-22844",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22844"
},
{
"name": "CVE-2025-21915",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21915"
},
{
"name": "CVE-2019-13232",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13232"
},
{
"name": "CVE-2025-27210",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27210"
},
{
"name": "CVE-2025-38102",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38102"
},
{
"name": "CVE-2024-33600",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33600"
},
{
"name": "CVE-2025-21792",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21792"
},
{
"name": "CVE-2015-2654",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2654"
},
{
"name": "CVE-2025-55560",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55560"
},
{
"name": "CVE-2025-21728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21728"
},
{
"name": "CVE-2024-58018",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58018"
},
{
"name": "CVE-2023-42669",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42669"
},
{
"name": "CVE-2022-1210",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1210"
},
{
"name": "CVE-2025-61771",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61771"
},
{
"name": "CVE-2023-0465",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0465"
},
{
"name": "CVE-2025-61770",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61770"
},
{
"name": "CVE-2022-32148",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32148"
},
{
"name": "CVE-2023-22081",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22081"
},
{
"name": "CVE-2015-4778",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4778"
},
{
"name": "CVE-2023-42670",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42670"
},
{
"name": "CVE-2022-4203",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4203"
},
{
"name": "CVE-2024-58090",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58090"
},
{
"name": "CVE-2025-59842",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59842"
},
{
"name": "CVE-2025-49125",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49125"
},
{
"name": "CVE-2025-50106",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50106"
},
{
"name": "CVE-2024-27766",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27766"
},
{
"name": "CVE-2025-37958",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37958"
},
{
"name": "CVE-2025-21714",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21714"
},
{
"name": "CVE-2024-58078",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58078"
},
{
"name": "CVE-2023-32636",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32636"
},
{
"name": "CVE-2023-6277",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6277"
},
{
"name": "CVE-2025-48060",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48060"
},
{
"name": "CVE-2025-21855",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21855"
},
{
"name": "CVE-2025-38399",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38399"
},
{
"name": "CVE-2025-21972",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21972"
},
{
"name": "CVE-2025-38065",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38065"
},
{
"name": "CVE-2025-38459",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38459"
},
{
"name": "CVE-2024-21510",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21510"
},
{
"name": "CVE-2023-34153",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34153"
},
{
"name": "CVE-2023-3618",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3618"
},
{
"name": "CVE-2020-14153",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14153"
},
{
"name": "CVE-2022-1114",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1114"
},
{
"name": "CVE-2023-48233",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48233"
},
{
"name": "CVE-2025-38412",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38412"
},
{
"name": "CVE-2025-38031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38031"
},
{
"name": "CVE-2023-4813",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4813"
},
{
"name": "CVE-2022-21626",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21626"
},
{
"name": "CVE-2011-2207",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2207"
},
{
"name": "CVE-2025-54874",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54874"
},
{
"name": "CVE-2017-3617",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3617"
},
{
"name": "CVE-2024-53124",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-53124"
},
{
"name": "CVE-2025-38293",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38293"
},
{
"name": "CVE-2025-58057",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58057"
},
{
"name": "CVE-2025-21830",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21830"
},
{
"name": "CVE-2018-12600",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12600"
},
{
"name": "CVE-2025-4877",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4877"
},
{
"name": "CVE-2021-41771",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41771"
},
{
"name": "CVE-2025-8291",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8291"
},
{
"name": "CVE-2020-14781",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14781"
},
{
"name": "CVE-2016-3189",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3189"
},
{
"name": "CVE-2023-4154",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4154"
},
{
"name": "CVE-2025-38184",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38184"
},
{
"name": "CVE-2017-3615",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3615"
},
{
"name": "CVE-2022-0714",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0714"
},
{
"name": "CVE-2023-45290",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45290"
},
{
"name": "CVE-2023-28320",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28320"
},
{
"name": "CVE-2025-9340",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9340"
},
{
"name": "CVE-2023-24758",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24758"
},
{
"name": "CVE-2025-55552",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55552"
},
{
"name": "CVE-2025-30683",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30683"
},
{
"name": "CVE-2025-30699",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30699"
},
{
"name": "CVE-2025-61921",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61921"
},
{
"name": "CVE-2024-4030",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4030"
},
{
"name": "CVE-2025-27587",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27587"
},
{
"name": "CVE-2016-7531",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7531"
},
{
"name": "CVE-2006-3082",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3082"
},
{
"name": "CVE-2023-5341",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5341"
},
{
"name": "CVE-2025-8534",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8534"
},
{
"name": "CVE-2025-21767",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21767"
},
{
"name": "CVE-2025-3262",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3262"
},
{
"name": "CVE-2025-21986",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21986"
},
{
"name": "CVE-2025-22866",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22866"
},
{
"name": "CVE-2025-1390",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1390"
},
{
"name": "CVE-2024-33599",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33599"
},
{
"name": "CVE-2023-34968",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34968"
},
{
"name": "CVE-2024-0743",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0743"
},
{
"name": "CVE-2025-21961",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21961"
},
{
"name": "CVE-2025-38458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38458"
},
{
"name": "CVE-2025-6297",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6297"
},
{
"name": "CVE-2016-10062",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10062"
},
{
"name": "CVE-2025-21764",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21764"
},
{
"name": "CVE-2024-57974",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57974"
},
{
"name": "CVE-2024-58093",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58093"
},
{
"name": "CVE-2023-34152",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34152"
},
{
"name": "CVE-2022-43249",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43249"
},
{
"name": "CVE-2025-38034",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38034"
},
{
"name": "CVE-2024-58085",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58085"
},
{
"name": "CVE-2024-34158",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34158"
},
{
"name": "CVE-2017-3608",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3608"
},
{
"name": "CVE-2025-47268",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47268"
},
{
"name": "CVE-2025-21690",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21690"
},
{
"name": "CVE-2025-30754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30754"
},
{
"name": "CVE-2024-57996",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57996"
},
{
"name": "CVE-2025-38135",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38135"
},
{
"name": "CVE-2023-28484",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28484"
},
{
"name": "CVE-2022-43242",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43242"
},
{
"name": "CVE-2019-2708",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2708"
},
{
"name": "CVE-2025-38312",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38312"
},
{
"name": "CVE-2016-0692",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0692"
},
{
"name": "CVE-2019-14844",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14844"
},
{
"name": "CVE-2022-21366",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21366"
},
{
"name": "CVE-2022-30630",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30630"
},
{
"name": "CVE-2025-22233",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22233"
},
{
"name": "CVE-2025-38464",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38464"
},
{
"name": "CVE-2025-21946",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21946"
},
{
"name": "CVE-2025-21838",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21838"
},
{
"name": "CVE-2025-21982",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21982"
},
{
"name": "CVE-2025-21867",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21867"
},
{
"name": "CVE-2025-21666",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21666"
},
{
"name": "CVE-2023-0802",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0802"
},
{
"name": "CVE-2025-53859",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53859"
},
{
"name": "CVE-2023-46219",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46219"
},
{
"name": "CVE-2025-47910",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47910"
},
{
"name": "CVE-2025-21828",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21828"
},
{
"name": "CVE-2023-47038",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47038"
},
{
"name": "CVE-2025-23167",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23167"
},
{
"name": "CVE-2025-38363",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38363"
},
{
"name": "CVE-2025-21704",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21704"
},
{
"name": "CVE-2025-21936",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21936"
},
{
"name": "CVE-2022-0865",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0865"
},
{
"name": "CVE-2023-5981",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5981"
},
{
"name": "CVE-2025-38319",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38319"
},
{
"name": "CVE-2025-43859",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43859"
},
{
"name": "CVE-2024-58013",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58013"
},
{
"name": "CVE-2022-0529",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0529"
},
{
"name": "CVE-2023-27043",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27043"
},
{
"name": "CVE-2016-7514",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7514"
},
{
"name": "CVE-2015-4782",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4782"
},
{
"name": "CVE-2025-21909",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21909"
},
{
"name": "CVE-2022-2056",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2056"
},
{
"name": "CVE-2025-9092",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9092"
},
{
"name": "CVE-2025-21766",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21766"
},
{
"name": "CVE-2025-38457",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38457"
},
{
"name": "CVE-2024-54677",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54677"
},
{
"name": "CVE-2021-3598",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3598"
},
{
"name": "CVE-2025-21880",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21880"
},
{
"name": "CVE-2025-50094",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50094"
},
{
"name": "CVE-2021-35559",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35559"
},
{
"name": "CVE-2025-21959",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21959"
},
{
"name": "CVE-2024-38809",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38809"
},
{
"name": "CVE-2025-38212",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38212"
},
{
"name": "CVE-2017-3610",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3610"
},
{
"name": "CVE-2023-1264",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1264"
},
{
"name": "CVE-2023-0217",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0217"
},
{
"name": "CVE-2024-58266",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58266"
},
{
"name": "CVE-2025-38298",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38298"
},
{
"name": "CVE-2024-30172",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-30172"
},
{
"name": "CVE-2025-50098",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50098"
},
{
"name": "CVE-2022-43552",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43552"
},
{
"name": "CVE-2018-1000076",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000076"
},
{
"name": "CVE-2022-4293",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4293"
},
{
"name": "CVE-2025-37974",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37974"
},
{
"name": "CVE-2025-5915",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5915"
},
{
"name": "CVE-2024-57834",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57834"
},
{
"name": "CVE-2025-55197",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55197"
},
{
"name": "CVE-2022-32743",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32743"
},
{
"name": "CVE-2025-55558",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55558"
},
{
"name": "CVE-2022-21291",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21291"
},
{
"name": "CVE-2024-58017",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58017"
},
{
"name": "CVE-2025-5917",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5917"
},
{
"name": "CVE-2025-26603",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26603"
},
{
"name": "CVE-2023-35116",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-35116"
},
{
"name": "CVE-2025-38078",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38078"
},
{
"name": "CVE-2025-21809",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21809"
},
{
"name": "CVE-2025-38419",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38419"
},
{
"name": "CVE-2024-45490",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45490"
},
{
"name": "CVE-2021-32490",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32490"
},
{
"name": "CVE-2020-27768",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27768"
},
{
"name": "CVE-2024-38820",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38820"
},
{
"name": "CVE-2025-50086",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50086"
},
{
"name": "CVE-2016-5118",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5118"
},
{
"name": "CVE-2022-3786",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3786"
},
{
"name": "CVE-2023-46045",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46045"
},
{
"name": "CVE-2025-37889",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37889"
},
{
"name": "CVE-2021-3995",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3995"
},
{
"name": "CVE-2015-4788",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4788"
},
{
"name": "CVE-2025-55557",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55557"
},
{
"name": "CVE-2024-12085",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12085"
},
{
"name": "CVE-2022-24599",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24599"
},
{
"name": "CVE-2025-21981",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21981"
},
{
"name": "CVE-2025-38211",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38211"
},
{
"name": "CVE-2025-2999",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2999"
},
{
"name": "CVE-2023-48795",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48795"
},
{
"name": "CVE-2025-21910",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21910"
},
{
"name": "CVE-2021-35452",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35452"
},
{
"name": "CVE-2025-6965",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6965"
},
{
"name": "CVE-2023-28319",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28319"
},
{
"name": "CVE-2021-35565",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35565"
},
{
"name": "CVE-2020-10251",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10251"
},
{
"name": "CVE-2024-11584",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11584"
},
{
"name": "CVE-2024-45491",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45491"
},
{
"name": "CVE-2025-50182",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50182"
},
{
"name": "CVE-2025-47906",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47906"
},
{
"name": "CVE-2020-2981",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2981"
},
{
"name": "CVE-2025-21745",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21745"
},
{
"name": "CVE-2025-21791",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21791"
},
{
"name": "CVE-2020-18781",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-18781"
},
{
"name": "CVE-2025-7709",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7709"
},
{
"name": "CVE-2024-52559",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52559"
},
{
"name": "CVE-2025-38077",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38077"
},
{
"name": "CVE-2025-38251",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38251"
},
{
"name": "CVE-2022-22576",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22576"
},
{
"name": "CVE-2025-38120",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38120"
},
{
"name": "CVE-2017-7186",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7186"
},
{
"name": "CVE-2025-38285",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38285"
},
{
"name": "CVE-2025-59375",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59375"
},
{
"name": "CVE-2025-37750",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37750"
},
{
"name": "CVE-2021-39293",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-39293"
},
{
"name": "CVE-2025-21795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21795"
},
{
"name": "CVE-2025-8194",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8194"
},
{
"name": "CVE-2025-22014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22014"
},
{
"name": "CVE-2025-38161",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38161"
},
{
"name": "CVE-2025-9640",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9640"
},
{
"name": "CVE-2022-1897",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1897"
},
{
"name": "CVE-2022-43248",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43248"
},
{
"name": "CVE-2016-3418",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3418"
},
{
"name": "CVE-2022-29824",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29824"
},
{
"name": "CVE-2024-58081",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58081"
},
{
"name": "CVE-2022-1705",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1705"
},
{
"name": "CVE-2024-11053",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11053"
},
{
"name": "CVE-2024-7264",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7264"
},
{
"name": "CVE-2025-21814",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21814"
},
{
"name": "CVE-2025-50082",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50082"
},
{
"name": "CVE-2017-6829",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6829"
},
{
"name": "CVE-2025-32462",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32462"
},
{
"name": "CVE-2025-40027",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40027"
},
{
"name": "CVE-2025-50097",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50097"
},
{
"name": "CVE-2021-4214",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4214"
},
{
"name": "CVE-2025-21911",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21911"
},
{
"name": "CVE-2023-24752",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24752"
},
{
"name": "CVE-2025-50181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50181"
},
{
"name": "CVE-2024-21742",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21742"
},
{
"name": "CVE-2022-43245",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43245"
},
{
"name": "CVE-2015-2656",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2656"
},
{
"name": "CVE-2025-50084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50084"
},
{
"name": "CVE-2018-9133",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-9133"
},
{
"name": "CVE-2025-50079",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50079"
},
{
"name": "CVE-2025-38115",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38115"
},
{
"name": "CVE-2025-21758",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21758"
},
{
"name": "CVE-2023-0767",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0767"
},
{
"name": "CVE-2025-21816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21816"
},
{
"name": "CVE-2025-1795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1795"
},
{
"name": "CVE-2021-35603",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35603"
},
{
"name": "CVE-2025-21996",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21996"
},
{
"name": "CVE-2021-36410",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36410"
},
{
"name": "CVE-2025-21780",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21780"
},
{
"name": "CVE-2017-3612",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3612"
},
{
"name": "CVE-2024-12705",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12705"
},
{
"name": "CVE-2025-38153",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38153"
},
{
"name": "CVE-2025-21787",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21787"
},
{
"name": "CVE-2023-28487",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28487"
},
{
"name": "CVE-2023-22067",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22067"
},
{
"name": "CVE-2023-31439",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31439"
},
{
"name": "CVE-2023-51074",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51074"
},
{
"name": "CVE-2023-23915",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23915"
},
{
"name": "CVE-2025-4517",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4517"
},
{
"name": "CVE-2018-1000074",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000074"
},
{
"name": "CVE-2025-37785",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37785"
},
{
"name": "CVE-2025-21776",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21776"
},
{
"name": "CVE-2024-58003",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58003"
},
{
"name": "CVE-2025-21917",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21917"
},
{
"name": "CVE-2025-21706",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21706"
},
{
"name": "CVE-2025-48964",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48964"
},
{
"name": "CVE-2025-55193",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55193"
},
{
"name": "CVE-2025-38395",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38395"
},
{
"name": "CVE-2023-29499",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29499"
},
{
"name": "CVE-2025-21574",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21574"
},
{
"name": "CVE-2022-42011",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42011"
},
{
"name": "CVE-2023-39318",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39318"
},
{
"name": "CVE-2025-38337",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38337"
},
{
"name": "CVE-2025-21957",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21957"
},
{
"name": "CVE-2025-38727",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38727"
},
{
"name": "CVE-2022-41720",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41720"
},
{
"name": "CVE-2024-1013",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1013"
},
{
"name": "CVE-2022-0319",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0319"
},
{
"name": "CVE-2025-4674",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4674"
},
{
"name": "CVE-2025-30258",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30258"
},
{
"name": "CVE-2025-21999",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21999"
},
{
"name": "CVE-2025-4565",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4565"
},
{
"name": "CVE-2022-41716",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41716"
},
{
"name": "CVE-2025-38465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38465"
},
{
"name": "CVE-2024-56406",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56406"
},
{
"name": "CVE-2025-38513",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38513"
},
{
"name": "CVE-2025-21736",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21736"
},
{
"name": "CVE-2025-21997",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21997"
},
{
"name": "CVE-2025-21741",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21741"
},
{
"name": "CVE-2020-18032",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-18032"
},
{
"name": "CVE-2017-6833",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6833"
},
{
"name": "CVE-2025-21808",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21808"
},
{
"name": "CVE-2019-8324",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8324"
},
{
"name": "CVE-2020-2754",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2754"
},
{
"name": "CVE-2025-38086",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38086"
},
{
"name": "CVE-2024-24788",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24788"
},
{
"name": "CVE-2024-58076",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58076"
},
{
"name": "CVE-2023-24751",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24751"
},
{
"name": "CVE-2025-21708",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21708"
},
{
"name": "CVE-2015-4784",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4784"
},
{
"name": "CVE-2021-4048",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4048"
},
{
"name": "CVE-2023-4527",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4527"
},
{
"name": "CVE-2022-2980",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2980"
},
{
"name": "CVE-2025-5278",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5278"
},
{
"name": "CVE-2025-21992",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21992"
},
{
"name": "CVE-2025-21720",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21720"
},
{
"name": "CVE-2025-32463",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32463"
},
{
"name": "CVE-2015-7747",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7747"
},
{
"name": "CVE-2025-52999",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52999"
},
{
"name": "CVE-2023-34055",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34055"
},
{
"name": "CVE-2024-41965",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41965"
},
{
"name": "CVE-2020-14796",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14796"
},
{
"name": "CVE-2024-56433",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56433"
},
{
"name": "CVE-2023-0464",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0464"
},
{
"name": "CVE-2025-55004",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55004"
},
{
"name": "CVE-2014-8139",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8139"
},
{
"name": "CVE-2025-21580",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21580"
},
{
"name": "CVE-2022-29526",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29526"
},
{
"name": "CVE-2025-5318",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5318"
},
{
"name": "CVE-2025-38003",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38003"
},
{
"name": "CVE-2025-38441",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38441"
},
{
"name": "CVE-2023-51767",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51767"
},
{
"name": "CVE-2025-7783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
},
{
"name": "CVE-2023-6918",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6918"
},
{
"name": "CVE-2023-38037",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38037"
},
{
"name": "CVE-2012-5783",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-5783"
},
{
"name": "CVE-2022-2519",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2519"
},
{
"name": "CVE-2025-55754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55754"
},
{
"name": "CVE-2025-53023",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53023"
},
{
"name": "CVE-2025-21711",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21711"
},
{
"name": "CVE-2025-2998",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2998"
},
{
"name": "CVE-2023-51792",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51792"
},
{
"name": "CVE-2021-20313",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20313"
},
{
"name": "CVE-2022-30633",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30633"
},
{
"name": "CVE-2023-23931",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23931"
},
{
"name": "CVE-2025-21575",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21575"
},
{
"name": "CVE-2025-21978",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21978"
},
{
"name": "CVE-2019-16777",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16777"
},
{
"name": "CVE-2025-21760",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21760"
},
{
"name": "CVE-2023-45913",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45913"
},
{
"name": "CVE-2018-13153",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-13153"
},
{
"name": "CVE-2022-0530",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0530"
},
{
"name": "CVE-2023-48236",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48236"
},
{
"name": "CVE-2025-21947",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21947"
},
{
"name": "CVE-2025-21913",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21913"
},
{
"name": "CVE-2023-34474",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34474"
},
{
"name": "CVE-2025-21665",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21665"
},
{
"name": "CVE-2025-38227",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38227"
},
{
"name": "CVE-2018-1000079",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000079"
},
{
"name": "CVE-2025-4435",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4435"
},
{
"name": "CVE-2024-58079",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58079"
},
{
"name": "CVE-2025-21966",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21966"
},
{
"name": "CVE-2025-21577",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21577"
},
{
"name": "CVE-2021-45931",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45931"
},
{
"name": "CVE-2025-38079",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38079"
},
{
"name": "CVE-2021-28544",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28544"
},
{
"name": "CVE-2021-46828",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46828"
},
{
"name": "CVE-2025-21734",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21734"
},
{
"name": "CVE-2025-32728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32728"
},
{
"name": "CVE-2023-2804",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2804"
},
{
"name": "CVE-2025-21970",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21970"
},
{
"name": "CVE-2021-44964",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44964"
},
{
"name": "CVE-2025-6141",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6141"
},
{
"name": "CVE-2022-42012",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42012"
},
{
"name": "CVE-2018-14437",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14437"
},
{
"name": "CVE-2024-13978",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-13978"
},
{
"name": "CVE-2025-21890",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21890"
},
{
"name": "CVE-2025-61984",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61984"
},
{
"name": "CVE-2021-3596",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3596"
},
{
"name": "CVE-2025-21916",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21916"
},
{
"name": "CVE-2025-21925",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21925"
},
{
"name": "CVE-2024-57883",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57883"
},
{
"name": "CVE-2022-21628",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21628"
},
{
"name": "CVE-2017-6830",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6830"
},
{
"name": "CVE-2025-21927",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21927"
},
{
"name": "CVE-2021-3520",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3520"
},
{
"name": "CVE-2024-47814",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47814"
},
{
"name": "CVE-2022-2923",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2923"
},
{
"name": "CVE-2025-21799",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21799"
},
{
"name": "CVE-2024-21011",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21011"
},
{
"name": "CVE-2025-6020",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6020"
},
{
"name": "CVE-2015-2626",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2626"
},
{
"name": "CVE-2024-45336",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45336"
},
{
"name": "CVE-2025-21748",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21748"
},
{
"name": "CVE-2025-21785",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21785"
},
{
"name": "CVE-2020-10029",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10029"
},
{
"name": "CVE-2025-7425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7425"
},
{
"name": "CVE-2023-3978",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3978"
},
{
"name": "CVE-2021-46310",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46310"
},
{
"name": "CVE-2022-36227",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36227"
},
{
"name": "CVE-2021-2369",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2369"
},
{
"name": "CVE-2025-21883",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21883"
},
{
"name": "CVE-2023-29469",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29469"
},
{
"name": "CVE-2024-5535",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5535"
},
{
"name": "CVE-2025-38074",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38074"
},
{
"name": "CVE-2024-58086",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58086"
},
{
"name": "CVE-2025-38119",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38119"
},
{
"name": "CVE-2025-38245",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38245"
},
{
"name": "CVE-2022-37454",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37454"
},
{
"name": "CVE-2021-36770",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36770"
},
{
"name": "CVE-2025-21898",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21898"
},
{
"name": "CVE-2020-14152",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14152"
},
{
"name": "CVE-2025-38324",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38324"
},
{
"name": "CVE-2025-22868",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22868"
},
{
"name": "CVE-2021-36976",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36976"
},
{
"name": "CVE-2024-58051",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58051"
},
{
"name": "CVE-2023-3164",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3164"
},
{
"name": "CVE-2022-3597",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3597"
},
{
"name": "CVE-2023-27535",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27535"
},
{
"name": "CVE-2022-27775",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27775"
},
{
"name": "CVE-2024-56337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56337"
},
{
"name": "CVE-2024-12718",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12718"
},
{
"name": "CVE-2018-25032",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-25032"
},
{
"name": "CVE-2025-9390",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9390"
},
{
"name": "CVE-2025-62813",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62813"
},
{
"name": "CVE-2025-21857",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21857"
},
{
"name": "CVE-2019-9904",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9904"
},
{
"name": "CVE-2025-23085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23085"
},
{
"name": "CVE-2022-42919",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42919"
},
{
"name": "CVE-2024-0450",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0450"
},
{
"name": "CVE-2025-9165",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9165"
},
{
"name": "CVE-2023-1981",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1981"
},
{
"name": "CVE-2023-30571",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-30571"
},
{
"name": "CVE-2022-2231",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2231"
},
{
"name": "CVE-2025-46150",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46150"
},
{
"name": "CVE-2024-12801",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12801"
},
{
"name": "CVE-2024-5642",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5642"
},
{
"name": "CVE-2024-3219",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3219"
},
{
"name": "CVE-2025-21812",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21812"
},
{
"name": "CVE-2015-4781",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4781"
},
{
"name": "CVE-2023-23914",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23914"
},
{
"name": "CVE-2025-38542",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38542"
},
{
"name": "CVE-2025-38344",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38344"
},
{
"name": "CVE-2023-28120",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28120"
},
{
"name": "CVE-2025-37797",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37797"
},
{
"name": "CVE-2025-21848",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21848"
},
{
"name": "CVE-2021-3999",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3999"
},
{
"name": "CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"name": "CVE-2025-38088",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38088"
},
{
"name": "CVE-2025-50096",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50096"
},
{
"name": "CVE-2022-30632",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30632"
},
{
"name": "CVE-2024-47554",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47554"
},
{
"name": "CVE-2022-27774",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27774"
},
{
"name": "CVE-2025-21683",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21683"
},
{
"name": "CVE-2025-38332",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38332"
},
{
"name": "CVE-2020-35492",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-35492"
},
{
"name": "CVE-2025-21908",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21908"
},
{
"name": "CVE-2023-1289",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1289"
},
{
"name": "CVE-2025-38386",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38386"
},
{
"name": "CVE-2023-6349",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6349"
},
{
"name": "CVE-2024-2004",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2004"
},
{
"name": "CVE-2017-3605",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3605"
},
{
"name": "CVE-2025-9232",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9232"
},
{
"name": "CVE-2025-23165",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23165"
},
{
"name": "CVE-2022-40303",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40303"
},
{
"name": "CVE-2023-0801",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0801"
},
{
"name": "CVE-2025-9341",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9341"
},
{
"name": "CVE-2023-29406",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29406"
},
{
"name": "CVE-2017-7244",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7244"
},
{
"name": "CVE-2023-39319",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39319"
},
{
"name": "CVE-2025-21895",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21895"
},
{
"name": "CVE-2025-61795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61795"
},
{
"name": "CVE-2025-1377",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1377"
},
{
"name": "CVE-2025-30705",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30705"
},
{
"name": "CVE-2018-16412",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16412"
},
{
"name": "CVE-2025-22005",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22005"
},
{
"name": "CVE-2019-6462",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6462"
},
{
"name": "CVE-2025-21935",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21935"
},
{
"name": "CVE-2022-4645",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4645"
},
{
"name": "CVE-2021-32493",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32493"
},
{
"name": "CVE-2023-24754",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24754"
},
{
"name": "CVE-2020-29509",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29509"
},
{
"name": "CVE-2023-5568",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5568"
},
{
"name": "CVE-2023-38470",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38470"
},
{
"name": "CVE-2025-21675",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21675"
},
{
"name": "CVE-2023-34967",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34967"
},
{
"name": "CVE-2025-38237",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38237"
},
{
"name": "CVE-2025-38174",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38174"
},
{
"name": "CVE-2025-8713",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8713"
},
{
"name": "CVE-2025-21587",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21587"
},
{
"name": "CVE-2022-2869",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2869"
},
{
"name": "CVE-2021-4189",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4189"
},
{
"name": "CVE-2025-50088",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50088"
},
{
"name": "CVE-2024-24785",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24785"
},
{
"name": "CVE-2023-35945",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-35945"
},
{
"name": "CVE-2024-45993",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45993"
},
{
"name": "CVE-2025-6170",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6170"
},
{
"name": "CVE-2021-35937",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35937"
},
{
"name": "CVE-2024-58019",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58019"
},
{
"name": "CVE-2025-9900",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9900"
},
{
"name": "CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"name": "CVE-2025-21888",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21888"
},
{
"name": "CVE-2025-21866",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21866"
},
{
"name": "CVE-2023-40745",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40745"
},
{
"name": "CVE-2022-1962",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1962"
},
{
"name": "CVE-2024-45337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
},
{
"name": "CVE-2025-3730",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3730"
},
{
"name": "CVE-2025-22010",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22010"
},
{
"name": "CVE-2024-25260",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25260"
},
{
"name": "CVE-2024-21147",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21147"
},
{
"name": "CVE-2025-38037",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38037"
},
{
"name": "CVE-2017-3609",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3609"
},
{
"name": "CVE-2024-57990",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57990"
},
{
"name": "CVE-2021-29921",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-29921"
},
{
"name": "CVE-2022-41717",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41717"
},
{
"name": "CVE-2014-9636",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9636"
},
{
"name": "CVE-2025-5351",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5351"
},
{
"name": "CVE-2025-52520",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52520"
},
{
"name": "CVE-2022-1622",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1622"
},
{
"name": "CVE-2017-3611",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3611"
},
{
"name": "CVE-2024-53427",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-53427"
},
{
"name": "CVE-2022-2521",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2521"
},
{
"name": "CVE-2023-49582",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-49582"
},
{
"name": "CVE-2025-43857",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43857"
},
{
"name": "CVE-2025-31344",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31344"
},
{
"name": "CVE-2025-21976",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21976"
},
{
"name": "CVE-2023-28321",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28321"
},
{
"name": "CVE-2024-57975",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57975"
},
{
"name": "CVE-2020-14581",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14581"
},
{
"name": "CVE-2024-7254",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7254"
},
{
"name": "CVE-2021-32491",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32491"
},
{
"name": "CVE-2025-50077",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50077"
},
{
"name": "CVE-2022-2309",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2309"
},
{
"name": "CVE-2024-52533",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52533"
},
{
"name": "CVE-2023-24536",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24536"
},
{
"name": "CVE-2023-22025",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22025"
},
{
"name": "CVE-2021-43527",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-43527"
},
{
"name": "CVE-2022-0924",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0924"
},
{
"name": "CVE-2025-24014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24014"
},
{
"name": "CVE-2022-33068",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33068"
},
{
"name": "CVE-2025-38342",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38342"
},
{
"name": "CVE-2025-54988",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54988"
},
{
"name": "CVE-2024-58068",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58068"
},
{
"name": "CVE-2025-23083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23083"
},
{
"name": "CVE-2015-4777",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4777"
},
{
"name": "CVE-2025-7039",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7039"
},
{
"name": "CVE-2025-38167",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38167"
},
{
"name": "CVE-2022-42915",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42915"
},
{
"name": "CVE-2023-0687",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0687"
},
{
"name": "CVE-2024-57998",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57998"
},
{
"name": "CVE-2021-3426",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3426"
},
{
"name": "CVE-2022-32221",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32221"
},
{
"name": "CVE-2022-1304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1304"
},
{
"name": "CVE-2021-2388",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2388"
},
{
"name": "CVE-2022-37434",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37434"
},
{
"name": "CVE-2025-38257",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38257"
},
{
"name": "CVE-2022-29458",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29458"
},
{
"name": "CVE-2025-38206",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38206"
},
{
"name": "CVE-2019-12900",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-12900"
},
{
"name": "CVE-2023-5156",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5156"
},
{
"name": "CVE-2024-39908",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39908"
},
{
"name": "CVE-2025-27220",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27220"
},
{
"name": "CVE-2021-32256",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32256"
},
{
"name": "CVE-2022-22942",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22942"
},
{
"name": "CVE-2024-38950",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38950"
},
{
"name": "CVE-2025-55163",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55163"
},
{
"name": "CVE-2025-21862",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21862"
},
{
"name": "CVE-2023-47282",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47282"
},
{
"name": "CVE-2016-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-20012"
},
{
"name": "CVE-2025-38111",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38111"
},
{
"name": "CVE-2024-0553",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0553"
},
{
"name": "CVE-2022-44638",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-44638"
},
{
"name": "CVE-2019-8325",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8325"
},
{
"name": "CVE-2025-21950",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21950"
},
{
"name": "CVE-2025-5918",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5918"
},
{
"name": "CVE-2019-3792",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-3792"
},
{
"name": "CVE-2022-43235",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43235"
},
{
"name": "CVE-2025-50092",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50092"
},
{
"name": "CVE-2025-50099",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50099"
},
{
"name": "CVE-2017-3614",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3614"
},
{
"name": "CVE-2022-0562",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0562"
},
{
"name": "CVE-2022-28131",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28131"
},
{
"name": "CVE-2025-22001",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22001"
},
{
"name": "CVE-2024-10524",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10524"
},
{
"name": "CVE-2025-40017",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40017"
},
{
"name": "CVE-2023-45919",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45919"
},
{
"name": "CVE-2025-38326",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38326"
},
{
"name": "CVE-2025-3263",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3263"
},
{
"name": "CVE-2025-4878",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4878"
},
{
"name": "CVE-2018-15607",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-15607"
},
{
"name": "CVE-2025-21899",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21899"
},
{
"name": "CVE-2025-32990",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32990"
},
{
"name": "CVE-2025-38384",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38384"
},
{
"name": "CVE-2025-40778",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40778"
},
{
"name": "CVE-2025-21719",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21719"
},
{
"name": "CVE-2025-38424",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38424"
},
{
"name": "CVE-2025-38430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38430"
},
{
"name": "CVE-2025-21718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21718"
},
{
"name": "CVE-2025-3001",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3001"
},
{
"name": "CVE-2025-9288",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9288"
},
{
"name": "CVE-2021-35588",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35588"
},
{
"name": "CVE-2022-32545",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32545"
},
{
"name": "CVE-2025-21694",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21694"
},
{
"name": "CVE-2025-41244",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41244"
},
{
"name": "CVE-2022-24675",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24675"
},
{
"name": "CVE-2023-2603",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2603"
},
{
"name": "CVE-2025-21820",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21820"
},
{
"name": "CVE-2017-6838",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6838"
},
{
"name": "CVE-2024-41946",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41946"
},
{
"name": "CVE-2025-4802",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4802"
},
{
"name": "CVE-2024-21140",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21140"
},
{
"name": "CVE-2024-41817",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41817"
},
{
"name": "CVE-2024-57979",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57979"
},
{
"name": "CVE-2024-58071",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58071"
},
{
"name": "CVE-2025-21994",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21994"
},
{
"name": "CVE-2025-30684",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30684"
},
{
"name": "CVE-2017-6835",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6835"
},
{
"name": "CVE-2024-21094",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21094"
},
{
"name": "CVE-2025-48989",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48989"
},
{
"name": "CVE-2024-9143",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9143"
},
{
"name": "CVE-2023-0799",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0799"
},
{
"name": "CVE-2024-12087",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12087"
},
{
"name": "CVE-2025-38420",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38420"
},
{
"name": "CVE-2021-3521",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3521"
},
{
"name": "CVE-2022-23806",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23806"
},
{
"name": "CVE-2022-21365",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21365"
},
{
"name": "CVE-2025-21943",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21943"
},
{
"name": "CVE-2019-16775",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16775"
},
{
"name": "CVE-2024-57997",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57997"
},
{
"name": "CVE-2025-38160",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38160"
},
{
"name": "CVE-2024-33601",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33601"
},
{
"name": "CVE-2025-32989",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32989"
},
{
"name": "CVE-2025-6051",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6051"
},
{
"name": "CVE-2022-21283",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21283"
},
{
"name": "CVE-2022-31782",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-31782"
},
{
"name": "CVE-2025-50093",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50093"
},
{
"name": "CVE-2025-38107",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38107"
},
{
"name": "CVE-2025-32434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32434"
},
{
"name": "CVE-2025-22874",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22874"
},
{
"name": "CVE-2025-53069",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53069"
},
{
"name": "CVE-2025-38085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38085"
},
{
"name": "CVE-2025-21806",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21806"
},
{
"name": "CVE-2025-38222",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38222"
},
{
"name": "CVE-2025-38197",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38197"
},
{
"name": "CVE-2022-1271",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1271"
},
{
"name": "CVE-2024-28085",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28085"
},
{
"name": "CVE-2022-43253",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43253"
},
{
"name": "CVE-2021-36221",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36221"
},
{
"name": "CVE-2024-57977",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57977"
},
{
"name": "CVE-2018-1000075",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000075"
},
{
"name": "CVE-2025-53019",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53019"
},
{
"name": "CVE-2020-14782",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14782"
},
{
"name": "CVE-2025-50059",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50059"
},
{
"name": "CVE-2024-5569",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5569"
},
{
"name": "CVE-2024-57952",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57952"
},
{
"name": "CVE-2025-53367",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53367"
},
{
"name": "CVE-2025-21579",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21579"
},
{
"name": "CVE-2021-45942",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45942"
},
{
"name": "CVE-2022-1615",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1615"
},
{
"name": "CVE-2025-21928",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21928"
},
{
"name": "CVE-2021-20246",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20246"
},
{
"name": "CVE-2025-21707",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21707"
},
{
"name": "CVE-2023-24755",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24755"
},
{
"name": "CVE-2024-34156",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34156"
},
{
"name": "CVE-2022-2880",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2880"
},
{
"name": "CVE-2025-5025",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5025"
},
{
"name": "CVE-2023-21937",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21937"
},
{
"name": "CVE-2022-23773",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23773"
},
{
"name": "CVE-2025-22007",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22007"
},
{
"name": "CVE-2023-24539",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24539"
},
{
"name": "CVE-2024-27281",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27281"
},
{
"name": "CVE-2025-38467",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38467"
},
{
"name": "CVE-2024-34459",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34459"
},
{
"name": "CVE-2025-21804",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21804"
},
{
"name": "CVE-2021-34558",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-34558"
},
{
"name": "CVE-2021-3737",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3737"
},
{
"name": "CVE-2025-49795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49795"
},
{
"name": "CVE-2017-6837",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6837"
},
{
"name": "CVE-2014-9913",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9913"
},
{
"name": "CVE-2025-21934",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21934"
},
{
"name": "CVE-2025-38072",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38072"
},
{
"name": "CVE-2025-53044",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53044"
},
{
"name": "CVE-2023-6237",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6237"
},
{
"name": "CVE-2024-37407",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37407"
},
{
"name": "CVE-2015-4775",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4775"
},
{
"name": "CVE-2025-22011",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22011"
},
{
"name": "CVE-2022-1725",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1725"
},
{
"name": "CVE-2022-43252",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43252"
},
{
"name": "CVE-2023-0614",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0614"
},
{
"name": "CVE-2016-0694",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0694"
},
{
"name": "CVE-2023-6228",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6228"
},
{
"name": "CVE-2021-46848",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46848"
},
{
"name": "CVE-2024-5197",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5197"
},
{
"name": "CVE-2020-21606",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-21606"
},
{
"name": "CVE-2025-38075",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38075"
},
{
"name": "CVE-2025-38000",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38000"
},
{
"name": "CVE-2022-40674",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40674"
},
{
"name": "CVE-2025-1376",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1376"
},
{
"name": "CVE-2025-30761",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30761"
},
{
"name": "CVE-2001-1269",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-1269"
},
{
"name": "CVE-2025-50087",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50087"
},
{
"name": "CVE-2024-22365",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22365"
},
{
"name": "CVE-2025-38058",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38058"
},
{
"name": "CVE-2023-20873",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-20873"
},
{
"name": "CVE-2024-47535",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47535"
},
{
"name": "CVE-2022-4450",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4450"
},
{
"name": "CVE-2025-38617",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38617"
},
{
"name": "CVE-2025-21762",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21762"
},
{
"name": "CVE-2023-47169",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47169"
},
{
"name": "CVE-2025-38122",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38122"
},
{
"name": "CVE-2025-21801",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21801"
},
{
"name": "CVE-2024-7592",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7592"
},
{
"name": "CVE-2025-48988",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48988"
},
{
"name": "CVE-2025-38083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38083"
},
{
"name": "CVE-2023-2650",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2650"
},
{
"name": "CVE-2023-0795",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0795"
},
{
"name": "CVE-2015-2583",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2583"
},
{
"name": "CVE-2025-21692",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21692"
},
{
"name": "CVE-2025-38173",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38173"
},
{
"name": "CVE-2022-21434",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21434"
},
{
"name": "CVE-2025-2148",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2148"
},
{
"name": "CVE-2024-2236",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2236"
},
{
"name": "CVE-2025-38143",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38143"
},
{
"name": "CVE-2023-4039",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4039"
},
{
"name": "CVE-2025-45768",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-45768"
},
{
"name": "CVE-2023-38469",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38469"
},
{
"name": "CVE-2024-38428",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38428"
},
{
"name": "CVE-2022-3821",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3821"
},
{
"name": "CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"name": "CVE-2025-21869",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21869"
},
{
"name": "CVE-2025-1365",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1365"
},
{
"name": "CVE-2023-32570",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32570"
},
{
"name": "CVE-2025-54410",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54410"
},
{
"name": "CVE-2023-52970",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52970"
},
{
"name": "CVE-2022-3996",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3996"
},
{
"name": "CVE-2024-25062",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25062"
},
{
"name": "CVE-2016-5841",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5841"
},
{
"name": "CVE-2022-2879",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2879"
},
{
"name": "CVE-2025-53101",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53101"
},
{
"name": "CVE-2022-32205",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32205"
},
{
"name": "CVE-2023-27534",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27534"
},
{
"name": "CVE-2024-2398",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2398"
},
{
"name": "CVE-2023-24532",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24532"
},
{
"name": "CVE-2023-27536",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27536"
},
{
"name": "CVE-2025-52434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52434"
},
{
"name": "CVE-2024-54458",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54458"
},
{
"name": "CVE-2022-44267",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-44267"
},
{
"name": "CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"name": "CVE-2015-4783",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4783"
},
{
"name": "CVE-2019-8321",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8321"
},
{
"name": "CVE-2025-21826",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21826"
},
{
"name": "CVE-2025-29768",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-29768"
},
{
"name": "CVE-2015-4774",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4774"
},
{
"name": "CVE-2023-50495",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-50495"
},
{
"name": "CVE-2022-23772",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23772"
},
{
"name": "CVE-2022-21294",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21294"
},
{
"name": "CVE-2025-21750",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21750"
},
{
"name": "CVE-2017-11164",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11164"
},
{
"name": "CVE-2024-57924",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57924"
},
{
"name": "CVE-2025-21912",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21912"
},
{
"name": "CVE-2018-13440",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-13440"
},
{
"name": "CVE-2022-42898",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42898"
},
{
"name": "CVE-2025-46393",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46393"
},
{
"name": "CVE-2022-43551",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43551"
},
{
"name": "CVE-2021-0561",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-0561"
},
{
"name": "CVE-2018-12599",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12599"
},
{
"name": "CVE-2025-21859",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21859"
},
{
"name": "CVE-2025-38416",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38416"
},
{
"name": "CVE-2022-1587",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1587"
},
{
"name": "CVE-2025-21825",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21825"
},
{
"name": "CVE-2025-30698",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30698"
},
{
"name": "CVE-2017-7246",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7246"
},
{
"name": "CVE-2020-2755",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2755"
},
{
"name": "CVE-2025-8714",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8714"
},
{
"name": "CVE-2023-27533",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27533"
},
{
"name": "CVE-2022-0284",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0284"
},
{
"name": "CVE-2017-7500",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7500"
},
{
"name": "CVE-2025-9086",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9086"
},
{
"name": "CVE-2025-49124",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49124"
},
{
"name": "CVE-2023-6481",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6481"
},
{
"name": "CVE-2024-58016",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58016"
},
{
"name": "CVE-2020-14779",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14779"
},
{
"name": "CVE-2025-21903",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21903"
},
{
"name": "CVE-2021-41772",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41772"
},
{
"name": "CVE-2021-32292",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32292"
},
{
"name": "CVE-2025-38194",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38194"
},
{
"name": "CVE-2024-0727",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0727"
},
{
"name": "CVE-2023-6378",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6378"
},
{
"name": "CVE-2024-10041",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10041"
},
{
"name": "CVE-2023-6129",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6129"
},
{
"name": "CVE-2022-34903",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34903"
},
{
"name": "CVE-2023-1667",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1667"
},
{
"name": "CVE-2022-2953",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2953"
},
{
"name": "CVE-2022-43238",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43238"
},
{
"name": "CVE-2025-3121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3121"
},
{
"name": "CVE-2022-4899",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4899"
},
{
"name": "CVE-2022-43680",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43680"
},
{
"name": "CVE-2025-21956",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21956"
},
{
"name": "CVE-2024-20696",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20696"
},
{
"name": "CVE-2025-21761",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21761"
},
{
"name": "CVE-2025-46149",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46149"
},
{
"name": "CVE-2021-26945",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-26945"
},
{
"name": "CVE-2025-37932",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37932"
},
{
"name": "CVE-2022-3219",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3219"
},
{
"name": "CVE-2025-46152",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46152"
},
{
"name": "CVE-2025-37890",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37890"
},
{
"name": "CVE-2024-57951",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57951"
},
{
"name": "CVE-2025-4673",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4673"
},
{
"name": "CVE-2022-34169",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34169"
},
{
"name": "CVE-2025-38348",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38348"
},
{
"name": "CVE-2023-34969",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34969"
},
{
"name": "CVE-2025-21844",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21844"
},
{
"name": "CVE-2025-21885",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21885"
},
{
"name": "CVE-2020-22916",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-22916"
},
{
"name": "CVE-2025-21784",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21784"
},
{
"name": "CVE-2025-31672",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31672"
},
{
"name": "CVE-2025-21681",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21681"
},
{
"name": "CVE-2023-22045",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22045"
},
{
"name": "CVE-2025-38540",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38540"
},
{
"name": "CVE-2025-5916",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5916"
},
{
"name": "CVE-2025-21676",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21676"
},
{
"name": "CVE-2025-30721",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30721"
},
{
"name": "CVE-2025-38403",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38403"
},
{
"name": "CVE-2022-28463",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28463"
},
{
"name": "CVE-2022-23308",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23308"
},
{
"name": "CVE-2025-21726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21726"
},
{
"name": "CVE-2023-29400",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29400"
},
{
"name": "CVE-2025-58056",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58056"
},
{
"name": "CVE-2025-22871",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22871"
},
{
"name": "CVE-2018-3779",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3779"
},
{
"name": "CVE-2024-21138",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21138"
},
{
"name": "CVE-2020-28196",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-28196"
},
{
"name": "CVE-2024-27407",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27407"
},
{
"name": "CVE-2025-41232",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41232"
},
{
"name": "CVE-2024-58020",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58020"
},
{
"name": "CVE-2025-50091",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50091"
},
{
"name": "CVE-2025-10911",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10911"
},
{
"name": "CVE-2025-32988",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32988"
},
{
"name": "CVE-2021-31566",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-31566"
},
{
"name": "CVE-2024-10963",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10963"
},
{
"name": "CVE-2022-28805",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28805"
},
{
"name": "CVE-2024-26461",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26461"
},
{
"name": "CVE-2024-34750",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34750"
},
{
"name": "CVE-2021-29923",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-29923"
},
{
"name": "CVE-2017-3604",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3604"
},
{
"name": "CVE-2025-21723",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21723"
},
{
"name": "CVE-2023-0804",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0804"
},
{
"name": "CVE-2023-22049",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22049"
},
{
"name": "CVE-2024-24787",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24787"
},
{
"name": "CVE-2025-21802",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21802"
},
{
"name": "CVE-2022-21341",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21341"
},
{
"name": "CVE-2025-38146",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38146"
},
{
"name": "CVE-2025-21705",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21705"
},
{
"name": "CVE-2024-38828",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38828"
},
{
"name": "CVE-2023-27538",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27538"
},
{
"name": "CVE-2022-1355",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1355"
},
{
"name": "CVE-2025-47291",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47291"
},
{
"name": "CVE-2023-4641",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4641"
},
{
"name": "CVE-2025-27113",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27113"
},
{
"name": "CVE-2024-47081",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47081"
},
{
"name": "CVE-2023-36054",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-36054"
},
{
"name": "CVE-2024-26458",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26458"
},
{
"name": "CVE-2025-38418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38418"
},
{
"name": "CVE-2025-38090",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38090"
},
{
"name": "CVE-2025-21721",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21721"
},
{
"name": "CVE-2025-21810",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21810"
},
{
"name": "CVE-2022-1420",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1420"
},
{
"name": "CVE-2022-23218",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23218"
},
{
"name": "CVE-2021-24031",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-24031"
},
{
"name": "CVE-2025-23166",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23166"
},
{
"name": "CVE-2022-41724",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41724"
},
{
"name": "CVE-2025-46153",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46153"
},
{
"name": "CVE-2025-21877",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21877"
},
{
"name": "CVE-2023-0797",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0797"
},
{
"name": "CVE-2025-5994",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5994"
},
{
"name": "CVE-2021-38115",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-38115"
},
{
"name": "CVE-2025-38415",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38415"
},
{
"name": "CVE-2021-31879",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-31879"
},
{
"name": "CVE-2024-55549",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-55549"
},
{
"name": "CVE-2020-8908",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8908"
},
{
"name": "CVE-2024-49887",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-49887"
},
{
"name": "CVE-2025-22134",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22134"
},
{
"name": "CVE-2021-35578",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35578"
},
{
"name": "CVE-2025-1215",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1215"
},
{
"name": "CVE-2024-6119",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6119"
},
{
"name": "CVE-2023-1916",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1916"
},
{
"name": "CVE-2021-20309",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20309"
},
{
"name": "CVE-2022-29217",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29217"
},
{
"name": "CVE-2024-0397",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0397"
},
{
"name": "CVE-2022-30634",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30634"
},
{
"name": "CVE-2023-38472",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38472"
},
{
"name": "CVE-2024-56826",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56826"
},
{
"name": "CVE-2017-12643",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12643"
},
{
"name": "CVE-2024-57953",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57953"
},
{
"name": "CVE-2020-14583",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14583"
},
{
"name": "CVE-2025-24294",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24294"
},
{
"name": "CVE-2023-48232",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48232"
},
{
"name": "CVE-2021-26720",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-26720"
},
{
"name": "CVE-2025-54801",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54801"
},
{
"name": "CVE-2025-40909",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40909"
},
{
"name": "CVE-2025-53054",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53054"
},
{
"name": "CVE-2025-21878",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21878"
},
{
"name": "CVE-2023-24756",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24756"
},
{
"name": "CVE-2017-3607",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3607"
},
{
"name": "CVE-2021-44716",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44716"
},
{
"name": "CVE-2022-2520",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2520"
},
{
"name": "CVE-2022-21340",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21340"
},
{
"name": "CVE-2024-47874",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47874"
},
{
"name": "CVE-2025-21670",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21670"
},
{
"name": "CVE-2025-9403",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9403"
},
{
"name": "CVE-2023-1255",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1255"
},
{
"name": "CVE-2025-21739",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21739"
},
{
"name": "CVE-2016-4074",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4074"
},
{
"name": "CVE-2024-0746",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0746"
},
{
"name": "CVE-2025-21775",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21775"
},
{
"name": "CVE-2024-12254",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12254"
},
{
"name": "CVE-2025-21846",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21846"
},
{
"name": "CVE-2022-33099",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33099"
},
{
"name": "CVE-2023-45931",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45931"
},
{
"name": "CVE-2025-8114",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8114"
},
{
"name": "CVE-2025-38400",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38400"
},
{
"name": "CVE-2023-6004",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6004"
},
{
"name": "CVE-2025-32387",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32387"
},
{
"name": "CVE-2024-26775",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26775"
},
{
"name": "CVE-2022-25309",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25309"
},
{
"name": "CVE-2025-4516",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4516"
},
{
"name": "CVE-2025-38136",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38136"
},
{
"name": "CVE-2024-38808",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38808"
},
{
"name": "CVE-2025-22869",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22869"
},
{
"name": "CVE-2024-12747",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12747"
},
{
"name": "CVE-2022-3358",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3358"
},
{
"name": "CVE-2023-41175",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-41175"
},
{
"name": "CVE-2023-48234",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48234"
},
{
"name": "CVE-2025-55212",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55212"
},
{
"name": "CVE-2022-36087",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36087"
},
{
"name": "CVE-2022-32547",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32547"
},
{
"name": "CVE-2025-6021",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6021"
},
{
"name": "CVE-2022-0351",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0351"
},
{
"name": "CVE-2022-35737",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35737"
},
{
"name": "CVE-2022-21293",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21293"
},
{
"name": "CVE-2022-2097",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2097"
},
{
"name": "CVE-2022-26280",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26280"
},
{
"name": "CVE-2025-37752",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37752"
},
{
"name": "CVE-2025-55668",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55668"
},
{
"name": "CVE-2023-7008",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-7008"
},
{
"name": "CVE-2022-1354",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1354"
},
{
"name": "CVE-2023-24540",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24540"
},
{
"name": "CVE-2025-21873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21873"
},
{
"name": "CVE-2024-4603",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4603"
},
{
"name": "CVE-2025-38048",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38048"
},
{
"name": "CVE-2019-13147",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13147"
},
{
"name": "CVE-2025-50104",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50104"
},
{
"name": "CVE-2025-25193",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25193"
},
{
"name": "CVE-2020-2800",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2800"
},
{
"name": "CVE-2024-8096",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8096"
},
{
"name": "CVE-2018-11655",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-11655"
},
{
"name": "CVE-2022-4415",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4415"
},
{
"name": "CVE-2022-2928",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2928"
},
{
"name": "CVE-2025-21765",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21765"
},
{
"name": "CVE-2023-3576",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3576"
},
{
"name": "CVE-2025-38477",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38477"
},
{
"name": "CVE-2023-4806",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4806"
},
{
"name": "CVE-2025-61772",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61772"
},
{
"name": "CVE-2025-57803",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-57803"
},
{
"name": "CVE-2023-46246",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46246"
},
{
"name": "CVE-2025-21782",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21782"
},
{
"name": "CVE-2023-31437",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31437"
},
{
"name": "CVE-2023-47039",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47039"
},
{
"name": "CVE-2025-30722",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30722"
},
{
"name": "CVE-2024-43802",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43802"
},
{
"name": "CVE-2025-38177",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38177"
},
{
"name": "CVE-2016-2781",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2781"
},
{
"name": "CVE-2023-31484",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31484"
},
{
"name": "CVE-2024-56827",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56827"
},
{
"name": "CVE-2023-29383",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29383"
},
{
"name": "CVE-2024-21145",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21145"
},
{
"name": "CVE-2022-32206",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32206"
},
{
"name": "CVE-2023-37769",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-37769"
},
{
"name": "CVE-2025-21926",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21926"
},
{
"name": "CVE-2022-21282",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21282"
},
{
"name": "CVE-2022-21349",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21349"
},
{
"name": "CVE-2020-29511",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29511"
},
{
"name": "CVE-2024-50602",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50602"
},
{
"name": "CVE-2015-7697",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7697"
},
{
"name": "CVE-2025-22870",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22870"
},
{
"name": "CVE-2025-21742",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21742"
},
{
"name": "CVE-2025-30687",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30687"
},
{
"name": "CVE-2023-21968",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21968"
},
{
"name": "CVE-2022-43243",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43243"
},
{
"name": "CVE-2024-58002",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58002"
},
{
"name": "CVE-2017-16231",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-16231"
},
{
"name": "CVE-2025-38406",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38406"
},
{
"name": "CVE-2025-50101",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50101"
},
{
"name": "CVE-2025-21930",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21930"
},
{
"name": "CVE-2021-35942",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35942"
},
{
"name": "CVE-2025-46701",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46701"
},
{
"name": "CVE-2025-38001",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38001"
},
{
"name": "CVE-2025-32415",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32415"
},
{
"name": "CVE-2025-24855",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24855"
},
{
"name": "CVE-2025-5702",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5702"
},
{
"name": "CVE-2025-21870",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21870"
},
{
"name": "CVE-2017-9409",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-9409"
},
{
"name": "CVE-2023-24537",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24537"
},
{
"name": "CVE-2018-1000077",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000077"
},
{
"name": "CVE-2025-21892",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21892"
},
{
"name": "CVE-2024-58052",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58052"
},
{
"name": "CVE-2025-21944",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21944"
},
{
"name": "CVE-2025-21905",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21905"
},
{
"name": "CVE-2024-30171",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-30171"
},
{
"name": "CVE-2024-23337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-23337"
},
{
"name": "CVE-2016-0689",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0689"
},
{
"name": "CVE-2025-38352",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38352"
},
{
"name": "CVE-2025-30749",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30749"
},
{
"name": "CVE-2024-54456",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54456"
},
{
"name": "CVE-2025-61748",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61748"
},
{
"name": "CVE-2025-21920",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21920"
},
{
"name": "CVE-2025-55554",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55554"
},
{
"name": "CVE-2024-43168",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43168"
},
{
"name": "CVE-2014-8140",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8140"
},
{
"name": "CVE-2025-22235",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22235"
},
{
"name": "CVE-2025-22016",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22016"
},
{
"name": "CVE-2025-4207",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4207"
},
{
"name": "CVE-2021-45346",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45346"
},
{
"name": "CVE-2025-37756",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37756"
},
{
"name": "CVE-2022-0908",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0908"
},
{
"name": "CVE-2025-38263",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38263"
},
{
"name": "CVE-2025-21667",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21667"
},
{
"name": "CVE-2025-9230",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9230"
},
{
"name": "CVE-2024-46901",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-46901"
},
{
"name": "CVE-2023-49083",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-49083"
},
{
"name": "CVE-2025-21955",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21955"
},
{
"name": "CVE-2025-8677",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8677"
},
{
"name": "CVE-2025-21773",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21773"
},
{
"name": "CVE-2025-53040",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53040"
},
{
"name": "CVE-2025-38218",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38218"
},
{
"name": "CVE-2023-45287",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45287"
},
{
"name": "CVE-2025-53906",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53906"
},
{
"name": "CVE-2025-27789",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27789"
},
{
"name": "CVE-2025-1352",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1352"
},
{
"name": "CVE-2024-43167",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43167"
},
{
"name": "CVE-2021-28861",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28861"
},
{
"name": "CVE-2024-4741",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4741"
},
{
"name": "CVE-2022-21248",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21248"
},
{
"name": "CVE-2021-33574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33574"
},
{
"name": "CVE-2018-1000035",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000035"
},
{
"name": "CVE-2021-40211",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40211"
},
{
"name": "CVE-2025-48924",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48924"
},
{
"name": "CVE-2024-58001",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58001"
},
{
"name": "CVE-2025-38393",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38393"
},
{
"name": "CVE-2024-26256",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26256"
},
{
"name": "CVE-2023-21930",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21930"
},
{
"name": "CVE-2019-18276",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18276"
},
{
"name": "CVE-2025-38618",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38618"
},
{
"name": "CVE-2021-3326",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3326"
},
{
"name": "CVE-2023-2283",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2283"
},
{
"name": "CVE-2020-0499",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0499"
},
{
"name": "CVE-2025-8916",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8916"
},
{
"name": "CVE-2025-21724",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21724"
},
{
"name": "CVE-2025-32414",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32414"
},
{
"name": "CVE-2025-8885",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8885"
},
{
"name": "CVE-2025-3136",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3136"
},
{
"name": "CVE-2025-55160",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55160"
},
{
"name": "CVE-2025-21891",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21891"
},
{
"name": "CVE-2025-38249",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38249"
},
{
"name": "CVE-2023-40403",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40403"
},
{
"name": "CVE-2025-22013",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22013"
},
{
"name": "CVE-2024-50157",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50157"
},
{
"name": "CVE-2022-48703",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48703"
},
{
"name": "CVE-2025-38154",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38154"
},
{
"name": "CVE-2022-1674",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1674"
},
{
"name": "CVE-2024-20918",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20918"
},
{
"name": "CVE-2025-21858",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21858"
},
{
"name": "CVE-2025-41249",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41249"
},
{
"name": "CVE-2022-30699",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30699"
},
{
"name": "CVE-2025-21672",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21672"
},
{
"name": "CVE-2025-38389",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38389"
},
{
"name": "CVE-2025-38448",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38448"
},
{
"name": "CVE-2022-48281",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48281"
},
{
"name": "CVE-2023-2426",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2426"
},
{
"name": "CVE-2021-35938",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35938"
},
{
"name": "CVE-2025-30704",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30704"
},
{
"name": "CVE-2021-35564",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35564"
},
{
"name": "CVE-2024-57949",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57949"
},
{
"name": "CVE-2025-1632",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1632"
},
{
"name": "CVE-2021-20176",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20176"
},
{
"name": "CVE-2025-21979",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21979"
},
{
"name": "CVE-2022-3278",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3278"
},
{
"name": "CVE-2022-30580",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30580"
},
{
"name": "CVE-2025-21821",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21821"
},
{
"name": "CVE-2022-28321",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28321"
},
{
"name": "CVE-2025-55298",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55298"
},
{
"name": "CVE-2022-43241",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43241"
},
{
"name": "CVE-2017-3606",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3606"
},
{
"name": "CVE-2023-52969",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52969"
},
{
"name": "CVE-2018-1000073",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000073"
},
{
"name": "CVE-2025-38052",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38052"
},
{
"name": "CVE-2025-38377",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38377"
},
{
"name": "CVE-2023-20883",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-20883"
},
{
"name": "CVE-2025-21733",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21733"
},
{
"name": "CVE-2023-22656",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22656"
},
{
"name": "CVE-2025-46551",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46551"
},
{
"name": "CVE-2025-43965",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43965"
},
{
"name": "CVE-2022-40090",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40090"
},
{
"name": "CVE-2021-36408",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36408"
},
{
"name": "CVE-2023-24329",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24329"
},
{
"name": "CVE-2025-21963",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21963"
},
{
"name": "CVE-2025-53045",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53045"
},
{
"name": "CVE-2023-39327",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39327"
},
{
"name": "CVE-2017-18253",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-18253"
},
{
"name": "CVE-2024-12243",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12243"
},
{
"name": "CVE-2024-26462",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26462"
},
{
"name": "CVE-2024-58053",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58053"
},
{
"name": "CVE-2025-38516",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38516"
},
{
"name": "CVE-2025-30693",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30693"
},
{
"name": "CVE-2025-38462",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38462"
},
{
"name": "CVE-2025-38350",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38350"
},
{
"name": "CVE-2025-38428",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38428"
},
{
"name": "CVE-2025-27363",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27363"
},
{
"name": "CVE-2018-13410",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-13410"
},
{
"name": "CVE-2025-2099",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2099"
},
{
"name": "CVE-2025-38262",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38262"
},
{
"name": "CVE-2025-6638",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6638"
},
{
"name": "CVE-2025-21585",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21585"
},
{
"name": "CVE-2023-24531",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24531"
},
{
"name": "CVE-2025-38138",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38138"
},
{
"name": "CVE-2021-3610",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3610"
},
{
"name": "CVE-2024-58077",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58077"
},
{
"name": "CVE-2025-5283",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5283"
},
{
"name": "CVE-2025-21754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21754"
},
{
"name": "CVE-2024-12088",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12088"
},
{
"name": "CVE-2023-24538",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24538"
},
{
"name": "CVE-2025-38035",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38035"
},
{
"name": "CVE-2023-2975",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2975"
},
{
"name": "CVE-2025-37997",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37997"
},
{
"name": "CVE-2025-24928",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24928"
},
{
"name": "CVE-2021-44717",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44717"
},
{
"name": "CVE-2025-2312",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2312"
},
{
"name": "CVE-2025-0395",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0395"
},
{
"name": "CVE-2025-53506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53506"
},
{
"name": "CVE-2025-21960",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21960"
},
{
"name": "CVE-2025-38310",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38310"
},
{
"name": "CVE-2025-23084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23084"
},
{
"name": "CVE-2015-4786",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4786"
},
{
"name": "CVE-2020-14155",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14155"
},
{
"name": "CVE-2022-3602",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3602"
},
{
"name": "CVE-2025-37963",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37963"
},
{
"name": "CVE-2022-43250",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43250"
},
{
"name": "CVE-2022-40304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40304"
},
{
"name": "CVE-2025-38226",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38226"
},
{
"name": "CVE-2025-4947",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4947"
},
{
"name": "CVE-2023-4911",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4911"
},
{
"name": "CVE-2022-29804",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29804"
},
{
"name": "CVE-2023-38473",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38473"
},
{
"name": "CVE-2025-38443",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38443"
},
{
"name": "CVE-2025-0725",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0725"
},
{
"name": "CVE-2023-2976",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2976"
},
{
"name": "CVE-2025-52099",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52099"
},
{
"name": "CVE-2023-43887",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43887"
},
{
"name": "CVE-2025-21967",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21967"
},
{
"name": "CVE-2025-7424",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7424"
},
{
"name": "CVE-2025-1094",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1094"
},
{
"name": "CVE-2021-24032",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-24032"
},
{
"name": "CVE-2025-38439",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38439"
},
{
"name": "CVE-2022-1434",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1434"
},
{
"name": "CVE-2025-41254",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41254"
},
{
"name": "CVE-2022-21496",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21496"
},
{
"name": "CVE-2022-41723",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41723"
},
{
"name": "CVE-2020-2757",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2757"
},
{
"name": "CVE-2025-53864",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53864"
},
{
"name": "CVE-2025-38145",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38145"
},
{
"name": "CVE-2022-2598",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2598"
},
{
"name": "CVE-2020-27829",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27829"
},
{
"name": "CVE-2024-4032",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4032"
},
{
"name": "CVE-2025-37948",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37948"
},
{
"name": "CVE-2021-27645",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-27645"
},
{
"name": "CVE-2025-21863",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21863"
},
{
"name": "CVE-2025-21856",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21856"
},
{
"name": "CVE-2025-53053",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53053"
},
{
"name": "CVE-2022-2509",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2509"
},
{
"name": "CVE-2024-28835",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28835"
},
{
"name": "CVE-2025-54388",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54388"
},
{
"name": "CVE-2025-21749",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21749"
},
{
"name": "CVE-2017-6839",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6839"
},
{
"name": "CVE-2023-1906",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1906"
},
{
"name": "CVE-2025-40025",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40025"
},
{
"name": "CVE-2025-38051",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38051"
},
{
"name": "CVE-2021-35556",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35556"
},
{
"name": "CVE-2025-49796",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49796"
},
{
"name": "CVE-2022-34526",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34526"
},
{
"name": "CVE-2025-8058",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8058"
},
{
"name": "CVE-2023-47471",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47471"
},
{
"name": "CVE-2022-2868",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2868"
},
{
"name": "CVE-2022-1771",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1771"
},
{
"name": "CVE-2025-21945",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21945"
},
{
"name": "CVE-2021-32492",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32492"
},
{
"name": "CVE-2023-39323",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39323"
},
{
"name": "CVE-2023-29402",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29402"
},
{
"name": "CVE-2025-55005",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55005"
},
{
"name": "CVE-2025-32955",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32955"
},
{
"name": "CVE-2025-8732",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8732"
},
{
"name": "CVE-2025-38044",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38044"
},
{
"name": "CVE-2022-1586",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1586"
},
{
"name": "CVE-2023-39326",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39326"
},
{
"name": "CVE-2024-52616",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52616"
},
{
"name": "CVE-2025-38498",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38498"
},
{
"name": "CVE-2025-40015",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40015"
},
{
"name": "CVE-2024-21085",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21085"
},
{
"name": "CVE-2025-21673",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21673"
},
{
"name": "CVE-2025-21829",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21829"
},
{
"name": "CVE-2025-21502",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21502"
},
{
"name": "CVE-2024-57999",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57999"
},
{
"name": "CVE-2018-16645",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16645"
},
{
"name": "CVE-2025-22008",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22008"
},
{
"name": "CVE-2023-38039",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38039"
},
{
"name": "CVE-2023-29409",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29409"
},
{
"name": "CVE-2022-21443",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21443"
},
{
"name": "CVE-2025-21969",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21969"
},
{
"name": "CVE-2025-38200",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38200"
},
{
"name": "CVE-2025-40007",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40007"
},
{
"name": "CVE-2024-58072",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58072"
},
{
"name": "CVE-2025-38273",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38273"
},
{
"name": "CVE-2025-38346",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38346"
},
{
"name": "CVE-2025-55315",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55315"
},
{
"name": "CVE-2018-11813",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-11813"
},
{
"name": "CVE-2025-21722",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21722"
},
{
"name": "CVE-2024-50379",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50379"
},
{
"name": "CVE-2021-35560",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35560"
},
{
"name": "CVE-2023-39325",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39325"
},
{
"name": "CVE-2025-21793",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21793"
},
{
"name": "CVE-2022-2719",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2719"
},
{
"name": "CVE-2025-21581",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21581"
},
{
"name": "CVE-2022-45873",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-45873"
},
{
"name": "CVE-2023-34151",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34151"
},
{
"name": "CVE-2023-51384",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51384"
},
{
"name": "CVE-2021-43809",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-43809"
},
{
"name": "CVE-2025-5914",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5914"
},
{
"name": "CVE-2015-1606",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-1606"
},
{
"name": "CVE-2025-21894",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21894"
},
{
"name": "CVE-2025-21919",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21919"
},
{
"name": "CVE-2023-3896",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3896"
},
{
"name": "CVE-2023-2908",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2908"
},
{
"name": "CVE-2024-20945",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20945"
},
{
"name": "CVE-2025-58754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58754"
},
{
"name": "CVE-2023-39615",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39615"
},
{
"name": "CVE-2023-24534",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24534"
},
{
"name": "CVE-2025-21854",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21854"
},
{
"name": "CVE-2017-7501",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7501"
},
{
"name": "CVE-2024-21131",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21131"
},
{
"name": "CVE-2023-31486",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31486"
},
{
"name": "CVE-2020-21599",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-21599"
},
{
"name": "CVE-2025-41242",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41242"
},
{
"name": "CVE-2024-21210",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21210"
},
{
"name": "CVE-2013-0340",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0340"
},
{
"name": "CVE-2023-3446",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3446"
},
{
"name": "CVE-2025-21759",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21759"
},
{
"name": "CVE-2023-32611",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32611"
},
{
"name": "CVE-2024-38816",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38816"
},
{
"name": "CVE-2024-2511",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2511"
},
{
"name": "CVE-2015-20107",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-20107"
},
{
"name": "CVE-2023-39978",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39978"
},
{
"name": "CVE-2024-34397",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34397"
},
{
"name": "CVE-2025-38320",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38320"
},
{
"name": "CVE-2025-53057",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53057"
},
{
"name": "CVE-2024-24786",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24786"
},
{
"name": "CVE-2025-8177",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8177"
},
{
"name": "CVE-2025-21968",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21968"
},
{
"name": "CVE-2024-58083",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58083"
},
{
"name": "CVE-2021-20311",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20311"
},
{
"name": "CVE-2024-58055",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58055"
},
{
"name": "CVE-2025-21991",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21991"
},
{
"name": "CVE-2023-28486",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28486"
},
{
"name": "CVE-2020-27618",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27618"
},
{
"name": "CVE-2024-57993",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57993"
},
{
"name": "CVE-2025-21887",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21887"
},
{
"name": "CVE-2023-6246",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6246"
},
{
"name": "CVE-2021-20241",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20241"
},
{
"name": "CVE-2017-12674",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12674"
},
{
"name": "CVE-2023-0800",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0800"
},
{
"name": "CVE-2025-62171",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62171"
},
{
"name": "CVE-2025-38280",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38280"
},
{
"name": "CVE-2023-5388",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5388"
},
{
"name": "CVE-2018-1000078",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000078"
},
{
"name": "CVE-2020-2756",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2756"
},
{
"name": "CVE-2025-50950",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50950"
},
{
"name": "CVE-2020-21605",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-21605"
},
{
"name": "CVE-2024-54534",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54534"
},
{
"name": "CVE-2023-21967",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21967"
},
{
"name": "CVE-2025-38084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38084"
},
{
"name": "CVE-2024-34155",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34155"
},
{
"name": "CVE-2022-23219",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23219"
},
{
"name": "CVE-2017-1000476",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-1000476"
},
{
"name": "CVE-2015-2640",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2640"
},
{
"name": "CVE-2025-30685",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30685"
},
{
"name": "CVE-2024-41123",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41123"
},
{
"name": "CVE-2025-6921",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6921"
},
{
"name": "CVE-2015-8863",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8863"
},
{
"name": "CVE-2022-21619",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21619"
},
{
"name": "CVE-2025-30695",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30695"
},
{
"name": "CVE-2025-30688",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30688"
},
{
"name": "CVE-2023-5752",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5752"
},
{
"name": "CVE-2018-11656",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-11656"
},
{
"name": "CVE-2025-38103",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38103"
},
{
"name": "CVE-2022-2127",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2127"
},
{
"name": "CVE-2021-25217",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-25217"
},
{
"name": "CVE-2025-38514",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38514"
},
{
"name": "CVE-2018-19876",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19876"
},
{
"name": "CVE-2025-61780",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61780"
},
{
"name": "CVE-2021-20310",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20310"
},
{
"name": "CVE-2021-20245",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20245"
},
{
"name": "CVE-2021-35561",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35561"
},
{
"name": "CVE-2025-21732",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21732"
},
{
"name": "CVE-2025-38569",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38569"
},
{
"name": "CVE-2022-21476",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21476"
},
{
"name": "CVE-2023-22796",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22796"
},
{
"name": "CVE-2025-21875",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21875"
},
{
"name": "CVE-2023-0361",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0361"
},
{
"name": "CVE-2025-38204",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38204"
},
{
"name": "CVE-2021-40812",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40812"
},
{
"name": "CVE-2021-4217",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4217"
},
{
"name": "CVE-2023-32643",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32643"
},
{
"name": "CVE-2023-27537",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27537"
},
{
"name": "CVE-2025-22015",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22015"
},
{
"name": "CVE-2025-53066",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53066"
},
{
"name": "CVE-2023-5678",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5678"
},
{
"name": "CVE-2024-2961",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2961"
},
{
"name": "CVE-2025-21962",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21962"
},
{
"name": "CVE-2025-29786",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-29786"
},
{
"name": "CVE-2025-21832",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21832"
},
{
"name": "CVE-2024-12133",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12133"
},
{
"name": "CVE-2024-24784",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24784"
},
{
"name": "CVE-2022-27780",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27780"
},
{
"name": "CVE-2018-9135",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-9135"
},
{
"name": "CVE-2025-38410",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38410"
},
{
"name": "CVE-2025-21790",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21790"
},
{
"name": "CVE-2024-52316",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52316"
},
{
"name": "CVE-2024-21217",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21217"
},
{
"name": "CVE-2021-39212",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-39212"
},
{
"name": "CVE-2024-28182",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28182"
},
{
"name": "CVE-2024-58014",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58014"
},
{
"name": "CVE-2025-21680",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21680"
},
{
"name": "CVE-2025-0167",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0167"
},
{
"name": "CVE-2017-12433",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12433"
},
{
"name": "CVE-2025-21924",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21924"
},
{
"name": "CVE-2021-3574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3574"
},
{
"name": "CVE-2023-6597",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6597"
},
{
"name": "CVE-2024-20952",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20952"
},
{
"name": "CVE-2022-21541",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21541"
},
{
"name": "CVE-2025-22227",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22227"
},
{
"name": "CVE-2025-47273",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
},
{
"name": "CVE-2025-27221",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27221"
},
{
"name": "CVE-2024-24789",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24789"
},
{
"name": "CVE-2024-58006",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58006"
},
{
"name": "CVE-2025-21710",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21710"
},
{
"name": "CVE-2022-21360",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21360"
},
{
"name": "CVE-2025-22088",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22088"
},
{
"name": "CVE-2025-38460",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38460"
},
{
"name": "CVE-2022-27664",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27664"
},
{
"name": "CVE-2022-25858",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25858"
},
{
"name": "CVE-2022-21296",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21296"
},
{
"name": "CVE-2022-48303",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48303"
},
{
"name": "CVE-2025-38345",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38345"
},
{
"name": "CVE-2022-21540",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21540"
},
{
"name": "CVE-2025-21815",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21815"
},
{
"name": "CVE-2025-50083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50083"
},
{
"name": "CVE-2024-37371",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37371"
},
{
"name": "CVE-2017-6836",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6836"
},
{
"name": "CVE-2021-3500",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3500"
},
{
"name": "CVE-2022-25310",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25310"
},
{
"name": "CVE-2023-38545",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38545"
},
{
"name": "CVE-2021-43618",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-43618"
},
{
"name": "CVE-2021-20251",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20251"
},
{
"name": "CVE-2025-21669",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21669"
},
{
"name": "CVE-2016-1000027",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1000027"
},
{
"name": "CVE-2021-33621",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33621"
},
{
"name": "CVE-2025-57807",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-57807"
},
{
"name": "CVE-2025-38231",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38231"
},
{
"name": "CVE-2022-26488",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26488"
},
{
"name": "CVE-2025-21716",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21716"
},
{
"name": "CVE-2024-49761",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-49761"
},
{
"name": "CVE-2024-6345",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6345"
},
{
"name": "CVE-2025-3777",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3777"
},
{
"name": "CVE-2025-21964",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21964"
},
{
"name": "CVE-2024-0567",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0567"
},
{
"name": "CVE-2018-18384",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18384"
},
{
"name": "CVE-2024-58080",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58080"
},
{
"name": "CVE-2025-21744",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21744"
},
{
"name": "CVE-2024-21208",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21208"
},
{
"name": "CVE-2023-32665",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32665"
},
{
"name": "CVE-2025-31498",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31498"
},
{
"name": "CVE-2022-30698",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30698"
},
{
"name": "CVE-2023-31438",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31438"
},
{
"name": "CVE-2024-57986",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57986"
},
{
"name": "CVE-2021-37750",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37750"
},
{
"name": "CVE-2025-3576",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3576"
},
{
"name": "CVE-2023-23916",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23916"
},
{
"name": "CVE-2021-20244",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20244"
},
{
"name": "CVE-2025-38181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38181"
},
{
"name": "CVE-2025-21835",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21835"
},
{
"name": "CVE-2025-38391",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38391"
},
{
"name": "CVE-2025-11411",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11411"
},
{
"name": "CVE-2020-14577",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14577"
},
{
"name": "CVE-2022-3570",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3570"
},
{
"name": "CVE-2016-9844",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9844"
},
{
"name": "CVE-2019-13136",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13136"
},
{
"name": "CVE-2025-49014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49014"
},
{
"name": "CVE-2021-36222",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36222"
},
{
"name": "CVE-2021-3941",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3941"
},
{
"name": "CVE-2022-0561",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0561"
},
{
"name": "CVE-2024-6923",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6923"
},
{
"name": "CVE-2025-21811",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21811"
},
{
"name": "CVE-2024-8088",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8088"
},
{
"name": "CVE-2025-48734",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48734"
},
{
"name": "CVE-2025-11226",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11226"
}
],
"initial_release_date": "2025-11-06T00:00:00",
"last_revision_date": "2025-11-06T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0969",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-11-06T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits VMware. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits VMware",
"vendor_advisories": [
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36320",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36320"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36423",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36423"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2022-19",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36364"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-53",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36351"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36424",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36424"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36412",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36412"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36388",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36388"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36426",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36426"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36411",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36411"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36357",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36357"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36408",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36408"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36349",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36349"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36414",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36414"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36397",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36397"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36389",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36389"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36398",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36398"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36380",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36380"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-41",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36407"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36362",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36362"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36413",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36413"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36384",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36384"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36379",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36379"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36400",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36400"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36377",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36377"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36368",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36368"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36418",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36418"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36420",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36420"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36391",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36391"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36392",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36392"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36353",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36353"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-14",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36356"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36422",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36422"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36381",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36381"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36421",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36421"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36416",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36416"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-86",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36415"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36403",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36403"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36347",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36347"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36383",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36383"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36410",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36410"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36352",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36352"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36394",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36394"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36354",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36354"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36399",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36399"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-53",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36350"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36419",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36419"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-85",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36401"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2022-19",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36365"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36405",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36405"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2018-27",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36367"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36395",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36395"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36387",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36387"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36363",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36363"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36385",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36385"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36409",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36409"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-53",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36359"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36348",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36348"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36386",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36386"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36417",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36417"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36425",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36425"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2018-27",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36366"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2024-44",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36360"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36355",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36355"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-53",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36358"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36396",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36396"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36378",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36378"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36382",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36382"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36404",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36404"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2024-44",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36361"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36402",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36402"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36393",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36393"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36406",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36406"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36390",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36390"
}
]
}
CERTFR-2025-AVI-0969
Vulnerability from certfr_avis - Published: 2025-11-06 - Updated: 2025-11-06
De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| VMware | Tanzu Kubernetes Runtime | GenAI sur Tanzu Platform pour Cloud Foundry versions antérieures à 10.2.5 | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry versions antérieures à 6.0.20+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Noble) versions antérieures à 1.90.x | ||
| VMware | Tanzu Kubernetes Runtime | NodeJS Buildpack versions antérieures à 1.8.58 | ||
| VMware | Tanzu Kubernetes Runtime | Python Buildpack versions antérieures à 1.8.63 | ||
| VMware | Tanzu Kubernetes Runtime | VMware Tanzu pour MySQL sur Tanzu Platform versions antérieures à 10.1.0 | ||
| VMware | Tanzu Kubernetes Runtime | API Gateway pour VMware Tanzu Platform versions antérieures à 2.4.0 | ||
| VMware | Tanzu Kubernetes Runtime | PHP Buildpack versions antérieures à 4.6.49 | ||
| VMware | Tanzu Kubernetes Runtime | Single Sign-On pour VMware Tanzu Platform versions antérieures à 1.16.14 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy FIPS) versions antérieures à 1.915.x | ||
| VMware | Tanzu Application Service | CredHub Service Broker versions antérieures à 1.6.6 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy FIPS) versions antérieures à 1.943.x | ||
| VMware | Tanzu Kubernetes Runtime | Elastic Application Runtime Windows add-on pour VMware Tanzu Platform versions antérieures à 10.2.4+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry Windows versions antérieures à 6.0.20+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy) versions antérieures à 1.915.x | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry Windows versions antérieures à 10.2.3+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Single Sign-On pour VMware Tanzu Application Service versions antérieures à 1.16.13 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy) versions antérieures à 1.943.x | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry isolation segment versions antérieures à 6.0.20+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Noble) versions antérieures à 1.77.x | ||
| VMware | Services Suite | Platform Automation Toolkit versions antérieures à 5.3.2 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy Azure Light) versions antérieures à 1.906.x | ||
| VMware | Tanzu Kubernetes Runtime | Spring Cloud Data Flow pour VMware Tanzu versions antérieures à 1.14.9 | ||
| VMware | Tanzu Kubernetes Runtime | App Autoscaler CLI Plugin pour VMware Tanzu Platform versions antérieures à 250.5.9 | ||
| VMware | Tanzu Kubernetes Runtime | Spring Cloud Services pour VMware Tanzu versions antérieures à 3.3.10 | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry versions antérieures à 10.2.3+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Concourse pour VMware Tanzu versions antérieures à 7.14.1+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Platform pour Cloud Foundry isolation segment versions antérieures à 10.2.3+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Platform Services pour VMware Tanzu Platform versions antérieures à 10.3.0 | ||
| VMware | Tanzu Kubernetes Runtime | Ruby Buildpack versions antérieures à 1.10.46 | ||
| VMware | Tanzu Kubernetes Runtime | Elastic Application Runtime pour VMware Tanzu Platform versions antérieures à 6.0.21+LTS-T | ||
| VMware | Tanzu Kubernetes Runtime | Telemetry pour VMware Tanzu Platform versions antérieures à 2.3.0 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Noble) versions antérieures à 1.103.x | ||
| VMware | Tanzu Kubernetes Runtime | Tanzu Hub versions antérieures à 10.3.0 | ||
| VMware | Tanzu Kubernetes Runtime | Stemcells (Ubuntu Jammy) versions antérieures à 1.906.x |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "GenAI sur Tanzu Platform pour Cloud Foundry versions ant\u00e9rieures \u00e0 10.2.5",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry versions ant\u00e9rieures \u00e0 6.0.20+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Noble) versions ant\u00e9rieures \u00e0 1.90.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "NodeJS Buildpack versions ant\u00e9rieures \u00e0 1.8.58",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Python Buildpack versions ant\u00e9rieures \u00e0 1.8.63",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "VMware Tanzu pour MySQL sur Tanzu Platform versions ant\u00e9rieures \u00e0 10.1.0",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "API Gateway pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 2.4.0",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "PHP Buildpack versions ant\u00e9rieures \u00e0 4.6.49",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Single Sign-On pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 1.16.14",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy FIPS) versions ant\u00e9rieures \u00e0 1.915.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "CredHub Service Broker versions ant\u00e9rieures \u00e0 1.6.6",
"product": {
"name": "Tanzu Application Service",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy FIPS) versions ant\u00e9rieures \u00e0 1.943.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Elastic Application Runtime Windows add-on pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 10.2.4+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry Windows versions ant\u00e9rieures \u00e0 6.0.20+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy) versions ant\u00e9rieures \u00e0 1.915.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry Windows versions ant\u00e9rieures \u00e0 10.2.3+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Single Sign-On pour VMware Tanzu Application Service versions ant\u00e9rieures \u00e0 1.16.13",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy) versions ant\u00e9rieures \u00e0 1.943.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry isolation segment versions ant\u00e9rieures \u00e0 6.0.20+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Noble) versions ant\u00e9rieures \u00e0 1.77.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Platform Automation Toolkit versions ant\u00e9rieures \u00e0 5.3.2",
"product": {
"name": "Services Suite",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy Azure Light) versions ant\u00e9rieures \u00e0 1.906.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Spring Cloud Data Flow pour VMware Tanzu versions ant\u00e9rieures \u00e0 1.14.9",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "App Autoscaler CLI Plugin pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 250.5.9",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Spring Cloud Services pour VMware Tanzu versions ant\u00e9rieures \u00e0 3.3.10",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry versions ant\u00e9rieures \u00e0 10.2.3+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Concourse pour VMware Tanzu versions ant\u00e9rieures \u00e0 7.14.1+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Platform pour Cloud Foundry isolation segment versions ant\u00e9rieures \u00e0 10.2.3+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Platform Services pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 10.3.0",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Ruby Buildpack versions ant\u00e9rieures \u00e0 1.10.46",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Elastic Application Runtime pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 6.0.21+LTS-T",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Telemetry pour VMware Tanzu Platform versions ant\u00e9rieures \u00e0 2.3.0",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Noble) versions ant\u00e9rieures \u00e0 1.103.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Tanzu Hub versions ant\u00e9rieures \u00e0 10.3.0",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
},
{
"description": "Stemcells (Ubuntu Jammy) versions ant\u00e9rieures \u00e0 1.906.x",
"product": {
"name": "Tanzu Kubernetes Runtime",
"vendor": {
"name": "VMware",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2019-25013",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-25013"
},
{
"name": "CVE-2017-9937",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-9937"
},
{
"name": "CVE-2025-6395",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6395"
},
{
"name": "CVE-2022-1343",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1343"
},
{
"name": "CVE-2013-4235",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4235"
},
{
"name": "CVE-2024-37370",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37370"
},
{
"name": "CVE-2024-24790",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24790"
},
{
"name": "CVE-2024-57981",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57981"
},
{
"name": "CVE-2025-8715",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8715"
},
{
"name": "CVE-2017-3613",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3613"
},
{
"name": "CVE-2025-30681",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30681"
},
{
"name": "CVE-2022-25308",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25308"
},
{
"name": "CVE-2021-3996",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3996"
},
{
"name": "CVE-2024-38807",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38807"
},
{
"name": "CVE-2023-0216",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0216"
},
{
"name": "CVE-2023-27102",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27102"
},
{
"name": "CVE-2022-43236",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43236"
},
{
"name": "CVE-2024-20919",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20919"
},
{
"name": "CVE-2023-7104",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-7104"
},
{
"name": "CVE-2022-35252",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35252"
},
{
"name": "CVE-2005-0602",
"url": "https://www.cve.org/CVERecord?id=CVE-2005-0602"
},
{
"name": "CVE-2017-6834",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6834"
},
{
"name": "CVE-2025-22003",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22003"
},
{
"name": "CVE-2022-1473",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1473"
},
{
"name": "CVE-2023-21938",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21938"
},
{
"name": "CVE-2023-3428",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3428"
},
{
"name": "CVE-2021-3933",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3933"
},
{
"name": "CVE-2022-32189",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32189"
},
{
"name": "CVE-2022-43237",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43237"
},
{
"name": "CVE-2021-23215",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23215"
},
{
"name": "CVE-2022-1115",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1115"
},
{
"name": "CVE-2024-57994",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57994"
},
{
"name": "CVE-2025-21798",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21798"
},
{
"name": "CVE-2025-3264",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3264"
},
{
"name": "CVE-2015-4789",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4789"
},
{
"name": "CVE-2025-53547",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53547"
},
{
"name": "CVE-2023-40217",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40217"
},
{
"name": "CVE-2020-14621",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14621"
},
{
"name": "CVE-2025-26465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26465"
},
{
"name": "CVE-2025-21975",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21975"
},
{
"name": "CVE-2025-21980",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21980"
},
{
"name": "CVE-2023-0401",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0401"
},
{
"name": "CVE-2025-21889",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21889"
},
{
"name": "CVE-2025-21861",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21861"
},
{
"name": "CVE-2025-38328",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38328"
},
{
"name": "CVE-2025-31115",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31115"
},
{
"name": "CVE-2021-33294",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33294"
},
{
"name": "CVE-2023-3195",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3195"
},
{
"name": "CVE-2025-59830",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59830"
},
{
"name": "CVE-2023-21843",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21843"
},
{
"name": "CVE-2021-20243",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20243"
},
{
"name": "CVE-2023-3316",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3316"
},
{
"name": "CVE-2023-1175",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1175"
},
{
"name": "CVE-2024-57948",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57948"
},
{
"name": "CVE-2025-21937",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21937"
},
{
"name": "CVE-2014-9157",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9157"
},
{
"name": "CVE-2020-2803",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2803"
},
{
"name": "CVE-2020-14803",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14803"
},
{
"name": "CVE-2024-58088",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58088"
},
{
"name": "CVE-2024-21235",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21235"
},
{
"name": "CVE-2025-53042",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53042"
},
{
"name": "CVE-2024-9681",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9681"
},
{
"name": "CVE-2021-37600",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37600"
},
{
"name": "CVE-2025-21689",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21689"
},
{
"name": "CVE-2025-21682",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21682"
},
{
"name": "CVE-2011-3374",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3374"
},
{
"name": "CVE-2025-30689",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30689"
},
{
"name": "CVE-2024-11168",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11168"
},
{
"name": "CVE-2021-26260",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-26260"
},
{
"name": "CVE-2023-0922",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0922"
},
{
"name": "CVE-2025-38100",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38100"
},
{
"name": "CVE-2017-18250",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-18250"
},
{
"name": "CVE-2025-9231",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9231"
},
{
"name": "CVE-2025-1372",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1372"
},
{
"name": "CVE-2025-40002",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40002"
},
{
"name": "CVE-2022-21426",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21426"
},
{
"name": "CVE-2025-8851",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8851"
},
{
"name": "CVE-2024-58010",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58010"
},
{
"name": "CVE-2025-38043",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38043"
},
{
"name": "CVE-2025-21697",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21697"
},
{
"name": "CVE-2025-30715",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30715"
},
{
"name": "CVE-2024-57973",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57973"
},
{
"name": "CVE-2022-24407",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24407"
},
{
"name": "CVE-2022-30631",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30631"
},
{
"name": "CVE-2022-46908",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46908"
},
{
"name": "CVE-2022-3626",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3626"
},
{
"name": "CVE-2024-28834",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28834"
},
{
"name": "CVE-2021-38604",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-38604"
},
{
"name": "CVE-2001-1268",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-1268"
},
{
"name": "CVE-2022-2874",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2874"
},
{
"name": "CVE-2025-22017",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22017"
},
{
"name": "CVE-2025-38108",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38108"
},
{
"name": "CVE-2025-21783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21783"
},
{
"name": "CVE-2025-38229",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38229"
},
{
"name": "CVE-2023-46218",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46218"
},
{
"name": "CVE-2021-3733",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3733"
},
{
"name": "CVE-2025-9714",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9714"
},
{
"name": "CVE-2025-21786",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21786"
},
{
"name": "CVE-2024-11187",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11187"
},
{
"name": "CVE-2020-27769",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27769"
},
{
"name": "CVE-2025-30682",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30682"
},
{
"name": "CVE-2021-35586",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35586"
},
{
"name": "CVE-2014-9748",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9748"
},
{
"name": "CVE-2025-25186",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25186"
},
{
"name": "CVE-2014-8141",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8141"
},
{
"name": "CVE-2022-1623",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1623"
},
{
"name": "CVE-2025-21881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21881"
},
{
"name": "CVE-2025-21951",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21951"
},
{
"name": "CVE-2024-38829",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38829"
},
{
"name": "CVE-2025-10148",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10148"
},
{
"name": "CVE-2017-6831",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6831"
},
{
"name": "CVE-2024-58034",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58034"
},
{
"name": "CVE-2025-25724",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25724"
},
{
"name": "CVE-2025-27818",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27818"
},
{
"name": "CVE-2021-3997",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3997"
},
{
"name": "CVE-2025-50102",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50102"
},
{
"name": "CVE-2023-38471",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38471"
},
{
"name": "CVE-2022-0158",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0158"
},
{
"name": "CVE-2020-27776",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27776"
},
{
"name": "CVE-2025-5222",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5222"
},
{
"name": "CVE-2025-21743",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21743"
},
{
"name": "CVE-2025-38147",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38147"
},
{
"name": "CVE-2023-6780",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6780"
},
{
"name": "CVE-2023-34475",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34475"
},
{
"name": "CVE-2024-26896",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26896"
},
{
"name": "CVE-2025-38286",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38286"
},
{
"name": "CVE-2025-55248",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55248"
},
{
"name": "CVE-2024-24762",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24762"
},
{
"name": "CVE-2025-53643",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53643"
},
{
"name": "CVE-2022-0696",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0696"
},
{
"name": "CVE-2025-27516",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27516"
},
{
"name": "CVE-2024-21144",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21144"
},
{
"name": "CVE-2024-3220",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3220"
},
{
"name": "CVE-2022-3599",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3599"
},
{
"name": "CVE-2021-39537",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-39537"
},
{
"name": "CVE-2025-12380",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12380"
},
{
"name": "CVE-2022-42010",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42010"
},
{
"name": "CVE-2015-4787",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4787"
},
{
"name": "CVE-2021-35550",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35550"
},
{
"name": "CVE-2022-27781",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27781"
},
{
"name": "CVE-2025-21847",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21847"
},
{
"name": "CVE-2022-2929",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2929"
},
{
"name": "CVE-2018-15120",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-15120"
},
{
"name": "CVE-2024-58069",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58069"
},
{
"name": "CVE-2025-8556",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8556"
},
{
"name": "CVE-2023-0796",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0796"
},
{
"name": "CVE-2025-21853",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21853"
},
{
"name": "CVE-2025-21871",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21871"
},
{
"name": "CVE-2023-51385",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51385"
},
{
"name": "CVE-2016-0682",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0682"
},
{
"name": "CVE-2025-4287",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4287"
},
{
"name": "CVE-2024-43788",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43788"
},
{
"name": "CVE-2025-21731",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21731"
},
{
"name": "CVE-2023-48237",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48237"
},
{
"name": "CVE-2023-48706",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48706"
},
{
"name": "CVE-2021-3605",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3605"
},
{
"name": "CVE-2025-38515",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38515"
},
{
"name": "CVE-2025-22872",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22872"
},
{
"name": "CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"name": "CVE-2025-21941",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21941"
},
{
"name": "CVE-2025-8277",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8277"
},
{
"name": "CVE-2025-8941",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8941"
},
{
"name": "CVE-2017-10928",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10928"
},
{
"name": "CVE-2023-52425",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52425"
},
{
"name": "CVE-2025-38163",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38163"
},
{
"name": "CVE-2021-35567",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35567"
},
{
"name": "CVE-2017-12429",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12429"
},
{
"name": "CVE-2025-38444",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38444"
},
{
"name": "CVE-2023-38546",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38546"
},
{
"name": "CVE-2019-8322",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8322"
},
{
"name": "CVE-2024-52615",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52615"
},
{
"name": "CVE-2020-14579",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14579"
},
{
"name": "CVE-2023-2157",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2157"
},
{
"name": "CVE-2025-32386",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32386"
},
{
"name": "CVE-2025-21823",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21823"
},
{
"name": "CVE-2025-11731",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11731"
},
{
"name": "CVE-2019-1010238",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1010238"
},
{
"name": "CVE-2024-26700",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26700"
},
{
"name": "CVE-2024-58082",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58082"
},
{
"name": "CVE-2024-35176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-35176"
},
{
"name": "CVE-2024-33602",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33602"
},
{
"name": "CVE-2025-55551",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55551"
},
{
"name": "CVE-2025-50100",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50100"
},
{
"name": "CVE-2023-29404",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29404"
},
{
"name": "CVE-2025-21763",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21763"
},
{
"name": "CVE-2023-21954",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21954"
},
{
"name": "CVE-2025-40780",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40780"
},
{
"name": "CVE-2023-48368",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48368"
},
{
"name": "CVE-2014-4715",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-4715"
},
{
"name": "CVE-2022-4304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4304"
},
{
"name": "CVE-2023-21939",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21939"
},
{
"name": "CVE-2022-48554",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48554"
},
{
"name": "CVE-2022-0563",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0563"
},
{
"name": "CVE-2025-38157",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38157"
},
{
"name": "CVE-2023-24757",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24757"
},
{
"name": "CVE-2024-20926",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20926"
},
{
"name": "CVE-2025-21678",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21678"
},
{
"name": "CVE-2025-4056",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4056"
},
{
"name": "CVE-2024-28757",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28757"
},
{
"name": "CVE-2020-29562",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29562"
},
{
"name": "CVE-2022-31683",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-31683"
},
{
"name": "CVE-2020-22218",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-22218"
},
{
"name": "CVE-2025-0913",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0913"
},
{
"name": "CVE-2025-53062",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53062"
},
{
"name": "CVE-2015-4776",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4776"
},
{
"name": "CVE-2025-21872",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21872"
},
{
"name": "CVE-2017-3616",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3616"
},
{
"name": "CVE-2021-2163",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2163"
},
{
"name": "CVE-2025-21922",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21922"
},
{
"name": "CVE-2025-27817",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27817"
},
{
"name": "CVE-2023-30086",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-30086"
},
{
"name": "CVE-2017-6832",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6832"
},
{
"name": "CVE-2022-2208",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2208"
},
{
"name": "CVE-2024-45720",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45720"
},
{
"name": "CVE-2022-1056",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1056"
},
{
"name": "CVE-2018-10805",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10805"
},
{
"name": "CVE-2019-19906",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19906"
},
{
"name": "CVE-2025-38219",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38219"
},
{
"name": "CVE-2015-4785",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4785"
},
{
"name": "CVE-2025-38466",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38466"
},
{
"name": "CVE-2022-24921",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24921"
},
{
"name": "CVE-2022-32208",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32208"
},
{
"name": "CVE-2020-15095",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15095"
},
{
"name": "CVE-2018-16328",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16328"
},
{
"name": "CVE-2024-38949",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38949"
},
{
"name": "CVE-2022-28327",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28327"
},
{
"name": "CVE-2025-5745",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5745"
},
{
"name": "CVE-2025-47907",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47907"
},
{
"name": "CVE-2022-43239",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43239"
},
{
"name": "CVE-2022-41409",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41409"
},
{
"name": "CVE-2022-32546",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32546"
},
{
"name": "CVE-2025-0838",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0838"
},
{
"name": "CVE-2024-57980",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57980"
},
{
"name": "CVE-2023-5441",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5441"
},
{
"name": "CVE-2025-55553",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55553"
},
{
"name": "CVE-2024-12797",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12797"
},
{
"name": "CVE-2024-58011",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58011"
},
{
"name": "CVE-2025-21796",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21796"
},
{
"name": "CVE-2024-12086",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12086"
},
{
"name": "CVE-2025-27219",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27219"
},
{
"name": "CVE-2025-21691",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21691"
},
{
"name": "CVE-2021-4219",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4219"
},
{
"name": "CVE-2018-15798",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-15798"
},
{
"name": "CVE-2025-55154",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55154"
},
{
"name": "CVE-2025-49146",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49146"
},
{
"name": "CVE-2025-40026",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40026"
},
{
"name": "CVE-2022-1292",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1292"
},
{
"name": "CVE-2022-3153",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3153"
},
{
"name": "CVE-2022-2057",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2057"
},
{
"name": "CVE-2025-5197",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5197"
},
{
"name": "CVE-2023-45283",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45283"
},
{
"name": "CVE-2023-39328",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39328"
},
{
"name": "CVE-2023-45853",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45853"
},
{
"name": "CVE-2024-47611",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47611"
},
{
"name": "CVE-2017-11447",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11447"
},
{
"name": "CVE-2019-8323",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8323"
},
{
"name": "CVE-2023-39593",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39593"
},
{
"name": "CVE-2025-45582",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-45582"
},
{
"name": "CVE-2025-46569",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46569"
},
{
"name": "CVE-2024-21068",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21068"
},
{
"name": "CVE-2018-14434",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14434"
},
{
"name": "CVE-2019-6293",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6293"
},
{
"name": "CVE-2025-30703",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30703"
},
{
"name": "CVE-2025-21738",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21738"
},
{
"name": "CVE-2022-48522",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48522"
},
{
"name": "CVE-2025-21684",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21684"
},
{
"name": "CVE-2023-50868",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-50868"
},
{
"name": "CVE-2023-45288",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45288"
},
{
"name": "CVE-2023-21830",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21830"
},
{
"name": "CVE-2023-26965",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26965"
},
{
"name": "CVE-2023-2602",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2602"
},
{
"name": "CVE-2021-2161",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2161"
},
{
"name": "CVE-2025-6069",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6069"
},
{
"name": "CVE-2023-3817",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3817"
},
{
"name": "CVE-2017-10140",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-10140"
},
{
"name": "CVE-2021-2341",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2341"
},
{
"name": "CVE-2021-3468",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3468"
},
{
"name": "CVE-2024-6232",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6232"
},
{
"name": "CVE-2024-58061",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58061"
},
{
"name": "CVE-2025-46148",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46148"
},
{
"name": "CVE-2024-58058",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58058"
},
{
"name": "CVE-2025-21768",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21768"
},
{
"name": "CVE-2025-21864",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21864"
},
{
"name": "CVE-2025-2149",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2149"
},
{
"name": "CVE-2021-3502",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3502"
},
{
"name": "CVE-2025-6052",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6052"
},
{
"name": "CVE-2018-16329",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16329"
},
{
"name": "CVE-2022-41725",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41725"
},
{
"name": "CVE-2025-24813",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24813"
},
{
"name": "CVE-2024-58056",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58056"
},
{
"name": "CVE-2023-52426",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52426"
},
{
"name": "CVE-2025-50080",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50080"
},
{
"name": "CVE-2025-21725",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21725"
},
{
"name": "CVE-2024-43790",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43790"
},
{
"name": "CVE-2025-38313",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38313"
},
{
"name": "CVE-2025-38336",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38336"
},
{
"name": "CVE-2022-2058",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2058"
},
{
"name": "CVE-2025-22009",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22009"
},
{
"name": "CVE-2025-38061",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38061"
},
{
"name": "CVE-2022-45061",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-45061"
},
{
"name": "CVE-2025-21727",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21727"
},
{
"name": "CVE-2024-45492",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45492"
},
{
"name": "CVE-2015-4764",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4764"
},
{
"name": "CVE-2025-22228",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22228"
},
{
"name": "CVE-2022-43240",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43240"
},
{
"name": "CVE-2020-1752",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1752"
},
{
"name": "CVE-2025-5987",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5987"
},
{
"name": "CVE-2023-4091",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4091"
},
{
"name": "CVE-2022-30635",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30635"
},
{
"name": "CVE-2025-38375",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38375"
},
{
"name": "CVE-2015-4779",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4779"
},
{
"name": "CVE-2021-20312",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20312"
},
{
"name": "CVE-2025-4330",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4330"
},
{
"name": "CVE-2025-2953",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2953"
},
{
"name": "CVE-2020-14593",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14593"
},
{
"name": "CVE-2025-21904",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21904"
},
{
"name": "CVE-2019-20838",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20838"
},
{
"name": "CVE-2025-37798",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37798"
},
{
"name": "CVE-2022-41715",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41715"
},
{
"name": "CVE-2025-50078",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50078"
},
{
"name": "CVE-2022-28739",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28739"
},
{
"name": "CVE-2024-26726",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26726"
},
{
"name": "CVE-2023-52593",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52593"
},
{
"name": "CVE-2025-3933",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3933"
},
{
"name": "CVE-2023-26785",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26785"
},
{
"name": "CVE-2025-49794",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49794"
},
{
"name": "CVE-2020-14664",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14664"
},
{
"name": "CVE-2023-48235",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48235"
},
{
"name": "CVE-2024-57970",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57970"
},
{
"name": "CVE-2024-9287",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9287"
},
{
"name": "CVE-2025-21668",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21668"
},
{
"name": "CVE-2025-22004",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22004"
},
{
"name": "CVE-2022-32207",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32207"
},
{
"name": "CVE-2024-44939",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-44939"
},
{
"name": "CVE-2024-43374",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43374"
},
{
"name": "CVE-2023-50782",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-50782"
},
{
"name": "CVE-2025-21929",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21929"
},
{
"name": "CVE-2025-4138",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4138"
},
{
"name": "CVE-2022-41722",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41722"
},
{
"name": "CVE-2022-3627",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3627"
},
{
"name": "CVE-2020-14797",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14797"
},
{
"name": "CVE-2025-21735",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21735"
},
{
"name": "CVE-2024-3596",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3596"
},
{
"name": "CVE-2023-0215",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0215"
},
{
"name": "CVE-2024-27280",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27280"
},
{
"name": "CVE-2025-3000",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3000"
},
{
"name": "CVE-2022-3213",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3213"
},
{
"name": "CVE-2022-2867",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2867"
},
{
"name": "CVE-2023-36632",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-36632"
},
{
"name": "CVE-2021-23177",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23177"
},
{
"name": "CVE-2020-14798",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14798"
},
{
"name": "CVE-2007-4559",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-4559"
},
{
"name": "CVE-2025-21839",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21839"
},
{
"name": "CVE-2025-38112",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38112"
},
{
"name": "CVE-2025-5878",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5878"
},
{
"name": "CVE-2023-0286",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0286"
},
{
"name": "CVE-2022-3715",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3715"
},
{
"name": "CVE-2023-4016",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4016"
},
{
"name": "CVE-2024-58063",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58063"
},
{
"name": "CVE-2015-4780",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4780"
},
{
"name": "CVE-2024-41957",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41957"
},
{
"name": "CVE-2025-38500",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38500"
},
{
"name": "CVE-2024-56171",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56171"
},
{
"name": "CVE-2025-24293",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24293"
},
{
"name": "CVE-2025-8961",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8961"
},
{
"name": "CVE-2025-21977",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21977"
},
{
"name": "CVE-2022-25147",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25147"
},
{
"name": "CVE-2025-21779",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21779"
},
{
"name": "CVE-2024-58005",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58005"
},
{
"name": "CVE-2025-21674",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21674"
},
{
"name": "CVE-2022-3598",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3598"
},
{
"name": "CVE-2025-30696",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30696"
},
{
"name": "CVE-2023-0798",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0798"
},
{
"name": "CVE-2025-21918",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21918"
},
{
"name": "CVE-2025-38203",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38203"
},
{
"name": "CVE-2023-45285",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45285"
},
{
"name": "CVE-2022-0909",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0909"
},
{
"name": "CVE-2025-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8176"
},
{
"name": "CVE-2023-28154",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28154"
},
{
"name": "CVE-2023-48231",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48231"
},
{
"name": "CVE-2025-55752",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55752"
},
{
"name": "CVE-2023-38633",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38633"
},
{
"name": "CVE-2025-21948",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21948"
},
{
"name": "CVE-2023-2609",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2609"
},
{
"name": "CVE-2025-53905",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53905"
},
{
"name": "CVE-2025-24970",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24970"
},
{
"name": "CVE-2021-46312",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46312"
},
{
"name": "CVE-2018-14628",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14628"
},
{
"name": "CVE-2022-21299",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21299"
},
{
"name": "CVE-2022-38476",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38476"
},
{
"name": "CVE-2019-6461",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6461"
},
{
"name": "CVE-2022-3515",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3515"
},
{
"name": "CVE-2025-38004",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38004"
},
{
"name": "CVE-2020-2773",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2773"
},
{
"name": "CVE-2015-5262",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5262"
},
{
"name": "CVE-2022-43244",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43244"
},
{
"name": "CVE-2024-24783",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24783"
},
{
"name": "CVE-2025-21753",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21753"
},
{
"name": "CVE-2017-6004",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6004"
},
{
"name": "CVE-2023-45284",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45284"
},
{
"name": "CVE-2015-7696",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7696"
},
{
"name": "CVE-2023-29403",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29403"
},
{
"name": "CVE-2025-38387",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38387"
},
{
"name": "CVE-2023-45922",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45922"
},
{
"name": "CVE-2015-4754",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4754"
},
{
"name": "CVE-2025-21699",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21699"
},
{
"name": "CVE-2025-38362",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38362"
},
{
"name": "CVE-2022-27776",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27776"
},
{
"name": "CVE-2023-45322",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45322"
},
{
"name": "CVE-2024-24791",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24791"
},
{
"name": "CVE-2024-20921",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20921"
},
{
"name": "CVE-2022-39046",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-39046"
},
{
"name": "CVE-2020-14578",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14578"
},
{
"name": "CVE-2025-21584",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21584"
},
{
"name": "CVE-2022-42916",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42916"
},
{
"name": "CVE-2025-40004",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40004"
},
{
"name": "CVE-2017-7619",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7619"
},
{
"name": "CVE-2024-8176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8176"
},
{
"name": "CVE-2020-2805",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2805"
},
{
"name": "CVE-2025-21712",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21712"
},
{
"name": "CVE-2025-38371",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38371"
},
{
"name": "CVE-2023-2731",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2731"
},
{
"name": "CVE-2025-58767",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58767"
},
{
"name": "CVE-2021-35939",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35939"
},
{
"name": "CVE-2024-57982",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57982"
},
{
"name": "CVE-2025-38445",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38445"
},
{
"name": "CVE-2024-38819",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38819"
},
{
"name": "CVE-2023-0803",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0803"
},
{
"name": "CVE-2023-4807",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4807"
},
{
"name": "CVE-2025-21746",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21746"
},
{
"name": "CVE-2022-0391",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0391"
},
{
"name": "CVE-2023-1170",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1170"
},
{
"name": "CVE-2022-24070",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24070"
},
{
"name": "CVE-2025-38461",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38461"
},
{
"name": "CVE-2019-17547",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17547"
},
{
"name": "CVE-2024-45341",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45341"
},
{
"name": "CVE-2021-36411",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36411"
},
{
"name": "CVE-2023-30774",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-30774"
},
{
"name": "CVE-2018-10919",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10919"
},
{
"name": "CVE-2024-13176",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-13176"
},
{
"name": "CVE-2020-2830",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2830"
},
{
"name": "CVE-2025-53014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53014"
},
{
"name": "CVE-2025-7962",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7962"
},
{
"name": "CVE-2022-21624",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21624"
},
{
"name": "CVE-2020-2781",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2781"
},
{
"name": "CVE-2023-28322",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28322"
},
{
"name": "CVE-2018-10804",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10804"
},
{
"name": "CVE-2025-38159",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38159"
},
{
"name": "CVE-2022-0907",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0907"
},
{
"name": "CVE-2021-3421",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3421"
},
{
"name": "CVE-2022-21305",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21305"
},
{
"name": "CVE-2025-38066",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38066"
},
{
"name": "CVE-2023-29405",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29405"
},
{
"name": "CVE-2021-3670",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3670"
},
{
"name": "CVE-2021-38297",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-38297"
},
{
"name": "CVE-2025-4373",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4373"
},
{
"name": "CVE-2015-4790",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4790"
},
{
"name": "CVE-2025-4598",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4598"
},
{
"name": "CVE-2025-27144",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27144"
},
{
"name": "CVE-2025-21836",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21836"
},
{
"name": "CVE-2025-21715",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21715"
},
{
"name": "CVE-2024-6174",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6174"
},
{
"name": "CVE-2022-30629",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30629"
},
{
"name": "CVE-2020-10735",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10735"
},
{
"name": "CVE-2025-38305",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38305"
},
{
"name": "CVE-2020-14556",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14556"
},
{
"name": "CVE-2025-38067",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38067"
},
{
"name": "CVE-2025-50085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50085"
},
{
"name": "CVE-2025-21781",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21781"
},
{
"name": "CVE-2024-58054",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58054"
},
{
"name": "CVE-2024-43398",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43398"
},
{
"name": "CVE-2020-14792",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14792"
},
{
"name": "CVE-2019-16776",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16776"
},
{
"name": "CVE-2023-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44487"
},
{
"name": "CVE-2024-29857",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-29857"
},
{
"name": "CVE-2023-6779",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6779"
},
{
"name": "CVE-2022-28738",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28738"
},
{
"name": "CVE-2023-5363",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5363"
},
{
"name": "CVE-2024-8508",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8508"
},
{
"name": "CVE-2023-45289",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45289"
},
{
"name": "CVE-2025-41248",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41248"
},
{
"name": "CVE-2022-49043",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-49043"
},
{
"name": "CVE-2015-2624",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2624"
},
{
"name": "CVE-2022-2068",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2068"
},
{
"name": "CVE-2025-40364",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40364"
},
{
"name": "CVE-2023-29491",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29491"
},
{
"name": "CVE-2025-38068",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38068"
},
{
"name": "CVE-2025-61985",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61985"
},
{
"name": "CVE-2013-2064",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-2064"
},
{
"name": "CVE-2025-38401",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38401"
},
{
"name": "CVE-2025-21772",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21772"
},
{
"name": "CVE-2021-20266",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20266"
},
{
"name": "CVE-2022-21271",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21271"
},
{
"name": "CVE-2024-58070",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58070"
},
{
"name": "CVE-2025-61919",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61919"
},
{
"name": "CVE-2023-25193",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25193"
},
{
"name": "CVE-2024-34447",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34447"
},
{
"name": "CVE-2020-25663",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-25663"
},
{
"name": "CVE-2022-0156",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0156"
},
{
"name": "CVE-2025-21914",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21914"
},
{
"name": "CVE-2024-58057",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58057"
},
{
"name": "CVE-2025-0306",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0306"
},
{
"name": "CVE-2025-1371",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1371"
},
{
"name": "CVE-2024-12798",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12798"
},
{
"name": "CVE-2022-40897",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40897"
},
{
"name": "CVE-2024-58007",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58007"
},
{
"name": "CVE-2023-1355",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1355"
},
{
"name": "CVE-2025-21995",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21995"
},
{
"name": "CVE-2023-0466",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0466"
},
{
"name": "CVE-2025-21868",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21868"
},
{
"name": "CVE-2025-0938",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0938"
},
{
"name": "CVE-2025-5372",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5372"
},
{
"name": "CVE-2022-27782",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27782"
},
{
"name": "CVE-2022-37967",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37967"
},
{
"name": "CVE-2022-22844",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22844"
},
{
"name": "CVE-2025-21915",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21915"
},
{
"name": "CVE-2019-13232",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13232"
},
{
"name": "CVE-2025-27210",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27210"
},
{
"name": "CVE-2025-38102",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38102"
},
{
"name": "CVE-2024-33600",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33600"
},
{
"name": "CVE-2025-21792",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21792"
},
{
"name": "CVE-2015-2654",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2654"
},
{
"name": "CVE-2025-55560",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55560"
},
{
"name": "CVE-2025-21728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21728"
},
{
"name": "CVE-2024-58018",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58018"
},
{
"name": "CVE-2023-42669",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42669"
},
{
"name": "CVE-2022-1210",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1210"
},
{
"name": "CVE-2025-61771",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61771"
},
{
"name": "CVE-2023-0465",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0465"
},
{
"name": "CVE-2025-61770",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61770"
},
{
"name": "CVE-2022-32148",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32148"
},
{
"name": "CVE-2023-22081",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22081"
},
{
"name": "CVE-2015-4778",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4778"
},
{
"name": "CVE-2023-42670",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-42670"
},
{
"name": "CVE-2022-4203",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4203"
},
{
"name": "CVE-2024-58090",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58090"
},
{
"name": "CVE-2025-59842",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59842"
},
{
"name": "CVE-2025-49125",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49125"
},
{
"name": "CVE-2025-50106",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50106"
},
{
"name": "CVE-2024-27766",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27766"
},
{
"name": "CVE-2025-37958",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37958"
},
{
"name": "CVE-2025-21714",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21714"
},
{
"name": "CVE-2024-58078",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58078"
},
{
"name": "CVE-2023-32636",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32636"
},
{
"name": "CVE-2023-6277",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6277"
},
{
"name": "CVE-2025-48060",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48060"
},
{
"name": "CVE-2025-21855",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21855"
},
{
"name": "CVE-2025-38399",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38399"
},
{
"name": "CVE-2025-21972",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21972"
},
{
"name": "CVE-2025-38065",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38065"
},
{
"name": "CVE-2025-38459",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38459"
},
{
"name": "CVE-2024-21510",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21510"
},
{
"name": "CVE-2023-34153",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34153"
},
{
"name": "CVE-2023-3618",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3618"
},
{
"name": "CVE-2020-14153",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14153"
},
{
"name": "CVE-2022-1114",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1114"
},
{
"name": "CVE-2023-48233",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48233"
},
{
"name": "CVE-2025-38412",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38412"
},
{
"name": "CVE-2025-38031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38031"
},
{
"name": "CVE-2023-4813",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4813"
},
{
"name": "CVE-2022-21626",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21626"
},
{
"name": "CVE-2011-2207",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2207"
},
{
"name": "CVE-2025-54874",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54874"
},
{
"name": "CVE-2017-3617",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3617"
},
{
"name": "CVE-2024-53124",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-53124"
},
{
"name": "CVE-2025-38293",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38293"
},
{
"name": "CVE-2025-58057",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58057"
},
{
"name": "CVE-2025-21830",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21830"
},
{
"name": "CVE-2018-12600",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12600"
},
{
"name": "CVE-2025-4877",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4877"
},
{
"name": "CVE-2021-41771",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41771"
},
{
"name": "CVE-2025-8291",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8291"
},
{
"name": "CVE-2020-14781",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14781"
},
{
"name": "CVE-2016-3189",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3189"
},
{
"name": "CVE-2023-4154",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4154"
},
{
"name": "CVE-2025-38184",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38184"
},
{
"name": "CVE-2017-3615",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3615"
},
{
"name": "CVE-2022-0714",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0714"
},
{
"name": "CVE-2023-45290",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45290"
},
{
"name": "CVE-2023-28320",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28320"
},
{
"name": "CVE-2025-9340",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9340"
},
{
"name": "CVE-2023-24758",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24758"
},
{
"name": "CVE-2025-55552",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55552"
},
{
"name": "CVE-2025-30683",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30683"
},
{
"name": "CVE-2025-30699",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30699"
},
{
"name": "CVE-2025-61921",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61921"
},
{
"name": "CVE-2024-4030",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4030"
},
{
"name": "CVE-2025-27587",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27587"
},
{
"name": "CVE-2016-7531",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7531"
},
{
"name": "CVE-2006-3082",
"url": "https://www.cve.org/CVERecord?id=CVE-2006-3082"
},
{
"name": "CVE-2023-5341",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5341"
},
{
"name": "CVE-2025-8534",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8534"
},
{
"name": "CVE-2025-21767",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21767"
},
{
"name": "CVE-2025-3262",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3262"
},
{
"name": "CVE-2025-21986",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21986"
},
{
"name": "CVE-2025-22866",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22866"
},
{
"name": "CVE-2025-1390",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1390"
},
{
"name": "CVE-2024-33599",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33599"
},
{
"name": "CVE-2023-34968",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34968"
},
{
"name": "CVE-2024-0743",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0743"
},
{
"name": "CVE-2025-21961",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21961"
},
{
"name": "CVE-2025-38458",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38458"
},
{
"name": "CVE-2025-6297",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6297"
},
{
"name": "CVE-2016-10062",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10062"
},
{
"name": "CVE-2025-21764",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21764"
},
{
"name": "CVE-2024-57974",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57974"
},
{
"name": "CVE-2024-58093",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58093"
},
{
"name": "CVE-2023-34152",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34152"
},
{
"name": "CVE-2022-43249",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43249"
},
{
"name": "CVE-2025-38034",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38034"
},
{
"name": "CVE-2024-58085",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58085"
},
{
"name": "CVE-2024-34158",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34158"
},
{
"name": "CVE-2017-3608",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3608"
},
{
"name": "CVE-2025-47268",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47268"
},
{
"name": "CVE-2025-21690",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21690"
},
{
"name": "CVE-2025-30754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30754"
},
{
"name": "CVE-2024-57996",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57996"
},
{
"name": "CVE-2025-38135",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38135"
},
{
"name": "CVE-2023-28484",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28484"
},
{
"name": "CVE-2022-43242",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43242"
},
{
"name": "CVE-2019-2708",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2708"
},
{
"name": "CVE-2025-38312",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38312"
},
{
"name": "CVE-2016-0692",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0692"
},
{
"name": "CVE-2019-14844",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14844"
},
{
"name": "CVE-2022-21366",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21366"
},
{
"name": "CVE-2022-30630",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30630"
},
{
"name": "CVE-2025-22233",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22233"
},
{
"name": "CVE-2025-38464",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38464"
},
{
"name": "CVE-2025-21946",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21946"
},
{
"name": "CVE-2025-21838",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21838"
},
{
"name": "CVE-2025-21982",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21982"
},
{
"name": "CVE-2025-21867",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21867"
},
{
"name": "CVE-2025-21666",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21666"
},
{
"name": "CVE-2023-0802",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0802"
},
{
"name": "CVE-2025-53859",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53859"
},
{
"name": "CVE-2023-46219",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46219"
},
{
"name": "CVE-2025-47910",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47910"
},
{
"name": "CVE-2025-21828",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21828"
},
{
"name": "CVE-2023-47038",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47038"
},
{
"name": "CVE-2025-23167",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23167"
},
{
"name": "CVE-2025-38363",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38363"
},
{
"name": "CVE-2025-21704",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21704"
},
{
"name": "CVE-2025-21936",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21936"
},
{
"name": "CVE-2022-0865",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0865"
},
{
"name": "CVE-2023-5981",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5981"
},
{
"name": "CVE-2025-38319",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38319"
},
{
"name": "CVE-2025-43859",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43859"
},
{
"name": "CVE-2024-58013",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58013"
},
{
"name": "CVE-2022-0529",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0529"
},
{
"name": "CVE-2023-27043",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27043"
},
{
"name": "CVE-2016-7514",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7514"
},
{
"name": "CVE-2015-4782",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4782"
},
{
"name": "CVE-2025-21909",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21909"
},
{
"name": "CVE-2022-2056",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2056"
},
{
"name": "CVE-2025-9092",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9092"
},
{
"name": "CVE-2025-21766",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21766"
},
{
"name": "CVE-2025-38457",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38457"
},
{
"name": "CVE-2024-54677",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54677"
},
{
"name": "CVE-2021-3598",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3598"
},
{
"name": "CVE-2025-21880",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21880"
},
{
"name": "CVE-2025-50094",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50094"
},
{
"name": "CVE-2021-35559",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35559"
},
{
"name": "CVE-2025-21959",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21959"
},
{
"name": "CVE-2024-38809",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38809"
},
{
"name": "CVE-2025-38212",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38212"
},
{
"name": "CVE-2017-3610",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3610"
},
{
"name": "CVE-2023-1264",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1264"
},
{
"name": "CVE-2023-0217",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0217"
},
{
"name": "CVE-2024-58266",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58266"
},
{
"name": "CVE-2025-38298",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38298"
},
{
"name": "CVE-2024-30172",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-30172"
},
{
"name": "CVE-2025-50098",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50098"
},
{
"name": "CVE-2022-43552",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43552"
},
{
"name": "CVE-2018-1000076",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000076"
},
{
"name": "CVE-2022-4293",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4293"
},
{
"name": "CVE-2025-37974",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37974"
},
{
"name": "CVE-2025-5915",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5915"
},
{
"name": "CVE-2024-57834",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57834"
},
{
"name": "CVE-2025-55197",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55197"
},
{
"name": "CVE-2022-32743",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32743"
},
{
"name": "CVE-2025-55558",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55558"
},
{
"name": "CVE-2022-21291",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21291"
},
{
"name": "CVE-2024-58017",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58017"
},
{
"name": "CVE-2025-5917",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5917"
},
{
"name": "CVE-2025-26603",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-26603"
},
{
"name": "CVE-2023-35116",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-35116"
},
{
"name": "CVE-2025-38078",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38078"
},
{
"name": "CVE-2025-21809",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21809"
},
{
"name": "CVE-2025-38419",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38419"
},
{
"name": "CVE-2024-45490",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45490"
},
{
"name": "CVE-2021-32490",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32490"
},
{
"name": "CVE-2020-27768",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27768"
},
{
"name": "CVE-2024-38820",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38820"
},
{
"name": "CVE-2025-50086",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50086"
},
{
"name": "CVE-2016-5118",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5118"
},
{
"name": "CVE-2022-3786",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3786"
},
{
"name": "CVE-2023-46045",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46045"
},
{
"name": "CVE-2025-37889",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37889"
},
{
"name": "CVE-2021-3995",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3995"
},
{
"name": "CVE-2015-4788",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4788"
},
{
"name": "CVE-2025-55557",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55557"
},
{
"name": "CVE-2024-12085",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12085"
},
{
"name": "CVE-2022-24599",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24599"
},
{
"name": "CVE-2025-21981",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21981"
},
{
"name": "CVE-2025-38211",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38211"
},
{
"name": "CVE-2025-2999",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2999"
},
{
"name": "CVE-2023-48795",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48795"
},
{
"name": "CVE-2025-21910",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21910"
},
{
"name": "CVE-2021-35452",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35452"
},
{
"name": "CVE-2025-6965",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6965"
},
{
"name": "CVE-2023-28319",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28319"
},
{
"name": "CVE-2021-35565",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35565"
},
{
"name": "CVE-2020-10251",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10251"
},
{
"name": "CVE-2024-11584",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11584"
},
{
"name": "CVE-2024-45491",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45491"
},
{
"name": "CVE-2025-50182",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50182"
},
{
"name": "CVE-2025-47906",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47906"
},
{
"name": "CVE-2020-2981",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2981"
},
{
"name": "CVE-2025-21745",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21745"
},
{
"name": "CVE-2025-21791",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21791"
},
{
"name": "CVE-2020-18781",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-18781"
},
{
"name": "CVE-2025-7709",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7709"
},
{
"name": "CVE-2024-52559",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52559"
},
{
"name": "CVE-2025-38077",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38077"
},
{
"name": "CVE-2025-38251",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38251"
},
{
"name": "CVE-2022-22576",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22576"
},
{
"name": "CVE-2025-38120",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38120"
},
{
"name": "CVE-2017-7186",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7186"
},
{
"name": "CVE-2025-38285",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38285"
},
{
"name": "CVE-2025-59375",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-59375"
},
{
"name": "CVE-2025-37750",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37750"
},
{
"name": "CVE-2021-39293",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-39293"
},
{
"name": "CVE-2025-21795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21795"
},
{
"name": "CVE-2025-8194",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8194"
},
{
"name": "CVE-2025-22014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22014"
},
{
"name": "CVE-2025-38161",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38161"
},
{
"name": "CVE-2025-9640",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9640"
},
{
"name": "CVE-2022-1897",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1897"
},
{
"name": "CVE-2022-43248",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43248"
},
{
"name": "CVE-2016-3418",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-3418"
},
{
"name": "CVE-2022-29824",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29824"
},
{
"name": "CVE-2024-58081",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58081"
},
{
"name": "CVE-2022-1705",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1705"
},
{
"name": "CVE-2024-11053",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11053"
},
{
"name": "CVE-2024-7264",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7264"
},
{
"name": "CVE-2025-21814",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21814"
},
{
"name": "CVE-2025-50082",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50082"
},
{
"name": "CVE-2017-6829",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6829"
},
{
"name": "CVE-2025-32462",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32462"
},
{
"name": "CVE-2025-40027",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40027"
},
{
"name": "CVE-2025-50097",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50097"
},
{
"name": "CVE-2021-4214",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4214"
},
{
"name": "CVE-2025-21911",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21911"
},
{
"name": "CVE-2023-24752",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24752"
},
{
"name": "CVE-2025-50181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50181"
},
{
"name": "CVE-2024-21742",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21742"
},
{
"name": "CVE-2022-43245",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43245"
},
{
"name": "CVE-2015-2656",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2656"
},
{
"name": "CVE-2025-50084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50084"
},
{
"name": "CVE-2018-9133",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-9133"
},
{
"name": "CVE-2025-50079",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50079"
},
{
"name": "CVE-2025-38115",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38115"
},
{
"name": "CVE-2025-21758",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21758"
},
{
"name": "CVE-2023-0767",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0767"
},
{
"name": "CVE-2025-21816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21816"
},
{
"name": "CVE-2025-1795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1795"
},
{
"name": "CVE-2021-35603",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35603"
},
{
"name": "CVE-2025-21996",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21996"
},
{
"name": "CVE-2021-36410",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36410"
},
{
"name": "CVE-2025-21780",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21780"
},
{
"name": "CVE-2017-3612",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3612"
},
{
"name": "CVE-2024-12705",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12705"
},
{
"name": "CVE-2025-38153",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38153"
},
{
"name": "CVE-2025-21787",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21787"
},
{
"name": "CVE-2023-28487",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28487"
},
{
"name": "CVE-2023-22067",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22067"
},
{
"name": "CVE-2023-31439",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31439"
},
{
"name": "CVE-2023-51074",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51074"
},
{
"name": "CVE-2023-23915",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23915"
},
{
"name": "CVE-2025-4517",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4517"
},
{
"name": "CVE-2018-1000074",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000074"
},
{
"name": "CVE-2025-37785",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37785"
},
{
"name": "CVE-2025-21776",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21776"
},
{
"name": "CVE-2024-58003",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58003"
},
{
"name": "CVE-2025-21917",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21917"
},
{
"name": "CVE-2025-21706",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21706"
},
{
"name": "CVE-2025-48964",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48964"
},
{
"name": "CVE-2025-55193",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55193"
},
{
"name": "CVE-2025-38395",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38395"
},
{
"name": "CVE-2023-29499",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29499"
},
{
"name": "CVE-2025-21574",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21574"
},
{
"name": "CVE-2022-42011",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42011"
},
{
"name": "CVE-2023-39318",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39318"
},
{
"name": "CVE-2025-38337",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38337"
},
{
"name": "CVE-2025-21957",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21957"
},
{
"name": "CVE-2025-38727",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38727"
},
{
"name": "CVE-2022-41720",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41720"
},
{
"name": "CVE-2024-1013",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1013"
},
{
"name": "CVE-2022-0319",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0319"
},
{
"name": "CVE-2025-4674",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4674"
},
{
"name": "CVE-2025-30258",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30258"
},
{
"name": "CVE-2025-21999",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21999"
},
{
"name": "CVE-2025-4565",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4565"
},
{
"name": "CVE-2022-41716",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41716"
},
{
"name": "CVE-2025-38465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38465"
},
{
"name": "CVE-2024-56406",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56406"
},
{
"name": "CVE-2025-38513",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38513"
},
{
"name": "CVE-2025-21736",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21736"
},
{
"name": "CVE-2025-21997",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21997"
},
{
"name": "CVE-2025-21741",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21741"
},
{
"name": "CVE-2020-18032",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-18032"
},
{
"name": "CVE-2017-6833",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6833"
},
{
"name": "CVE-2025-21808",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21808"
},
{
"name": "CVE-2019-8324",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8324"
},
{
"name": "CVE-2020-2754",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2754"
},
{
"name": "CVE-2025-38086",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38086"
},
{
"name": "CVE-2024-24788",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24788"
},
{
"name": "CVE-2024-58076",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58076"
},
{
"name": "CVE-2023-24751",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24751"
},
{
"name": "CVE-2025-21708",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21708"
},
{
"name": "CVE-2015-4784",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4784"
},
{
"name": "CVE-2021-4048",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4048"
},
{
"name": "CVE-2023-4527",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4527"
},
{
"name": "CVE-2022-2980",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2980"
},
{
"name": "CVE-2025-5278",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5278"
},
{
"name": "CVE-2025-21992",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21992"
},
{
"name": "CVE-2025-21720",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21720"
},
{
"name": "CVE-2025-32463",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32463"
},
{
"name": "CVE-2015-7747",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7747"
},
{
"name": "CVE-2025-52999",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52999"
},
{
"name": "CVE-2023-34055",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34055"
},
{
"name": "CVE-2024-41965",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41965"
},
{
"name": "CVE-2020-14796",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14796"
},
{
"name": "CVE-2024-56433",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56433"
},
{
"name": "CVE-2023-0464",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0464"
},
{
"name": "CVE-2025-55004",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55004"
},
{
"name": "CVE-2014-8139",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8139"
},
{
"name": "CVE-2025-21580",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21580"
},
{
"name": "CVE-2022-29526",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29526"
},
{
"name": "CVE-2025-5318",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5318"
},
{
"name": "CVE-2025-38003",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38003"
},
{
"name": "CVE-2025-38441",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38441"
},
{
"name": "CVE-2023-51767",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51767"
},
{
"name": "CVE-2025-7783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
},
{
"name": "CVE-2023-6918",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6918"
},
{
"name": "CVE-2023-38037",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38037"
},
{
"name": "CVE-2012-5783",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-5783"
},
{
"name": "CVE-2022-2519",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2519"
},
{
"name": "CVE-2025-55754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55754"
},
{
"name": "CVE-2025-53023",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53023"
},
{
"name": "CVE-2025-21711",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21711"
},
{
"name": "CVE-2025-2998",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2998"
},
{
"name": "CVE-2023-51792",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51792"
},
{
"name": "CVE-2021-20313",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20313"
},
{
"name": "CVE-2022-30633",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30633"
},
{
"name": "CVE-2023-23931",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23931"
},
{
"name": "CVE-2025-21575",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21575"
},
{
"name": "CVE-2025-21978",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21978"
},
{
"name": "CVE-2019-16777",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16777"
},
{
"name": "CVE-2025-21760",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21760"
},
{
"name": "CVE-2023-45913",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45913"
},
{
"name": "CVE-2018-13153",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-13153"
},
{
"name": "CVE-2022-0530",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0530"
},
{
"name": "CVE-2023-48236",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48236"
},
{
"name": "CVE-2025-21947",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21947"
},
{
"name": "CVE-2025-21913",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21913"
},
{
"name": "CVE-2023-34474",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34474"
},
{
"name": "CVE-2025-21665",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21665"
},
{
"name": "CVE-2025-38227",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38227"
},
{
"name": "CVE-2018-1000079",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000079"
},
{
"name": "CVE-2025-4435",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4435"
},
{
"name": "CVE-2024-58079",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58079"
},
{
"name": "CVE-2025-21966",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21966"
},
{
"name": "CVE-2025-21577",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21577"
},
{
"name": "CVE-2021-45931",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45931"
},
{
"name": "CVE-2025-38079",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38079"
},
{
"name": "CVE-2021-28544",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28544"
},
{
"name": "CVE-2021-46828",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46828"
},
{
"name": "CVE-2025-21734",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21734"
},
{
"name": "CVE-2025-32728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32728"
},
{
"name": "CVE-2023-2804",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2804"
},
{
"name": "CVE-2025-21970",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21970"
},
{
"name": "CVE-2021-44964",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44964"
},
{
"name": "CVE-2025-6141",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6141"
},
{
"name": "CVE-2022-42012",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42012"
},
{
"name": "CVE-2018-14437",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-14437"
},
{
"name": "CVE-2024-13978",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-13978"
},
{
"name": "CVE-2025-21890",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21890"
},
{
"name": "CVE-2025-61984",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61984"
},
{
"name": "CVE-2021-3596",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3596"
},
{
"name": "CVE-2025-21916",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21916"
},
{
"name": "CVE-2025-21925",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21925"
},
{
"name": "CVE-2024-57883",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57883"
},
{
"name": "CVE-2022-21628",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21628"
},
{
"name": "CVE-2017-6830",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6830"
},
{
"name": "CVE-2025-21927",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21927"
},
{
"name": "CVE-2021-3520",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3520"
},
{
"name": "CVE-2024-47814",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47814"
},
{
"name": "CVE-2022-2923",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2923"
},
{
"name": "CVE-2025-21799",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21799"
},
{
"name": "CVE-2024-21011",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21011"
},
{
"name": "CVE-2025-6020",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6020"
},
{
"name": "CVE-2015-2626",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2626"
},
{
"name": "CVE-2024-45336",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45336"
},
{
"name": "CVE-2025-21748",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21748"
},
{
"name": "CVE-2025-21785",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21785"
},
{
"name": "CVE-2020-10029",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10029"
},
{
"name": "CVE-2025-7425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7425"
},
{
"name": "CVE-2023-3978",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3978"
},
{
"name": "CVE-2021-46310",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46310"
},
{
"name": "CVE-2022-36227",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36227"
},
{
"name": "CVE-2021-2369",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2369"
},
{
"name": "CVE-2025-21883",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21883"
},
{
"name": "CVE-2023-29469",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29469"
},
{
"name": "CVE-2024-5535",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5535"
},
{
"name": "CVE-2025-38074",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38074"
},
{
"name": "CVE-2024-58086",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58086"
},
{
"name": "CVE-2025-38119",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38119"
},
{
"name": "CVE-2025-38245",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38245"
},
{
"name": "CVE-2022-37454",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37454"
},
{
"name": "CVE-2021-36770",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36770"
},
{
"name": "CVE-2025-21898",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21898"
},
{
"name": "CVE-2020-14152",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14152"
},
{
"name": "CVE-2025-38324",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38324"
},
{
"name": "CVE-2025-22868",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22868"
},
{
"name": "CVE-2021-36976",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36976"
},
{
"name": "CVE-2024-58051",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58051"
},
{
"name": "CVE-2023-3164",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3164"
},
{
"name": "CVE-2022-3597",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3597"
},
{
"name": "CVE-2023-27535",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27535"
},
{
"name": "CVE-2022-27775",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27775"
},
{
"name": "CVE-2024-56337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56337"
},
{
"name": "CVE-2024-12718",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12718"
},
{
"name": "CVE-2018-25032",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-25032"
},
{
"name": "CVE-2025-9390",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9390"
},
{
"name": "CVE-2025-62813",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62813"
},
{
"name": "CVE-2025-21857",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21857"
},
{
"name": "CVE-2019-9904",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9904"
},
{
"name": "CVE-2025-23085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23085"
},
{
"name": "CVE-2022-42919",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42919"
},
{
"name": "CVE-2024-0450",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0450"
},
{
"name": "CVE-2025-9165",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9165"
},
{
"name": "CVE-2023-1981",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1981"
},
{
"name": "CVE-2023-30571",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-30571"
},
{
"name": "CVE-2022-2231",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2231"
},
{
"name": "CVE-2025-46150",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46150"
},
{
"name": "CVE-2024-12801",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12801"
},
{
"name": "CVE-2024-5642",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5642"
},
{
"name": "CVE-2024-3219",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3219"
},
{
"name": "CVE-2025-21812",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21812"
},
{
"name": "CVE-2015-4781",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4781"
},
{
"name": "CVE-2023-23914",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23914"
},
{
"name": "CVE-2025-38542",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38542"
},
{
"name": "CVE-2025-38344",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38344"
},
{
"name": "CVE-2023-28120",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28120"
},
{
"name": "CVE-2025-37797",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37797"
},
{
"name": "CVE-2025-21848",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21848"
},
{
"name": "CVE-2021-3999",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3999"
},
{
"name": "CVE-2012-6153",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-6153"
},
{
"name": "CVE-2025-38088",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38088"
},
{
"name": "CVE-2025-50096",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50096"
},
{
"name": "CVE-2022-30632",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30632"
},
{
"name": "CVE-2024-47554",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47554"
},
{
"name": "CVE-2022-27774",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27774"
},
{
"name": "CVE-2025-21683",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21683"
},
{
"name": "CVE-2025-38332",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38332"
},
{
"name": "CVE-2020-35492",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-35492"
},
{
"name": "CVE-2025-21908",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21908"
},
{
"name": "CVE-2023-1289",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1289"
},
{
"name": "CVE-2025-38386",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38386"
},
{
"name": "CVE-2023-6349",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6349"
},
{
"name": "CVE-2024-2004",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2004"
},
{
"name": "CVE-2017-3605",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3605"
},
{
"name": "CVE-2025-9232",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9232"
},
{
"name": "CVE-2025-23165",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23165"
},
{
"name": "CVE-2022-40303",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40303"
},
{
"name": "CVE-2023-0801",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0801"
},
{
"name": "CVE-2025-9341",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9341"
},
{
"name": "CVE-2023-29406",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29406"
},
{
"name": "CVE-2017-7244",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7244"
},
{
"name": "CVE-2023-39319",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39319"
},
{
"name": "CVE-2025-21895",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21895"
},
{
"name": "CVE-2025-61795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61795"
},
{
"name": "CVE-2025-1377",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1377"
},
{
"name": "CVE-2025-30705",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30705"
},
{
"name": "CVE-2018-16412",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16412"
},
{
"name": "CVE-2025-22005",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22005"
},
{
"name": "CVE-2019-6462",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6462"
},
{
"name": "CVE-2025-21935",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21935"
},
{
"name": "CVE-2022-4645",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4645"
},
{
"name": "CVE-2021-32493",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32493"
},
{
"name": "CVE-2023-24754",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24754"
},
{
"name": "CVE-2020-29509",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29509"
},
{
"name": "CVE-2023-5568",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5568"
},
{
"name": "CVE-2023-38470",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38470"
},
{
"name": "CVE-2025-21675",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21675"
},
{
"name": "CVE-2023-34967",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34967"
},
{
"name": "CVE-2025-38237",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38237"
},
{
"name": "CVE-2025-38174",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38174"
},
{
"name": "CVE-2025-8713",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8713"
},
{
"name": "CVE-2025-21587",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21587"
},
{
"name": "CVE-2022-2869",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2869"
},
{
"name": "CVE-2021-4189",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4189"
},
{
"name": "CVE-2025-50088",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50088"
},
{
"name": "CVE-2024-24785",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24785"
},
{
"name": "CVE-2023-35945",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-35945"
},
{
"name": "CVE-2024-45993",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45993"
},
{
"name": "CVE-2025-6170",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6170"
},
{
"name": "CVE-2021-35937",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35937"
},
{
"name": "CVE-2024-58019",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58019"
},
{
"name": "CVE-2025-9900",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9900"
},
{
"name": "CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"name": "CVE-2025-21888",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21888"
},
{
"name": "CVE-2025-21866",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21866"
},
{
"name": "CVE-2023-40745",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40745"
},
{
"name": "CVE-2022-1962",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1962"
},
{
"name": "CVE-2024-45337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45337"
},
{
"name": "CVE-2025-3730",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3730"
},
{
"name": "CVE-2025-22010",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22010"
},
{
"name": "CVE-2024-25260",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25260"
},
{
"name": "CVE-2024-21147",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21147"
},
{
"name": "CVE-2025-38037",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38037"
},
{
"name": "CVE-2017-3609",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3609"
},
{
"name": "CVE-2024-57990",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57990"
},
{
"name": "CVE-2021-29921",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-29921"
},
{
"name": "CVE-2022-41717",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41717"
},
{
"name": "CVE-2014-9636",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9636"
},
{
"name": "CVE-2025-5351",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5351"
},
{
"name": "CVE-2025-52520",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52520"
},
{
"name": "CVE-2022-1622",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1622"
},
{
"name": "CVE-2017-3611",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3611"
},
{
"name": "CVE-2024-53427",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-53427"
},
{
"name": "CVE-2022-2521",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2521"
},
{
"name": "CVE-2023-49582",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-49582"
},
{
"name": "CVE-2025-43857",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43857"
},
{
"name": "CVE-2025-31344",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31344"
},
{
"name": "CVE-2025-21976",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21976"
},
{
"name": "CVE-2023-28321",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28321"
},
{
"name": "CVE-2024-57975",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57975"
},
{
"name": "CVE-2020-14581",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14581"
},
{
"name": "CVE-2024-7254",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7254"
},
{
"name": "CVE-2021-32491",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32491"
},
{
"name": "CVE-2025-50077",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50077"
},
{
"name": "CVE-2022-2309",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2309"
},
{
"name": "CVE-2024-52533",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52533"
},
{
"name": "CVE-2023-24536",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24536"
},
{
"name": "CVE-2023-22025",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22025"
},
{
"name": "CVE-2021-43527",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-43527"
},
{
"name": "CVE-2022-0924",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0924"
},
{
"name": "CVE-2025-24014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24014"
},
{
"name": "CVE-2022-33068",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33068"
},
{
"name": "CVE-2025-38342",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38342"
},
{
"name": "CVE-2025-54988",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54988"
},
{
"name": "CVE-2024-58068",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58068"
},
{
"name": "CVE-2025-23083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23083"
},
{
"name": "CVE-2015-4777",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4777"
},
{
"name": "CVE-2025-7039",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7039"
},
{
"name": "CVE-2025-38167",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38167"
},
{
"name": "CVE-2022-42915",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42915"
},
{
"name": "CVE-2023-0687",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0687"
},
{
"name": "CVE-2024-57998",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57998"
},
{
"name": "CVE-2021-3426",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3426"
},
{
"name": "CVE-2022-32221",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32221"
},
{
"name": "CVE-2022-1304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1304"
},
{
"name": "CVE-2021-2388",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2388"
},
{
"name": "CVE-2022-37434",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37434"
},
{
"name": "CVE-2025-38257",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38257"
},
{
"name": "CVE-2022-29458",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29458"
},
{
"name": "CVE-2025-38206",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38206"
},
{
"name": "CVE-2019-12900",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-12900"
},
{
"name": "CVE-2023-5156",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5156"
},
{
"name": "CVE-2024-39908",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39908"
},
{
"name": "CVE-2025-27220",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27220"
},
{
"name": "CVE-2021-32256",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32256"
},
{
"name": "CVE-2022-22942",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22942"
},
{
"name": "CVE-2024-38950",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38950"
},
{
"name": "CVE-2025-55163",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55163"
},
{
"name": "CVE-2025-21862",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21862"
},
{
"name": "CVE-2023-47282",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47282"
},
{
"name": "CVE-2016-20012",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-20012"
},
{
"name": "CVE-2025-38111",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38111"
},
{
"name": "CVE-2024-0553",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0553"
},
{
"name": "CVE-2022-44638",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-44638"
},
{
"name": "CVE-2019-8325",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8325"
},
{
"name": "CVE-2025-21950",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21950"
},
{
"name": "CVE-2025-5918",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5918"
},
{
"name": "CVE-2019-3792",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-3792"
},
{
"name": "CVE-2022-43235",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43235"
},
{
"name": "CVE-2025-50092",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50092"
},
{
"name": "CVE-2025-50099",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50099"
},
{
"name": "CVE-2017-3614",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3614"
},
{
"name": "CVE-2022-0562",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0562"
},
{
"name": "CVE-2022-28131",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28131"
},
{
"name": "CVE-2025-22001",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22001"
},
{
"name": "CVE-2024-10524",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10524"
},
{
"name": "CVE-2025-40017",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40017"
},
{
"name": "CVE-2023-45919",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45919"
},
{
"name": "CVE-2025-38326",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38326"
},
{
"name": "CVE-2025-3263",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3263"
},
{
"name": "CVE-2025-4878",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4878"
},
{
"name": "CVE-2018-15607",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-15607"
},
{
"name": "CVE-2025-21899",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21899"
},
{
"name": "CVE-2025-32990",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32990"
},
{
"name": "CVE-2025-38384",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38384"
},
{
"name": "CVE-2025-40778",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40778"
},
{
"name": "CVE-2025-21719",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21719"
},
{
"name": "CVE-2025-38424",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38424"
},
{
"name": "CVE-2025-38430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38430"
},
{
"name": "CVE-2025-21718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21718"
},
{
"name": "CVE-2025-3001",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3001"
},
{
"name": "CVE-2025-9288",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9288"
},
{
"name": "CVE-2021-35588",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35588"
},
{
"name": "CVE-2022-32545",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32545"
},
{
"name": "CVE-2025-21694",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21694"
},
{
"name": "CVE-2025-41244",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41244"
},
{
"name": "CVE-2022-24675",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24675"
},
{
"name": "CVE-2023-2603",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2603"
},
{
"name": "CVE-2025-21820",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21820"
},
{
"name": "CVE-2017-6838",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6838"
},
{
"name": "CVE-2024-41946",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41946"
},
{
"name": "CVE-2025-4802",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4802"
},
{
"name": "CVE-2024-21140",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21140"
},
{
"name": "CVE-2024-41817",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41817"
},
{
"name": "CVE-2024-57979",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57979"
},
{
"name": "CVE-2024-58071",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58071"
},
{
"name": "CVE-2025-21994",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21994"
},
{
"name": "CVE-2025-30684",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30684"
},
{
"name": "CVE-2017-6835",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6835"
},
{
"name": "CVE-2024-21094",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21094"
},
{
"name": "CVE-2025-48989",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48989"
},
{
"name": "CVE-2024-9143",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9143"
},
{
"name": "CVE-2023-0799",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0799"
},
{
"name": "CVE-2024-12087",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12087"
},
{
"name": "CVE-2025-38420",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38420"
},
{
"name": "CVE-2021-3521",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3521"
},
{
"name": "CVE-2022-23806",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23806"
},
{
"name": "CVE-2022-21365",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21365"
},
{
"name": "CVE-2025-21943",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21943"
},
{
"name": "CVE-2019-16775",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16775"
},
{
"name": "CVE-2024-57997",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57997"
},
{
"name": "CVE-2025-38160",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38160"
},
{
"name": "CVE-2024-33601",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-33601"
},
{
"name": "CVE-2025-32989",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32989"
},
{
"name": "CVE-2025-6051",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6051"
},
{
"name": "CVE-2022-21283",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21283"
},
{
"name": "CVE-2022-31782",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-31782"
},
{
"name": "CVE-2025-50093",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50093"
},
{
"name": "CVE-2025-38107",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38107"
},
{
"name": "CVE-2025-32434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32434"
},
{
"name": "CVE-2025-22874",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22874"
},
{
"name": "CVE-2025-53069",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53069"
},
{
"name": "CVE-2025-38085",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38085"
},
{
"name": "CVE-2025-21806",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21806"
},
{
"name": "CVE-2025-38222",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38222"
},
{
"name": "CVE-2025-38197",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38197"
},
{
"name": "CVE-2022-1271",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1271"
},
{
"name": "CVE-2024-28085",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28085"
},
{
"name": "CVE-2022-43253",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43253"
},
{
"name": "CVE-2021-36221",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36221"
},
{
"name": "CVE-2024-57977",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57977"
},
{
"name": "CVE-2018-1000075",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000075"
},
{
"name": "CVE-2025-53019",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53019"
},
{
"name": "CVE-2020-14782",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14782"
},
{
"name": "CVE-2025-50059",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50059"
},
{
"name": "CVE-2024-5569",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5569"
},
{
"name": "CVE-2024-57952",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57952"
},
{
"name": "CVE-2025-53367",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53367"
},
{
"name": "CVE-2025-21579",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21579"
},
{
"name": "CVE-2021-45942",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45942"
},
{
"name": "CVE-2022-1615",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1615"
},
{
"name": "CVE-2025-21928",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21928"
},
{
"name": "CVE-2021-20246",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20246"
},
{
"name": "CVE-2025-21707",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21707"
},
{
"name": "CVE-2023-24755",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24755"
},
{
"name": "CVE-2024-34156",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34156"
},
{
"name": "CVE-2022-2880",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2880"
},
{
"name": "CVE-2025-5025",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5025"
},
{
"name": "CVE-2023-21937",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21937"
},
{
"name": "CVE-2022-23773",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23773"
},
{
"name": "CVE-2025-22007",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22007"
},
{
"name": "CVE-2023-24539",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24539"
},
{
"name": "CVE-2024-27281",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27281"
},
{
"name": "CVE-2025-38467",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38467"
},
{
"name": "CVE-2024-34459",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34459"
},
{
"name": "CVE-2025-21804",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21804"
},
{
"name": "CVE-2021-34558",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-34558"
},
{
"name": "CVE-2021-3737",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3737"
},
{
"name": "CVE-2025-49795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49795"
},
{
"name": "CVE-2017-6837",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6837"
},
{
"name": "CVE-2014-9913",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-9913"
},
{
"name": "CVE-2025-21934",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21934"
},
{
"name": "CVE-2025-38072",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38072"
},
{
"name": "CVE-2025-53044",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53044"
},
{
"name": "CVE-2023-6237",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6237"
},
{
"name": "CVE-2024-37407",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37407"
},
{
"name": "CVE-2015-4775",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4775"
},
{
"name": "CVE-2025-22011",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22011"
},
{
"name": "CVE-2022-1725",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1725"
},
{
"name": "CVE-2022-43252",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43252"
},
{
"name": "CVE-2023-0614",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0614"
},
{
"name": "CVE-2016-0694",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0694"
},
{
"name": "CVE-2023-6228",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6228"
},
{
"name": "CVE-2021-46848",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46848"
},
{
"name": "CVE-2024-5197",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5197"
},
{
"name": "CVE-2020-21606",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-21606"
},
{
"name": "CVE-2025-38075",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38075"
},
{
"name": "CVE-2025-38000",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38000"
},
{
"name": "CVE-2022-40674",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40674"
},
{
"name": "CVE-2025-1376",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1376"
},
{
"name": "CVE-2025-30761",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30761"
},
{
"name": "CVE-2001-1269",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-1269"
},
{
"name": "CVE-2025-50087",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50087"
},
{
"name": "CVE-2024-22365",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-22365"
},
{
"name": "CVE-2025-38058",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38058"
},
{
"name": "CVE-2023-20873",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-20873"
},
{
"name": "CVE-2024-47535",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47535"
},
{
"name": "CVE-2022-4450",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4450"
},
{
"name": "CVE-2025-38617",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38617"
},
{
"name": "CVE-2025-21762",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21762"
},
{
"name": "CVE-2023-47169",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47169"
},
{
"name": "CVE-2025-38122",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38122"
},
{
"name": "CVE-2025-21801",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21801"
},
{
"name": "CVE-2024-7592",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7592"
},
{
"name": "CVE-2025-48988",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48988"
},
{
"name": "CVE-2025-38083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38083"
},
{
"name": "CVE-2023-2650",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2650"
},
{
"name": "CVE-2023-0795",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0795"
},
{
"name": "CVE-2015-2583",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2583"
},
{
"name": "CVE-2025-21692",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21692"
},
{
"name": "CVE-2025-38173",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38173"
},
{
"name": "CVE-2022-21434",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21434"
},
{
"name": "CVE-2025-2148",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2148"
},
{
"name": "CVE-2024-2236",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2236"
},
{
"name": "CVE-2025-38143",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38143"
},
{
"name": "CVE-2023-4039",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4039"
},
{
"name": "CVE-2025-45768",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-45768"
},
{
"name": "CVE-2023-38469",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38469"
},
{
"name": "CVE-2024-38428",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38428"
},
{
"name": "CVE-2022-3821",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3821"
},
{
"name": "CVE-2014-3577",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3577"
},
{
"name": "CVE-2025-21869",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21869"
},
{
"name": "CVE-2025-1365",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1365"
},
{
"name": "CVE-2023-32570",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32570"
},
{
"name": "CVE-2025-54410",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54410"
},
{
"name": "CVE-2023-52970",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52970"
},
{
"name": "CVE-2022-3996",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3996"
},
{
"name": "CVE-2024-25062",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25062"
},
{
"name": "CVE-2016-5841",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-5841"
},
{
"name": "CVE-2022-2879",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2879"
},
{
"name": "CVE-2025-53101",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53101"
},
{
"name": "CVE-2022-32205",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32205"
},
{
"name": "CVE-2023-27534",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27534"
},
{
"name": "CVE-2024-2398",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2398"
},
{
"name": "CVE-2023-24532",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24532"
},
{
"name": "CVE-2023-27536",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27536"
},
{
"name": "CVE-2025-52434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52434"
},
{
"name": "CVE-2024-54458",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54458"
},
{
"name": "CVE-2022-44267",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-44267"
},
{
"name": "CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"name": "CVE-2015-4783",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4783"
},
{
"name": "CVE-2019-8321",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-8321"
},
{
"name": "CVE-2025-21826",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21826"
},
{
"name": "CVE-2025-29768",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-29768"
},
{
"name": "CVE-2015-4774",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4774"
},
{
"name": "CVE-2023-50495",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-50495"
},
{
"name": "CVE-2022-23772",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23772"
},
{
"name": "CVE-2022-21294",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21294"
},
{
"name": "CVE-2025-21750",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21750"
},
{
"name": "CVE-2017-11164",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-11164"
},
{
"name": "CVE-2024-57924",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57924"
},
{
"name": "CVE-2025-21912",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21912"
},
{
"name": "CVE-2018-13440",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-13440"
},
{
"name": "CVE-2022-42898",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42898"
},
{
"name": "CVE-2025-46393",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46393"
},
{
"name": "CVE-2022-43551",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43551"
},
{
"name": "CVE-2021-0561",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-0561"
},
{
"name": "CVE-2018-12599",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12599"
},
{
"name": "CVE-2025-21859",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21859"
},
{
"name": "CVE-2025-38416",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38416"
},
{
"name": "CVE-2022-1587",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1587"
},
{
"name": "CVE-2025-21825",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21825"
},
{
"name": "CVE-2025-30698",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30698"
},
{
"name": "CVE-2017-7246",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7246"
},
{
"name": "CVE-2020-2755",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2755"
},
{
"name": "CVE-2025-8714",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8714"
},
{
"name": "CVE-2023-27533",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27533"
},
{
"name": "CVE-2022-0284",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0284"
},
{
"name": "CVE-2017-7500",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7500"
},
{
"name": "CVE-2025-9086",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9086"
},
{
"name": "CVE-2025-49124",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49124"
},
{
"name": "CVE-2023-6481",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6481"
},
{
"name": "CVE-2024-58016",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58016"
},
{
"name": "CVE-2020-14779",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14779"
},
{
"name": "CVE-2025-21903",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21903"
},
{
"name": "CVE-2021-41772",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41772"
},
{
"name": "CVE-2021-32292",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32292"
},
{
"name": "CVE-2025-38194",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38194"
},
{
"name": "CVE-2024-0727",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0727"
},
{
"name": "CVE-2023-6378",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6378"
},
{
"name": "CVE-2024-10041",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10041"
},
{
"name": "CVE-2023-6129",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6129"
},
{
"name": "CVE-2022-34903",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34903"
},
{
"name": "CVE-2023-1667",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1667"
},
{
"name": "CVE-2022-2953",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2953"
},
{
"name": "CVE-2022-43238",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43238"
},
{
"name": "CVE-2025-3121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3121"
},
{
"name": "CVE-2022-4899",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4899"
},
{
"name": "CVE-2022-43680",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43680"
},
{
"name": "CVE-2025-21956",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21956"
},
{
"name": "CVE-2024-20696",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20696"
},
{
"name": "CVE-2025-21761",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21761"
},
{
"name": "CVE-2025-46149",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46149"
},
{
"name": "CVE-2021-26945",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-26945"
},
{
"name": "CVE-2025-37932",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37932"
},
{
"name": "CVE-2022-3219",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3219"
},
{
"name": "CVE-2025-46152",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46152"
},
{
"name": "CVE-2025-37890",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37890"
},
{
"name": "CVE-2024-57951",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57951"
},
{
"name": "CVE-2025-4673",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4673"
},
{
"name": "CVE-2022-34169",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34169"
},
{
"name": "CVE-2025-38348",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38348"
},
{
"name": "CVE-2023-34969",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34969"
},
{
"name": "CVE-2025-21844",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21844"
},
{
"name": "CVE-2025-21885",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21885"
},
{
"name": "CVE-2020-22916",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-22916"
},
{
"name": "CVE-2025-21784",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21784"
},
{
"name": "CVE-2025-31672",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31672"
},
{
"name": "CVE-2025-21681",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21681"
},
{
"name": "CVE-2023-22045",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22045"
},
{
"name": "CVE-2025-38540",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38540"
},
{
"name": "CVE-2025-5916",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5916"
},
{
"name": "CVE-2025-21676",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21676"
},
{
"name": "CVE-2025-30721",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30721"
},
{
"name": "CVE-2025-38403",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38403"
},
{
"name": "CVE-2022-28463",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28463"
},
{
"name": "CVE-2022-23308",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23308"
},
{
"name": "CVE-2025-21726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21726"
},
{
"name": "CVE-2023-29400",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29400"
},
{
"name": "CVE-2025-58056",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58056"
},
{
"name": "CVE-2025-22871",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22871"
},
{
"name": "CVE-2018-3779",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-3779"
},
{
"name": "CVE-2024-21138",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21138"
},
{
"name": "CVE-2020-28196",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-28196"
},
{
"name": "CVE-2024-27407",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-27407"
},
{
"name": "CVE-2025-41232",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41232"
},
{
"name": "CVE-2024-58020",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58020"
},
{
"name": "CVE-2025-50091",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50091"
},
{
"name": "CVE-2025-10911",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-10911"
},
{
"name": "CVE-2025-32988",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32988"
},
{
"name": "CVE-2021-31566",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-31566"
},
{
"name": "CVE-2024-10963",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-10963"
},
{
"name": "CVE-2022-28805",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28805"
},
{
"name": "CVE-2024-26461",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26461"
},
{
"name": "CVE-2024-34750",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34750"
},
{
"name": "CVE-2021-29923",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-29923"
},
{
"name": "CVE-2017-3604",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3604"
},
{
"name": "CVE-2025-21723",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21723"
},
{
"name": "CVE-2023-0804",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0804"
},
{
"name": "CVE-2023-22049",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22049"
},
{
"name": "CVE-2024-24787",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24787"
},
{
"name": "CVE-2025-21802",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21802"
},
{
"name": "CVE-2022-21341",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21341"
},
{
"name": "CVE-2025-38146",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38146"
},
{
"name": "CVE-2025-21705",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21705"
},
{
"name": "CVE-2024-38828",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38828"
},
{
"name": "CVE-2023-27538",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27538"
},
{
"name": "CVE-2022-1355",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1355"
},
{
"name": "CVE-2025-47291",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47291"
},
{
"name": "CVE-2023-4641",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4641"
},
{
"name": "CVE-2025-27113",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27113"
},
{
"name": "CVE-2024-47081",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47081"
},
{
"name": "CVE-2023-36054",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-36054"
},
{
"name": "CVE-2024-26458",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26458"
},
{
"name": "CVE-2025-38418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38418"
},
{
"name": "CVE-2025-38090",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38090"
},
{
"name": "CVE-2025-21721",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21721"
},
{
"name": "CVE-2025-21810",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21810"
},
{
"name": "CVE-2022-1420",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1420"
},
{
"name": "CVE-2022-23218",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23218"
},
{
"name": "CVE-2021-24031",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-24031"
},
{
"name": "CVE-2025-23166",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23166"
},
{
"name": "CVE-2022-41724",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41724"
},
{
"name": "CVE-2025-46153",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46153"
},
{
"name": "CVE-2025-21877",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21877"
},
{
"name": "CVE-2023-0797",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0797"
},
{
"name": "CVE-2025-5994",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5994"
},
{
"name": "CVE-2021-38115",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-38115"
},
{
"name": "CVE-2025-38415",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38415"
},
{
"name": "CVE-2021-31879",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-31879"
},
{
"name": "CVE-2024-55549",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-55549"
},
{
"name": "CVE-2020-8908",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8908"
},
{
"name": "CVE-2024-49887",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-49887"
},
{
"name": "CVE-2025-22134",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22134"
},
{
"name": "CVE-2021-35578",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35578"
},
{
"name": "CVE-2025-1215",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1215"
},
{
"name": "CVE-2024-6119",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6119"
},
{
"name": "CVE-2023-1916",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1916"
},
{
"name": "CVE-2021-20309",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20309"
},
{
"name": "CVE-2022-29217",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29217"
},
{
"name": "CVE-2024-0397",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0397"
},
{
"name": "CVE-2022-30634",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30634"
},
{
"name": "CVE-2023-38472",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38472"
},
{
"name": "CVE-2024-56826",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56826"
},
{
"name": "CVE-2017-12643",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12643"
},
{
"name": "CVE-2024-57953",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57953"
},
{
"name": "CVE-2020-14583",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14583"
},
{
"name": "CVE-2025-24294",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24294"
},
{
"name": "CVE-2023-48232",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48232"
},
{
"name": "CVE-2021-26720",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-26720"
},
{
"name": "CVE-2025-54801",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54801"
},
{
"name": "CVE-2025-40909",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40909"
},
{
"name": "CVE-2025-53054",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53054"
},
{
"name": "CVE-2025-21878",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21878"
},
{
"name": "CVE-2023-24756",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24756"
},
{
"name": "CVE-2017-3607",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3607"
},
{
"name": "CVE-2021-44716",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44716"
},
{
"name": "CVE-2022-2520",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2520"
},
{
"name": "CVE-2022-21340",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21340"
},
{
"name": "CVE-2024-47874",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47874"
},
{
"name": "CVE-2025-21670",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21670"
},
{
"name": "CVE-2025-9403",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9403"
},
{
"name": "CVE-2023-1255",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1255"
},
{
"name": "CVE-2025-21739",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21739"
},
{
"name": "CVE-2016-4074",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4074"
},
{
"name": "CVE-2024-0746",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0746"
},
{
"name": "CVE-2025-21775",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21775"
},
{
"name": "CVE-2024-12254",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12254"
},
{
"name": "CVE-2025-21846",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21846"
},
{
"name": "CVE-2022-33099",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33099"
},
{
"name": "CVE-2023-45931",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45931"
},
{
"name": "CVE-2025-8114",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8114"
},
{
"name": "CVE-2025-38400",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38400"
},
{
"name": "CVE-2023-6004",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6004"
},
{
"name": "CVE-2025-32387",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32387"
},
{
"name": "CVE-2024-26775",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26775"
},
{
"name": "CVE-2022-25309",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25309"
},
{
"name": "CVE-2025-4516",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4516"
},
{
"name": "CVE-2025-38136",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38136"
},
{
"name": "CVE-2024-38808",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38808"
},
{
"name": "CVE-2025-22869",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22869"
},
{
"name": "CVE-2024-12747",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12747"
},
{
"name": "CVE-2022-3358",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3358"
},
{
"name": "CVE-2023-41175",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-41175"
},
{
"name": "CVE-2023-48234",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-48234"
},
{
"name": "CVE-2025-55212",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55212"
},
{
"name": "CVE-2022-36087",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-36087"
},
{
"name": "CVE-2022-32547",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32547"
},
{
"name": "CVE-2025-6021",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6021"
},
{
"name": "CVE-2022-0351",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0351"
},
{
"name": "CVE-2022-35737",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35737"
},
{
"name": "CVE-2022-21293",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21293"
},
{
"name": "CVE-2022-2097",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2097"
},
{
"name": "CVE-2022-26280",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26280"
},
{
"name": "CVE-2025-37752",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37752"
},
{
"name": "CVE-2025-55668",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55668"
},
{
"name": "CVE-2023-7008",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-7008"
},
{
"name": "CVE-2022-1354",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1354"
},
{
"name": "CVE-2023-24540",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24540"
},
{
"name": "CVE-2025-21873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21873"
},
{
"name": "CVE-2024-4603",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4603"
},
{
"name": "CVE-2025-38048",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38048"
},
{
"name": "CVE-2019-13147",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13147"
},
{
"name": "CVE-2025-50104",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50104"
},
{
"name": "CVE-2025-25193",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25193"
},
{
"name": "CVE-2020-2800",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2800"
},
{
"name": "CVE-2024-8096",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8096"
},
{
"name": "CVE-2018-11655",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-11655"
},
{
"name": "CVE-2022-4415",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-4415"
},
{
"name": "CVE-2022-2928",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2928"
},
{
"name": "CVE-2025-21765",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21765"
},
{
"name": "CVE-2023-3576",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3576"
},
{
"name": "CVE-2025-38477",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38477"
},
{
"name": "CVE-2023-4806",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4806"
},
{
"name": "CVE-2025-61772",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61772"
},
{
"name": "CVE-2025-57803",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-57803"
},
{
"name": "CVE-2023-46246",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46246"
},
{
"name": "CVE-2025-21782",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21782"
},
{
"name": "CVE-2023-31437",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31437"
},
{
"name": "CVE-2023-47039",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47039"
},
{
"name": "CVE-2025-30722",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30722"
},
{
"name": "CVE-2024-43802",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43802"
},
{
"name": "CVE-2025-38177",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38177"
},
{
"name": "CVE-2016-2781",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2781"
},
{
"name": "CVE-2023-31484",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31484"
},
{
"name": "CVE-2024-56827",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-56827"
},
{
"name": "CVE-2023-29383",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29383"
},
{
"name": "CVE-2024-21145",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21145"
},
{
"name": "CVE-2022-32206",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32206"
},
{
"name": "CVE-2023-37769",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-37769"
},
{
"name": "CVE-2025-21926",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21926"
},
{
"name": "CVE-2022-21282",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21282"
},
{
"name": "CVE-2022-21349",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21349"
},
{
"name": "CVE-2020-29511",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-29511"
},
{
"name": "CVE-2024-50602",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50602"
},
{
"name": "CVE-2015-7697",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7697"
},
{
"name": "CVE-2025-22870",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22870"
},
{
"name": "CVE-2025-21742",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21742"
},
{
"name": "CVE-2025-30687",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30687"
},
{
"name": "CVE-2023-21968",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21968"
},
{
"name": "CVE-2022-43243",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43243"
},
{
"name": "CVE-2024-58002",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58002"
},
{
"name": "CVE-2017-16231",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-16231"
},
{
"name": "CVE-2025-38406",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38406"
},
{
"name": "CVE-2025-50101",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50101"
},
{
"name": "CVE-2025-21930",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21930"
},
{
"name": "CVE-2021-35942",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35942"
},
{
"name": "CVE-2025-46701",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46701"
},
{
"name": "CVE-2025-38001",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38001"
},
{
"name": "CVE-2025-32415",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32415"
},
{
"name": "CVE-2025-24855",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24855"
},
{
"name": "CVE-2025-5702",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5702"
},
{
"name": "CVE-2025-21870",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21870"
},
{
"name": "CVE-2017-9409",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-9409"
},
{
"name": "CVE-2023-24537",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24537"
},
{
"name": "CVE-2018-1000077",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000077"
},
{
"name": "CVE-2025-21892",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21892"
},
{
"name": "CVE-2024-58052",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58052"
},
{
"name": "CVE-2025-21944",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21944"
},
{
"name": "CVE-2025-21905",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21905"
},
{
"name": "CVE-2024-30171",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-30171"
},
{
"name": "CVE-2024-23337",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-23337"
},
{
"name": "CVE-2016-0689",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0689"
},
{
"name": "CVE-2025-38352",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38352"
},
{
"name": "CVE-2025-30749",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30749"
},
{
"name": "CVE-2024-54456",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54456"
},
{
"name": "CVE-2025-61748",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61748"
},
{
"name": "CVE-2025-21920",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21920"
},
{
"name": "CVE-2025-55554",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55554"
},
{
"name": "CVE-2024-43168",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43168"
},
{
"name": "CVE-2014-8140",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-8140"
},
{
"name": "CVE-2025-22235",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22235"
},
{
"name": "CVE-2025-22016",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22016"
},
{
"name": "CVE-2025-4207",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4207"
},
{
"name": "CVE-2021-45346",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45346"
},
{
"name": "CVE-2025-37756",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37756"
},
{
"name": "CVE-2022-0908",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0908"
},
{
"name": "CVE-2025-38263",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38263"
},
{
"name": "CVE-2025-21667",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21667"
},
{
"name": "CVE-2025-9230",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-9230"
},
{
"name": "CVE-2024-46901",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-46901"
},
{
"name": "CVE-2023-49083",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-49083"
},
{
"name": "CVE-2025-21955",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21955"
},
{
"name": "CVE-2025-8677",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8677"
},
{
"name": "CVE-2025-21773",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21773"
},
{
"name": "CVE-2025-53040",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53040"
},
{
"name": "CVE-2025-38218",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38218"
},
{
"name": "CVE-2023-45287",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45287"
},
{
"name": "CVE-2025-53906",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53906"
},
{
"name": "CVE-2025-27789",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27789"
},
{
"name": "CVE-2025-1352",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1352"
},
{
"name": "CVE-2024-43167",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-43167"
},
{
"name": "CVE-2021-28861",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28861"
},
{
"name": "CVE-2024-4741",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4741"
},
{
"name": "CVE-2022-21248",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21248"
},
{
"name": "CVE-2021-33574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33574"
},
{
"name": "CVE-2018-1000035",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000035"
},
{
"name": "CVE-2021-40211",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40211"
},
{
"name": "CVE-2025-48924",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48924"
},
{
"name": "CVE-2024-58001",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58001"
},
{
"name": "CVE-2025-38393",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38393"
},
{
"name": "CVE-2024-26256",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26256"
},
{
"name": "CVE-2023-21930",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21930"
},
{
"name": "CVE-2019-18276",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18276"
},
{
"name": "CVE-2025-38618",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38618"
},
{
"name": "CVE-2021-3326",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3326"
},
{
"name": "CVE-2023-2283",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2283"
},
{
"name": "CVE-2020-0499",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0499"
},
{
"name": "CVE-2025-8916",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8916"
},
{
"name": "CVE-2025-21724",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21724"
},
{
"name": "CVE-2025-32414",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32414"
},
{
"name": "CVE-2025-8885",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8885"
},
{
"name": "CVE-2025-3136",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3136"
},
{
"name": "CVE-2025-55160",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55160"
},
{
"name": "CVE-2025-21891",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21891"
},
{
"name": "CVE-2025-38249",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38249"
},
{
"name": "CVE-2023-40403",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40403"
},
{
"name": "CVE-2025-22013",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22013"
},
{
"name": "CVE-2024-50157",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50157"
},
{
"name": "CVE-2022-48703",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48703"
},
{
"name": "CVE-2025-38154",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38154"
},
{
"name": "CVE-2022-1674",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1674"
},
{
"name": "CVE-2024-20918",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20918"
},
{
"name": "CVE-2025-21858",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21858"
},
{
"name": "CVE-2025-41249",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41249"
},
{
"name": "CVE-2022-30699",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30699"
},
{
"name": "CVE-2025-21672",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21672"
},
{
"name": "CVE-2025-38389",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38389"
},
{
"name": "CVE-2025-38448",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38448"
},
{
"name": "CVE-2022-48281",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48281"
},
{
"name": "CVE-2023-2426",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2426"
},
{
"name": "CVE-2021-35938",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35938"
},
{
"name": "CVE-2025-30704",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30704"
},
{
"name": "CVE-2021-35564",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35564"
},
{
"name": "CVE-2024-57949",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57949"
},
{
"name": "CVE-2025-1632",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1632"
},
{
"name": "CVE-2021-20176",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20176"
},
{
"name": "CVE-2025-21979",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21979"
},
{
"name": "CVE-2022-3278",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3278"
},
{
"name": "CVE-2022-30580",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30580"
},
{
"name": "CVE-2025-21821",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21821"
},
{
"name": "CVE-2022-28321",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28321"
},
{
"name": "CVE-2025-55298",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55298"
},
{
"name": "CVE-2022-43241",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43241"
},
{
"name": "CVE-2017-3606",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3606"
},
{
"name": "CVE-2023-52969",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-52969"
},
{
"name": "CVE-2018-1000073",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000073"
},
{
"name": "CVE-2025-38052",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38052"
},
{
"name": "CVE-2025-38377",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38377"
},
{
"name": "CVE-2023-20883",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-20883"
},
{
"name": "CVE-2025-21733",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21733"
},
{
"name": "CVE-2023-22656",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22656"
},
{
"name": "CVE-2025-46551",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46551"
},
{
"name": "CVE-2025-43965",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43965"
},
{
"name": "CVE-2022-40090",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40090"
},
{
"name": "CVE-2021-36408",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36408"
},
{
"name": "CVE-2023-24329",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24329"
},
{
"name": "CVE-2025-21963",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21963"
},
{
"name": "CVE-2025-53045",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53045"
},
{
"name": "CVE-2023-39327",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39327"
},
{
"name": "CVE-2017-18253",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-18253"
},
{
"name": "CVE-2024-12243",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12243"
},
{
"name": "CVE-2024-26462",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26462"
},
{
"name": "CVE-2024-58053",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58053"
},
{
"name": "CVE-2025-38516",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38516"
},
{
"name": "CVE-2025-30693",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30693"
},
{
"name": "CVE-2025-38462",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38462"
},
{
"name": "CVE-2025-38350",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38350"
},
{
"name": "CVE-2025-38428",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38428"
},
{
"name": "CVE-2025-27363",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27363"
},
{
"name": "CVE-2018-13410",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-13410"
},
{
"name": "CVE-2025-2099",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2099"
},
{
"name": "CVE-2025-38262",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38262"
},
{
"name": "CVE-2025-6638",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6638"
},
{
"name": "CVE-2025-21585",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21585"
},
{
"name": "CVE-2023-24531",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24531"
},
{
"name": "CVE-2025-38138",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38138"
},
{
"name": "CVE-2021-3610",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3610"
},
{
"name": "CVE-2024-58077",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58077"
},
{
"name": "CVE-2025-5283",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5283"
},
{
"name": "CVE-2025-21754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21754"
},
{
"name": "CVE-2024-12088",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12088"
},
{
"name": "CVE-2023-24538",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24538"
},
{
"name": "CVE-2025-38035",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38035"
},
{
"name": "CVE-2023-2975",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2975"
},
{
"name": "CVE-2025-37997",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37997"
},
{
"name": "CVE-2025-24928",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24928"
},
{
"name": "CVE-2021-44717",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44717"
},
{
"name": "CVE-2025-2312",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2312"
},
{
"name": "CVE-2025-0395",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0395"
},
{
"name": "CVE-2025-53506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53506"
},
{
"name": "CVE-2025-21960",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21960"
},
{
"name": "CVE-2025-38310",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38310"
},
{
"name": "CVE-2025-23084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-23084"
},
{
"name": "CVE-2015-4786",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4786"
},
{
"name": "CVE-2020-14155",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14155"
},
{
"name": "CVE-2022-3602",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3602"
},
{
"name": "CVE-2025-37963",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37963"
},
{
"name": "CVE-2022-43250",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-43250"
},
{
"name": "CVE-2022-40304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40304"
},
{
"name": "CVE-2025-38226",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38226"
},
{
"name": "CVE-2025-4947",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4947"
},
{
"name": "CVE-2023-4911",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4911"
},
{
"name": "CVE-2022-29804",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29804"
},
{
"name": "CVE-2023-38473",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38473"
},
{
"name": "CVE-2025-38443",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38443"
},
{
"name": "CVE-2025-0725",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0725"
},
{
"name": "CVE-2023-2976",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2976"
},
{
"name": "CVE-2025-52099",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52099"
},
{
"name": "CVE-2023-43887",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-43887"
},
{
"name": "CVE-2025-21967",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21967"
},
{
"name": "CVE-2025-7424",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7424"
},
{
"name": "CVE-2025-1094",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1094"
},
{
"name": "CVE-2021-24032",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-24032"
},
{
"name": "CVE-2025-38439",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38439"
},
{
"name": "CVE-2022-1434",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1434"
},
{
"name": "CVE-2025-41254",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41254"
},
{
"name": "CVE-2022-21496",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21496"
},
{
"name": "CVE-2022-41723",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-41723"
},
{
"name": "CVE-2020-2757",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2757"
},
{
"name": "CVE-2025-53864",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53864"
},
{
"name": "CVE-2025-38145",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38145"
},
{
"name": "CVE-2022-2598",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2598"
},
{
"name": "CVE-2020-27829",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27829"
},
{
"name": "CVE-2024-4032",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-4032"
},
{
"name": "CVE-2025-37948",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-37948"
},
{
"name": "CVE-2021-27645",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-27645"
},
{
"name": "CVE-2025-21863",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21863"
},
{
"name": "CVE-2025-21856",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21856"
},
{
"name": "CVE-2025-53053",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53053"
},
{
"name": "CVE-2022-2509",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2509"
},
{
"name": "CVE-2024-28835",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28835"
},
{
"name": "CVE-2025-54388",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54388"
},
{
"name": "CVE-2025-21749",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21749"
},
{
"name": "CVE-2017-6839",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6839"
},
{
"name": "CVE-2023-1906",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-1906"
},
{
"name": "CVE-2025-40025",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40025"
},
{
"name": "CVE-2025-38051",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38051"
},
{
"name": "CVE-2021-35556",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35556"
},
{
"name": "CVE-2025-49796",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49796"
},
{
"name": "CVE-2022-34526",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34526"
},
{
"name": "CVE-2025-8058",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8058"
},
{
"name": "CVE-2023-47471",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47471"
},
{
"name": "CVE-2022-2868",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2868"
},
{
"name": "CVE-2022-1771",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1771"
},
{
"name": "CVE-2025-21945",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21945"
},
{
"name": "CVE-2021-32492",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32492"
},
{
"name": "CVE-2023-39323",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39323"
},
{
"name": "CVE-2023-29402",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29402"
},
{
"name": "CVE-2025-55005",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55005"
},
{
"name": "CVE-2025-32955",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32955"
},
{
"name": "CVE-2025-8732",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8732"
},
{
"name": "CVE-2025-38044",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38044"
},
{
"name": "CVE-2022-1586",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1586"
},
{
"name": "CVE-2023-39326",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39326"
},
{
"name": "CVE-2024-52616",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52616"
},
{
"name": "CVE-2025-38498",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38498"
},
{
"name": "CVE-2025-40015",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40015"
},
{
"name": "CVE-2024-21085",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21085"
},
{
"name": "CVE-2025-21673",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21673"
},
{
"name": "CVE-2025-21829",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21829"
},
{
"name": "CVE-2025-21502",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21502"
},
{
"name": "CVE-2024-57999",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57999"
},
{
"name": "CVE-2018-16645",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16645"
},
{
"name": "CVE-2025-22008",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22008"
},
{
"name": "CVE-2023-38039",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38039"
},
{
"name": "CVE-2023-29409",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29409"
},
{
"name": "CVE-2022-21443",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21443"
},
{
"name": "CVE-2025-21969",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21969"
},
{
"name": "CVE-2025-38200",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38200"
},
{
"name": "CVE-2025-40007",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40007"
},
{
"name": "CVE-2024-58072",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58072"
},
{
"name": "CVE-2025-38273",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38273"
},
{
"name": "CVE-2025-38346",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38346"
},
{
"name": "CVE-2025-55315",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55315"
},
{
"name": "CVE-2018-11813",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-11813"
},
{
"name": "CVE-2025-21722",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21722"
},
{
"name": "CVE-2024-50379",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50379"
},
{
"name": "CVE-2021-35560",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35560"
},
{
"name": "CVE-2023-39325",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39325"
},
{
"name": "CVE-2025-21793",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21793"
},
{
"name": "CVE-2022-2719",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2719"
},
{
"name": "CVE-2025-21581",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21581"
},
{
"name": "CVE-2022-45873",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-45873"
},
{
"name": "CVE-2023-34151",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-34151"
},
{
"name": "CVE-2023-51384",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51384"
},
{
"name": "CVE-2021-43809",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-43809"
},
{
"name": "CVE-2025-5914",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5914"
},
{
"name": "CVE-2015-1606",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-1606"
},
{
"name": "CVE-2025-21894",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21894"
},
{
"name": "CVE-2025-21919",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21919"
},
{
"name": "CVE-2023-3896",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3896"
},
{
"name": "CVE-2023-2908",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2908"
},
{
"name": "CVE-2024-20945",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20945"
},
{
"name": "CVE-2025-58754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58754"
},
{
"name": "CVE-2023-39615",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39615"
},
{
"name": "CVE-2023-24534",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24534"
},
{
"name": "CVE-2025-21854",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21854"
},
{
"name": "CVE-2017-7501",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7501"
},
{
"name": "CVE-2024-21131",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21131"
},
{
"name": "CVE-2023-31486",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31486"
},
{
"name": "CVE-2020-21599",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-21599"
},
{
"name": "CVE-2025-41242",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41242"
},
{
"name": "CVE-2024-21210",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21210"
},
{
"name": "CVE-2013-0340",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0340"
},
{
"name": "CVE-2023-3446",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3446"
},
{
"name": "CVE-2025-21759",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21759"
},
{
"name": "CVE-2023-32611",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32611"
},
{
"name": "CVE-2024-38816",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38816"
},
{
"name": "CVE-2024-2511",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2511"
},
{
"name": "CVE-2015-20107",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-20107"
},
{
"name": "CVE-2023-39978",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-39978"
},
{
"name": "CVE-2024-34397",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34397"
},
{
"name": "CVE-2025-38320",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38320"
},
{
"name": "CVE-2025-53057",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53057"
},
{
"name": "CVE-2024-24786",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24786"
},
{
"name": "CVE-2025-8177",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8177"
},
{
"name": "CVE-2025-21968",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21968"
},
{
"name": "CVE-2024-58083",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58083"
},
{
"name": "CVE-2021-20311",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20311"
},
{
"name": "CVE-2024-58055",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58055"
},
{
"name": "CVE-2025-21991",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21991"
},
{
"name": "CVE-2023-28486",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28486"
},
{
"name": "CVE-2020-27618",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27618"
},
{
"name": "CVE-2024-57993",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57993"
},
{
"name": "CVE-2025-21887",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21887"
},
{
"name": "CVE-2023-6246",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6246"
},
{
"name": "CVE-2021-20241",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20241"
},
{
"name": "CVE-2017-12674",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12674"
},
{
"name": "CVE-2023-0800",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0800"
},
{
"name": "CVE-2025-62171",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62171"
},
{
"name": "CVE-2025-38280",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38280"
},
{
"name": "CVE-2023-5388",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5388"
},
{
"name": "CVE-2018-1000078",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1000078"
},
{
"name": "CVE-2020-2756",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2756"
},
{
"name": "CVE-2025-50950",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50950"
},
{
"name": "CVE-2020-21605",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-21605"
},
{
"name": "CVE-2024-54534",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-54534"
},
{
"name": "CVE-2023-21967",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-21967"
},
{
"name": "CVE-2025-38084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38084"
},
{
"name": "CVE-2024-34155",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34155"
},
{
"name": "CVE-2022-23219",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23219"
},
{
"name": "CVE-2017-1000476",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-1000476"
},
{
"name": "CVE-2015-2640",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-2640"
},
{
"name": "CVE-2025-30685",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30685"
},
{
"name": "CVE-2024-41123",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41123"
},
{
"name": "CVE-2025-6921",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6921"
},
{
"name": "CVE-2015-8863",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8863"
},
{
"name": "CVE-2022-21619",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21619"
},
{
"name": "CVE-2025-30695",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30695"
},
{
"name": "CVE-2025-30688",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30688"
},
{
"name": "CVE-2023-5752",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5752"
},
{
"name": "CVE-2018-11656",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-11656"
},
{
"name": "CVE-2025-38103",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38103"
},
{
"name": "CVE-2022-2127",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2127"
},
{
"name": "CVE-2021-25217",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-25217"
},
{
"name": "CVE-2025-38514",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38514"
},
{
"name": "CVE-2018-19876",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-19876"
},
{
"name": "CVE-2025-61780",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61780"
},
{
"name": "CVE-2021-20310",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20310"
},
{
"name": "CVE-2021-20245",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20245"
},
{
"name": "CVE-2021-35561",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35561"
},
{
"name": "CVE-2025-21732",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21732"
},
{
"name": "CVE-2025-38569",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38569"
},
{
"name": "CVE-2022-21476",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21476"
},
{
"name": "CVE-2023-22796",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22796"
},
{
"name": "CVE-2025-21875",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21875"
},
{
"name": "CVE-2023-0361",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-0361"
},
{
"name": "CVE-2025-38204",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38204"
},
{
"name": "CVE-2021-40812",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40812"
},
{
"name": "CVE-2021-4217",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4217"
},
{
"name": "CVE-2023-32643",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32643"
},
{
"name": "CVE-2023-27537",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-27537"
},
{
"name": "CVE-2025-22015",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22015"
},
{
"name": "CVE-2025-53066",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53066"
},
{
"name": "CVE-2023-5678",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5678"
},
{
"name": "CVE-2024-2961",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-2961"
},
{
"name": "CVE-2025-21962",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21962"
},
{
"name": "CVE-2025-29786",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-29786"
},
{
"name": "CVE-2025-21832",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21832"
},
{
"name": "CVE-2024-12133",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12133"
},
{
"name": "CVE-2024-24784",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24784"
},
{
"name": "CVE-2022-27780",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27780"
},
{
"name": "CVE-2018-9135",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-9135"
},
{
"name": "CVE-2025-38410",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38410"
},
{
"name": "CVE-2025-21790",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21790"
},
{
"name": "CVE-2024-52316",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52316"
},
{
"name": "CVE-2024-21217",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21217"
},
{
"name": "CVE-2021-39212",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-39212"
},
{
"name": "CVE-2024-28182",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28182"
},
{
"name": "CVE-2024-58014",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58014"
},
{
"name": "CVE-2025-21680",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21680"
},
{
"name": "CVE-2025-0167",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-0167"
},
{
"name": "CVE-2017-12433",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12433"
},
{
"name": "CVE-2025-21924",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21924"
},
{
"name": "CVE-2021-3574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3574"
},
{
"name": "CVE-2023-6597",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6597"
},
{
"name": "CVE-2024-20952",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20952"
},
{
"name": "CVE-2022-21541",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21541"
},
{
"name": "CVE-2025-22227",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22227"
},
{
"name": "CVE-2025-47273",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47273"
},
{
"name": "CVE-2025-27221",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27221"
},
{
"name": "CVE-2024-24789",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24789"
},
{
"name": "CVE-2024-58006",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58006"
},
{
"name": "CVE-2025-21710",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21710"
},
{
"name": "CVE-2022-21360",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21360"
},
{
"name": "CVE-2025-22088",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22088"
},
{
"name": "CVE-2025-38460",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38460"
},
{
"name": "CVE-2022-27664",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27664"
},
{
"name": "CVE-2022-25858",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25858"
},
{
"name": "CVE-2022-21296",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21296"
},
{
"name": "CVE-2022-48303",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48303"
},
{
"name": "CVE-2025-38345",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38345"
},
{
"name": "CVE-2022-21540",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21540"
},
{
"name": "CVE-2025-21815",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21815"
},
{
"name": "CVE-2025-50083",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50083"
},
{
"name": "CVE-2024-37371",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37371"
},
{
"name": "CVE-2017-6836",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6836"
},
{
"name": "CVE-2021-3500",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3500"
},
{
"name": "CVE-2022-25310",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25310"
},
{
"name": "CVE-2023-38545",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38545"
},
{
"name": "CVE-2021-43618",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-43618"
},
{
"name": "CVE-2021-20251",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20251"
},
{
"name": "CVE-2025-21669",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21669"
},
{
"name": "CVE-2016-1000027",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1000027"
},
{
"name": "CVE-2021-33621",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33621"
},
{
"name": "CVE-2025-57807",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-57807"
},
{
"name": "CVE-2025-38231",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38231"
},
{
"name": "CVE-2022-26488",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26488"
},
{
"name": "CVE-2025-21716",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21716"
},
{
"name": "CVE-2024-49761",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-49761"
},
{
"name": "CVE-2024-6345",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6345"
},
{
"name": "CVE-2025-3777",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3777"
},
{
"name": "CVE-2025-21964",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21964"
},
{
"name": "CVE-2024-0567",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0567"
},
{
"name": "CVE-2018-18384",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-18384"
},
{
"name": "CVE-2024-58080",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-58080"
},
{
"name": "CVE-2025-21744",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21744"
},
{
"name": "CVE-2024-21208",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21208"
},
{
"name": "CVE-2023-32665",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-32665"
},
{
"name": "CVE-2025-31498",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-31498"
},
{
"name": "CVE-2022-30698",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30698"
},
{
"name": "CVE-2023-31438",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31438"
},
{
"name": "CVE-2024-57986",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-57986"
},
{
"name": "CVE-2021-37750",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37750"
},
{
"name": "CVE-2025-3576",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-3576"
},
{
"name": "CVE-2023-23916",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23916"
},
{
"name": "CVE-2021-20244",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-20244"
},
{
"name": "CVE-2025-38181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38181"
},
{
"name": "CVE-2025-21835",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21835"
},
{
"name": "CVE-2025-38391",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-38391"
},
{
"name": "CVE-2025-11411",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11411"
},
{
"name": "CVE-2020-14577",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14577"
},
{
"name": "CVE-2022-3570",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3570"
},
{
"name": "CVE-2016-9844",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-9844"
},
{
"name": "CVE-2019-13136",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13136"
},
{
"name": "CVE-2025-49014",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49014"
},
{
"name": "CVE-2021-36222",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36222"
},
{
"name": "CVE-2021-3941",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3941"
},
{
"name": "CVE-2022-0561",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0561"
},
{
"name": "CVE-2024-6923",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6923"
},
{
"name": "CVE-2025-21811",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-21811"
},
{
"name": "CVE-2024-8088",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8088"
},
{
"name": "CVE-2025-48734",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48734"
},
{
"name": "CVE-2025-11226",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11226"
}
],
"initial_release_date": "2025-11-06T00:00:00",
"last_revision_date": "2025-11-06T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0969",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-11-06T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits VMware. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits VMware",
"vendor_advisories": [
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36320",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36320"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36423",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36423"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2022-19",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36364"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-53",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36351"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36424",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36424"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36412",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36412"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36388",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36388"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36426",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36426"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36411",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36411"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36357",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36357"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36408",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36408"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36349",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36349"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36414",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36414"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36397",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36397"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36389",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36389"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36398",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36398"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36380",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36380"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-41",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36407"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36362",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36362"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36413",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36413"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36384",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36384"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36379",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36379"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36400",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36400"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36377",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36377"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36368",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36368"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36418",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36418"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36420",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36420"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36391",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36391"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36392",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36392"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36353",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36353"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-14",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36356"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36422",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36422"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36381",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36381"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36421",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36421"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36416",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36416"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-86",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36415"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36403",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36403"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36347",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36347"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36383",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36383"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36410",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36410"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36352",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36352"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36394",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36394"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36354",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36354"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36399",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36399"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-53",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36350"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36419",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36419"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-85",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36401"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2022-19",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36365"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36405",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36405"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2018-27",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36367"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36395",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36395"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36387",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36387"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36363",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36363"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36385",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36385"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36409",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36409"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-53",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36359"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36348",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36348"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36386",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36386"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36417",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36417"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36425",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36425"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2018-27",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36366"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2024-44",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36360"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36355",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36355"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2025-53",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36358"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36396",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36396"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36378",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36378"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36382",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36382"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36404",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36404"
},
{
"published_at": "2025-11-05",
"title": "Bulletin de s\u00e9curit\u00e9 VMware DSA-2024-44",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36361"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36402",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36402"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36393",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36393"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36406",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36406"
},
{
"published_at": "2025-11-06",
"title": "Bulletin de s\u00e9curit\u00e9 VMware 36390",
"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36390"
}
]
}
CERTFR-2024-AVI-0160
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Ruby on Rails. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une injection de code indirecte à distance (XSS).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Ruby on Rails | Ruby on Rails | Ruby on Rails versions 7.1.x antérieures à 7.1.3.1 | ||
| Ruby on Rails | N/A | Rack versions 3.0.x antérieures à 3.0.9.1 | ||
| Ruby on Rails | Ruby on Rails | Ruby on Rails versions antérieures à 6.1.7.7 | ||
| Ruby on Rails | Ruby on Rails | Ruby on Rails versions 7.0.x antérieures à 7.0.8.1 | ||
| Ruby on Rails | N/A | Rack versions antérieures à 2.2.8.1 |
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Ruby on Rails versions 7.1.x ant\u00e9rieures \u00e0 7.1.3.1",
"product": {
"name": "Ruby on Rails",
"vendor": {
"name": "Ruby on Rails",
"scada": false
}
}
},
{
"description": "Rack versions 3.0.x ant\u00e9rieures \u00e0 3.0.9.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Ruby on Rails",
"scada": false
}
}
},
{
"description": "Ruby on Rails versions ant\u00e9rieures \u00e0 6.1.7.7",
"product": {
"name": "Ruby on Rails",
"vendor": {
"name": "Ruby on Rails",
"scada": false
}
}
},
{
"description": "Ruby on Rails versions 7.0.x ant\u00e9rieures \u00e0 7.0.8.1",
"product": {
"name": "Ruby on Rails",
"vendor": {
"name": "Ruby on Rails",
"scada": false
}
}
},
{
"description": "Rack versions ant\u00e9rieures \u00e0 2.2.8.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Ruby on Rails",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"name": "CVE-2024-26143",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26143"
},
{
"name": "CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"name": "CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"name": "CVE-2024-26142",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26142"
},
{
"name": "CVE-2024-26144",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26144"
}
],
"links": [],
"reference": "CERTFR-2024-AVI-0160",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-02-23T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Ruby on Rails.\nElles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0\ndistance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une injection\nde code indirecte \u00e0 distance (XSS).\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Ruby on Rails",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Ruby on Rails 84946 du 21 f\u00e9vrier 2024",
"url": "https://discuss.rubyonrails.org/t/possible-redos-vulnerability-in-accept-header-parsing-in-action-dispatch/84946"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Ruby on Rails 84941 du 21 f\u00e9vrier 2024",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Ruby on Rails 84944 du 21 f\u00e9vrier 2024",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Ruby on Rails 84942 du 21 f\u00e9vrier 2024",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Ruby on Rails 84945 du 21 f\u00e9vrier 2024",
"url": "https://discuss.rubyonrails.org/t/possible-sensitive-session-information-leak-in-active-storage/84945"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Ruby on Rails 84947 du 21 f\u00e9vrier 2024",
"url": "https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947"
}
]
}
CERTFR-2024-AVI-0160
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Ruby on Rails. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une injection de code indirecte à distance (XSS).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Ruby on Rails | Ruby on Rails | Ruby on Rails versions 7.1.x antérieures à 7.1.3.1 | ||
| Ruby on Rails | N/A | Rack versions 3.0.x antérieures à 3.0.9.1 | ||
| Ruby on Rails | Ruby on Rails | Ruby on Rails versions antérieures à 6.1.7.7 | ||
| Ruby on Rails | Ruby on Rails | Ruby on Rails versions 7.0.x antérieures à 7.0.8.1 | ||
| Ruby on Rails | N/A | Rack versions antérieures à 2.2.8.1 |
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Ruby on Rails versions 7.1.x ant\u00e9rieures \u00e0 7.1.3.1",
"product": {
"name": "Ruby on Rails",
"vendor": {
"name": "Ruby on Rails",
"scada": false
}
}
},
{
"description": "Rack versions 3.0.x ant\u00e9rieures \u00e0 3.0.9.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Ruby on Rails",
"scada": false
}
}
},
{
"description": "Ruby on Rails versions ant\u00e9rieures \u00e0 6.1.7.7",
"product": {
"name": "Ruby on Rails",
"vendor": {
"name": "Ruby on Rails",
"scada": false
}
}
},
{
"description": "Ruby on Rails versions 7.0.x ant\u00e9rieures \u00e0 7.0.8.1",
"product": {
"name": "Ruby on Rails",
"vendor": {
"name": "Ruby on Rails",
"scada": false
}
}
},
{
"description": "Rack versions ant\u00e9rieures \u00e0 2.2.8.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Ruby on Rails",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2024-25126",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25126"
},
{
"name": "CVE-2024-26143",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26143"
},
{
"name": "CVE-2024-26146",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26146"
},
{
"name": "CVE-2024-26141",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26141"
},
{
"name": "CVE-2024-26142",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26142"
},
{
"name": "CVE-2024-26144",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26144"
}
],
"links": [],
"reference": "CERTFR-2024-AVI-0160",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-02-23T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Ruby on Rails.\nElles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0\ndistance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une injection\nde code indirecte \u00e0 distance (XSS).\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Ruby on Rails",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Ruby on Rails 84946 du 21 f\u00e9vrier 2024",
"url": "https://discuss.rubyonrails.org/t/possible-redos-vulnerability-in-accept-header-parsing-in-action-dispatch/84946"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Ruby on Rails 84941 du 21 f\u00e9vrier 2024",
"url": "https://discuss.rubyonrails.org/t/denial-of-service-vulnerability-in-rack-content-type-parsing/84941"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Ruby on Rails 84944 du 21 f\u00e9vrier 2024",
"url": "https://discuss.rubyonrails.org/t/possible-dos-vulnerability-with-range-header-in-rack/84944"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Ruby on Rails 84942 du 21 f\u00e9vrier 2024",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Ruby on Rails 84945 du 21 f\u00e9vrier 2024",
"url": "https://discuss.rubyonrails.org/t/possible-sensitive-session-information-leak-in-active-storage/84945"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Ruby on Rails 84947 du 21 f\u00e9vrier 2024",
"url": "https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947"
}
]
}
SUSE-SU-2024:0765-1
Vulnerability from csaf_suse - Published: 2024-03-05 12:47 - Updated: 2024-03-05 12:47Summary
Security update for rubygem-rack
Notes
Title of the patch
Security update for rubygem-rack
Description of the patch
This update for rubygem-rack fixes the following issues:
- CVE-2024-25126: Fixed a denial-of-service vulnerability in Rack Content-Type parsing (bsc#1220239).
- CVE-2024-26141: Fixed a denial-of-service vulnerability in Range request header parsing (bsc#1220242).
- CVE-2024-26146: Fixed a denial-of-service vulnerability in Rack headers parsing routine (bsc#1220248).
Patchnames
SUSE-2024-765,SUSE-SLE-Product-HA-15-SP2-2024-765,SUSE-SLE-Product-HA-15-SP3-2024-765,SUSE-SLE-Product-HA-15-SP4-2024-765,SUSE-SLE-Product-HA-15-SP5-2024-765,openSUSE-SLE-15.5-2024-765
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for rubygem-rack",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for rubygem-rack fixes the following issues:\n\n- CVE-2024-25126: Fixed a denial-of-service vulnerability in Rack Content-Type parsing (bsc#1220239).\n- CVE-2024-26141: Fixed a denial-of-service vulnerability in Range request header parsing (bsc#1220242).\n- CVE-2024-26146: Fixed a denial-of-service vulnerability in Rack headers parsing routine (bsc#1220248).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-765,SUSE-SLE-Product-HA-15-SP2-2024-765,SUSE-SLE-Product-HA-15-SP3-2024-765,SUSE-SLE-Product-HA-15-SP4-2024-765,SUSE-SLE-Product-HA-15-SP5-2024-765,openSUSE-SLE-15.5-2024-765",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0765-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0765-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240765-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0765-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-March/018091.html"
},
{
"category": "self",
"summary": "SUSE Bug 1220239",
"url": "https://bugzilla.suse.com/1220239"
},
{
"category": "self",
"summary": "SUSE Bug 1220242",
"url": "https://bugzilla.suse.com/1220242"
},
{
"category": "self",
"summary": "SUSE Bug 1220248",
"url": "https://bugzilla.suse.com/1220248"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-25126 page",
"url": "https://www.suse.com/security/cve/CVE-2024-25126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26146 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26146/"
}
],
"title": "Security update for rubygem-rack",
"tracking": {
"current_release_date": "2024-03-05T12:47:00Z",
"generator": {
"date": "2024-03-05T12:47:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0765-1",
"initial_release_date": "2024-03-05T12:47:00Z",
"revision_history": [
{
"date": "2024-03-05T12:47:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"product": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"product_id": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64"
}
},
{
"category": "product_version",
"name": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.aarch64",
"product": {
"name": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.aarch64",
"product_id": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.aarch64"
}
},
{
"category": "product_version",
"name": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.aarch64",
"product": {
"name": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.aarch64",
"product_id": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.i586",
"product": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.i586",
"product_id": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.i586"
}
},
{
"category": "product_version",
"name": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.i586",
"product": {
"name": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.i586",
"product_id": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.i586"
}
},
{
"category": "product_version",
"name": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.i586",
"product": {
"name": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.i586",
"product_id": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"product": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"product_id": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le"
}
},
{
"category": "product_version",
"name": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.ppc64le",
"product": {
"name": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.ppc64le",
"product_id": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.ppc64le"
}
},
{
"category": "product_version",
"name": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.ppc64le",
"product": {
"name": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.ppc64le",
"product_id": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"product": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"product_id": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x"
}
},
{
"category": "product_version",
"name": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.s390x",
"product": {
"name": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.s390x",
"product_id": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.s390x"
}
},
{
"category": "product_version",
"name": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.s390x",
"product": {
"name": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.s390x",
"product_id": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"product": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"product_id": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64"
}
},
{
"category": "product_version",
"name": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.x86_64",
"product": {
"name": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.x86_64",
"product_id": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.x86_64"
}
},
{
"category": "product_version",
"name": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.x86_64",
"product": {
"name": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.x86_64",
"product_id": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Availability Extension 15 SP2",
"product": {
"name": "SUSE Linux Enterprise High Availability Extension 15 SP2",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-ha:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Availability Extension 15 SP3",
"product": {
"name": "SUSE Linux Enterprise High Availability Extension 15 SP3",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-ha:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Availability Extension 15 SP4",
"product": {
"name": "SUSE Linux Enterprise High Availability Extension 15 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-ha:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Availability Extension 15 SP5",
"product": {
"name": "SUSE Linux Enterprise High Availability Extension 15 SP5",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-ha:15:sp5"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64 as component of SUSE Linux Enterprise High Availability Extension 15 SP2",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le as component of SUSE Linux Enterprise High Availability Extension 15 SP2",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x as component of SUSE Linux Enterprise High Availability Extension 15 SP2",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64 as component of SUSE Linux Enterprise High Availability Extension 15 SP2",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64 as component of SUSE Linux Enterprise High Availability Extension 15 SP3",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le as component of SUSE Linux Enterprise High Availability Extension 15 SP3",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x as component of SUSE Linux Enterprise High Availability Extension 15 SP3",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64 as component of SUSE Linux Enterprise High Availability Extension 15 SP3",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64 as component of SUSE Linux Enterprise High Availability Extension 15 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le as component of SUSE Linux Enterprise High Availability Extension 15 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x as component of SUSE Linux Enterprise High Availability Extension 15 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64 as component of SUSE Linux Enterprise High Availability Extension 15 SP4",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64 as component of SUSE Linux Enterprise High Availability Extension 15 SP5",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le as component of SUSE Linux Enterprise High Availability Extension 15 SP5",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x as component of SUSE Linux Enterprise High Availability Extension 15 SP5",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64 as component of SUSE Linux Enterprise High Availability Extension 15 SP5",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64"
},
"product_reference": "ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.aarch64"
},
"product_reference": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.ppc64le"
},
"product_reference": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.s390x"
},
"product_reference": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.x86_64"
},
"product_reference": "ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.aarch64"
},
"product_reference": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.ppc64le"
},
"product_reference": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.s390x"
},
"product_reference": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.x86_64"
},
"product_reference": "ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-25126"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack\u0027s media type parser to take much longer than expected, leading to a possible denial of service vulnerability (ReDos 2nd degree polynomial). This vulnerability is patched in 3.0.9.1 and 2.2.8.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-25126",
"url": "https://www.suse.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "SUSE Bug 1220239 for CVE-2024-25126",
"url": "https://bugzilla.suse.com/1220239"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-03-05T12:47:00Z",
"details": "important"
}
],
"title": "CVE-2024-25126"
},
{
"cve": "CVE-2024-26141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26141"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such large responses could lead to a denial of service issue. Vulnerable applications will use the `Rack::File` middleware or the `Rack::Utils.byte_ranges` methods (this includes Rails applications). The vulnerability is fixed in 3.0.9.1 and 2.2.8.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26141",
"url": "https://www.suse.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "SUSE Bug 1220242 for CVE-2024-26141",
"url": "https://bugzilla.suse.com/1220242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-03-05T12:47:00Z",
"details": "important"
}
],
"title": "CVE-2024-26141"
},
{
"cve": "CVE-2024-26146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26146"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26146",
"url": "https://www.suse.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "SUSE Bug 1220248 for CVE-2024-26146",
"url": "https://bugzilla.suse.com/1220248"
},
{
"category": "external",
"summary": "SUSE Bug 1227310 for CVE-2024-26146",
"url": "https://bugzilla.suse.com/1227310"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP2:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP3:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP4:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-doc-2.0.8-150000.3.21.2.x86_64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.aarch64",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.ppc64le",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.s390x",
"openSUSE Leap 15.5:ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.21.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-03-05T12:47:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26146"
}
]
}
SUSE-SU-2024:0946-1
Vulnerability from csaf_suse - Published: 2024-03-20 09:27 - Updated: 2024-03-20 09:27Summary
Security update for rubygem-rack-1_4
Notes
Title of the patch
Security update for rubygem-rack-1_4
Description of the patch
This update for rubygem-rack-1_4 fixes the following issues:
- CVE-2024-25126: Fixed a Denial of Service Vulnerability in Rack Content-Type Parsing (bsc#1220239)
- CVE-2024-26141: Fixed a Denial of Service Vulnerability in Range request header parsing (bsc#1220242)
- CVE-2024-26146: Fixed a Denial of Service vulnerability in Rack headers parsing routine (bsc#1220248)
Patchnames
SUSE-2024-946,SUSE-SLE-Module-Containers-12-2024-946
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for rubygem-rack-1_4",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for rubygem-rack-1_4 fixes the following issues:\n\n- CVE-2024-25126: Fixed a Denial of Service Vulnerability in Rack Content-Type Parsing (bsc#1220239)\n- CVE-2024-26141: Fixed a Denial of Service Vulnerability in Range request header parsing (bsc#1220242)\n- CVE-2024-26146: Fixed a Denial of Service vulnerability in Rack headers parsing routine (bsc#1220248)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-946,SUSE-SLE-Module-Containers-12-2024-946",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0946-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:0946-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20240946-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:0946-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-March/018198.html"
},
{
"category": "self",
"summary": "SUSE Bug 1220239",
"url": "https://bugzilla.suse.com/1220239"
},
{
"category": "self",
"summary": "SUSE Bug 1220242",
"url": "https://bugzilla.suse.com/1220242"
},
{
"category": "self",
"summary": "SUSE Bug 1220248",
"url": "https://bugzilla.suse.com/1220248"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-25126 page",
"url": "https://www.suse.com/security/cve/CVE-2024-25126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26146 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26146/"
}
],
"title": "Security update for rubygem-rack-1_4",
"tracking": {
"current_release_date": "2024-03-20T09:27:07Z",
"generator": {
"date": "2024-03-20T09:27:07Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:0946-1",
"initial_release_date": "2024-03-20T09:27:07Z",
"revision_history": [
{
"date": "2024-03-20T09:27:07Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.aarch64",
"product": {
"name": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.aarch64",
"product_id": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.aarch64",
"product": {
"name": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.aarch64",
"product_id": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.aarch64",
"product": {
"name": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.aarch64",
"product_id": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.i586",
"product": {
"name": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.i586",
"product_id": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.i586"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.i586",
"product": {
"name": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.i586",
"product_id": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.i586"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.i586",
"product": {
"name": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.i586",
"product_id": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.ppc64le",
"product": {
"name": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.ppc64le",
"product_id": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.ppc64le",
"product": {
"name": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.ppc64le",
"product_id": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.ppc64le",
"product": {
"name": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.ppc64le",
"product_id": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.s390",
"product": {
"name": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.s390",
"product_id": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.s390"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.s390",
"product": {
"name": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.s390",
"product_id": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.s390"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.s390",
"product": {
"name": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.s390",
"product_id": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.s390x",
"product": {
"name": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.s390x",
"product_id": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.s390x"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.s390x",
"product": {
"name": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.s390x",
"product_id": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.s390x"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.s390x",
"product": {
"name": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.s390x",
"product_id": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.x86_64",
"product": {
"name": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.x86_64",
"product_id": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.x86_64",
"product": {
"name": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.x86_64",
"product_id": "ruby2.1-rubygem-rack-doc-1_4-1.4.5-9.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.x86_64",
"product": {
"name": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.x86_64",
"product_id": "ruby2.1-rubygem-rack-testsuite-1_4-1.4.5-9.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Containers 12",
"product": {
"name": "SUSE Linux Enterprise Module for Containers 12",
"product_id": "SUSE Linux Enterprise Module for Containers 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-containers:12"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 12",
"product_id": "SUSE Linux Enterprise Module for Containers 12:ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.x86_64"
},
"product_reference": "ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-25126"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack\u0027s media type parser to take much longer than expected, leading to a possible denial of service vulnerability (ReDos 2nd degree polynomial). This vulnerability is patched in 3.0.9.1 and 2.2.8.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Containers 12:ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-25126",
"url": "https://www.suse.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "SUSE Bug 1220239 for CVE-2024-25126",
"url": "https://bugzilla.suse.com/1220239"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Containers 12:ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Containers 12:ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-03-20T09:27:07Z",
"details": "important"
}
],
"title": "CVE-2024-25126"
},
{
"cve": "CVE-2024-26141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26141"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such large responses could lead to a denial of service issue. Vulnerable applications will use the `Rack::File` middleware or the `Rack::Utils.byte_ranges` methods (this includes Rails applications). The vulnerability is fixed in 3.0.9.1 and 2.2.8.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Containers 12:ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26141",
"url": "https://www.suse.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "SUSE Bug 1220242 for CVE-2024-26141",
"url": "https://bugzilla.suse.com/1220242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Containers 12:ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Containers 12:ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-03-20T09:27:07Z",
"details": "important"
}
],
"title": "CVE-2024-26141"
},
{
"cve": "CVE-2024-26146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26146"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Containers 12:ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26146",
"url": "https://www.suse.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "SUSE Bug 1220248 for CVE-2024-26146",
"url": "https://bugzilla.suse.com/1220248"
},
{
"category": "external",
"summary": "SUSE Bug 1227310 for CVE-2024-26146",
"url": "https://bugzilla.suse.com/1227310"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Containers 12:ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Containers 12:ruby2.1-rubygem-rack-1_4-1.4.5-9.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-03-20T09:27:07Z",
"details": "moderate"
}
],
"title": "CVE-2024-26146"
}
]
}
SUSE-SU-2024:1131-1
Vulnerability from csaf_suse - Published: 2024-04-08 09:28 - Updated: 2024-04-08 09:28Summary
Security update for rubygem-rack
Notes
Title of the patch
Security update for rubygem-rack
Description of the patch
This update for rubygem-rack fixes the following issues:
- CVE-2024-25126: Fixed a denial-of-service vulnerability in Rack Content-Type parsing (bsc#1220239).
- CVE-2024-26141: Fixed a denial-of-service vulnerability in Range request header parsing (bsc#1220242).
- CVE-2024-26146: Fixed a denial-of-service vulnerability in Rack headers parsing routine (bsc#1220248).
Patchnames
SUSE-2024-1131,SUSE-OpenStack-Cloud-Crowbar-8-2024-1131,SUSE-OpenStack-Cloud-Crowbar-9-2024-1131
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for rubygem-rack",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for rubygem-rack fixes the following issues:\n\n- CVE-2024-25126: Fixed a denial-of-service vulnerability in Rack Content-Type parsing (bsc#1220239).\n- CVE-2024-26141: Fixed a denial-of-service vulnerability in Range request header parsing (bsc#1220242).\n- CVE-2024-26146: Fixed a denial-of-service vulnerability in Rack headers parsing routine (bsc#1220248).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-1131,SUSE-OpenStack-Cloud-Crowbar-8-2024-1131,SUSE-OpenStack-Cloud-Crowbar-9-2024-1131",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_1131-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:1131-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20241131-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:1131-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2024-April/034891.html"
},
{
"category": "self",
"summary": "SUSE Bug 1220239",
"url": "https://bugzilla.suse.com/1220239"
},
{
"category": "self",
"summary": "SUSE Bug 1220242",
"url": "https://bugzilla.suse.com/1220242"
},
{
"category": "self",
"summary": "SUSE Bug 1220248",
"url": "https://bugzilla.suse.com/1220248"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-25126 page",
"url": "https://www.suse.com/security/cve/CVE-2024-25126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26146 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26146/"
}
],
"title": "Security update for rubygem-rack",
"tracking": {
"current_release_date": "2024-04-08T09:28:18Z",
"generator": {
"date": "2024-04-08T09:28:18Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:1131-1",
"initial_release_date": "2024-04-08T09:28:18Z",
"revision_history": [
{
"date": "2024-04-08T09:28:18Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-1.6.13-3.22.1.aarch64",
"product": {
"name": "ruby2.1-rubygem-rack-1.6.13-3.22.1.aarch64",
"product_id": "ruby2.1-rubygem-rack-1.6.13-3.22.1.aarch64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.aarch64",
"product": {
"name": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.aarch64",
"product_id": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.aarch64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.aarch64",
"product": {
"name": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.aarch64",
"product_id": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-1.6.13-3.22.1.i586",
"product": {
"name": "ruby2.1-rubygem-rack-1.6.13-3.22.1.i586",
"product_id": "ruby2.1-rubygem-rack-1.6.13-3.22.1.i586"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.i586",
"product": {
"name": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.i586",
"product_id": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.i586"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.i586",
"product": {
"name": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.i586",
"product_id": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-1.6.13-3.22.1.ppc64le",
"product": {
"name": "ruby2.1-rubygem-rack-1.6.13-3.22.1.ppc64le",
"product_id": "ruby2.1-rubygem-rack-1.6.13-3.22.1.ppc64le"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.ppc64le",
"product": {
"name": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.ppc64le",
"product_id": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.ppc64le"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.ppc64le",
"product": {
"name": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.ppc64le",
"product_id": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-1.6.13-3.22.1.s390",
"product": {
"name": "ruby2.1-rubygem-rack-1.6.13-3.22.1.s390",
"product_id": "ruby2.1-rubygem-rack-1.6.13-3.22.1.s390"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.s390",
"product": {
"name": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.s390",
"product_id": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.s390"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.s390",
"product": {
"name": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.s390",
"product_id": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-1.6.13-3.22.1.s390x",
"product": {
"name": "ruby2.1-rubygem-rack-1.6.13-3.22.1.s390x",
"product_id": "ruby2.1-rubygem-rack-1.6.13-3.22.1.s390x"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.s390x",
"product": {
"name": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.s390x",
"product_id": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.s390x"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.s390x",
"product": {
"name": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.s390x",
"product_id": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64",
"product": {
"name": "ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64",
"product_id": "ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.x86_64",
"product": {
"name": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.x86_64",
"product_id": "ruby2.1-rubygem-rack-doc-1.6.13-3.22.1.x86_64"
}
},
{
"category": "product_version",
"name": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.x86_64",
"product": {
"name": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.x86_64",
"product_id": "ruby2.1-rubygem-rack-testsuite-1.6.13-3.22.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE OpenStack Cloud Crowbar 8",
"product": {
"name": "SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:8"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud Crowbar 9",
"product": {
"name": "SUSE OpenStack Cloud Crowbar 9",
"product_id": "SUSE OpenStack Cloud Crowbar 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:9"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
"product_id": "SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64"
},
"product_reference": "ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
"product_id": "SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64"
},
"product_reference": "ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-25126"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack\u0027s media type parser to take much longer than expected, leading to a possible denial of service vulnerability (ReDos 2nd degree polynomial). This vulnerability is patched in 3.0.9.1 and 2.2.8.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-25126",
"url": "https://www.suse.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "SUSE Bug 1220239 for CVE-2024-25126",
"url": "https://bugzilla.suse.com/1220239"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-04-08T09:28:18Z",
"details": "important"
}
],
"title": "CVE-2024-25126"
},
{
"cve": "CVE-2024-26141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26141"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such large responses could lead to a denial of service issue. Vulnerable applications will use the `Rack::File` middleware or the `Rack::Utils.byte_ranges` methods (this includes Rails applications). The vulnerability is fixed in 3.0.9.1 and 2.2.8.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26141",
"url": "https://www.suse.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "SUSE Bug 1220242 for CVE-2024-26141",
"url": "https://bugzilla.suse.com/1220242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-04-08T09:28:18Z",
"details": "important"
}
],
"title": "CVE-2024-26141"
},
{
"cve": "CVE-2024-26146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26146"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26146",
"url": "https://www.suse.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "SUSE Bug 1220248 for CVE-2024-26146",
"url": "https://bugzilla.suse.com/1220248"
},
{
"category": "external",
"summary": "SUSE Bug 1227310 for CVE-2024-26146",
"url": "https://bugzilla.suse.com/1227310"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE OpenStack Cloud Crowbar 8:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64",
"SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-rack-1.6.13-3.22.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-04-08T09:28:18Z",
"details": "moderate"
}
],
"title": "CVE-2024-26146"
}
]
}
OPENSUSE-SU-2025:14875-1
Vulnerability from csaf_opensuse - Published: 2025-03-11 00:00 - Updated: 2025-03-11 00:00Summary
ruby3.4-rubygem-rack-3.1.12-1.1 on GA media
Notes
Title of the patch
ruby3.4-rubygem-rack-3.1.12-1.1 on GA media
Description of the patch
These are all security issues fixed in the ruby3.4-rubygem-rack-3.1.12-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2025-14875
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "ruby3.4-rubygem-rack-3.1.12-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the ruby3.4-rubygem-rack-3.1.12-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2025-14875",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_14875-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2025:14875-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MOZFATD6SCQREBY3SZW5KQJPN6KN7A6D/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2025:14875-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MOZFATD6SCQREBY3SZW5KQJPN6KN7A6D/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0262 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0263 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0263/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3225 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16471 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16471/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-16782 page",
"url": "https://www.suse.com/security/cve/CVE-2019-16782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8184 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8184/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-30122 page",
"url": "https://www.suse.com/security/cve/CVE-2022-30122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-30123 page",
"url": "https://www.suse.com/security/cve/CVE-2022-30123/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-44570 page",
"url": "https://www.suse.com/security/cve/CVE-2022-44570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-44571 page",
"url": "https://www.suse.com/security/cve/CVE-2022-44571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-44572 page",
"url": "https://www.suse.com/security/cve/CVE-2022-44572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-27530 page",
"url": "https://www.suse.com/security/cve/CVE-2023-27530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-27539 page",
"url": "https://www.suse.com/security/cve/CVE-2023-27539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-25126 page",
"url": "https://www.suse.com/security/cve/CVE-2024-25126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26146 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-25184 page",
"url": "https://www.suse.com/security/cve/CVE-2025-25184/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-27111 page",
"url": "https://www.suse.com/security/cve/CVE-2025-27111/"
}
],
"title": "ruby3.4-rubygem-rack-3.1.12-1.1 on GA media",
"tracking": {
"current_release_date": "2025-03-11T00:00:00Z",
"generator": {
"date": "2025-03-11T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2025:14875-1",
"initial_release_date": "2025-03-11T00:00:00Z",
"revision_history": [
{
"date": "2025-03-11T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"product": {
"name": "ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"product_id": "ruby3.4-rubygem-rack-3.1.12-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"product": {
"name": "ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"product_id": "ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"product": {
"name": "ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"product_id": "ruby3.4-rubygem-rack-3.1.12-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.4-rubygem-rack-3.1.12-1.1.x86_64",
"product": {
"name": "ruby3.4-rubygem-rack-3.1.12-1.1.x86_64",
"product_id": "ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.4-rubygem-rack-3.1.12-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64"
},
"product_reference": "ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le"
},
"product_reference": "ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.4-rubygem-rack-3.1.12-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x"
},
"product_reference": "ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.4-rubygem-rack-3.1.12-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
},
"product_reference": "ruby3.4-rubygem-rack-3.1.12-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-0262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0262"
}
],
"notes": [
{
"category": "general",
"text": "rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka \"symlink path traversals.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0262",
"url": "https://www.suse.com/security/cve/CVE-2013-0262"
},
{
"category": "external",
"summary": "SUSE Bug 802795 for CVE-2013-0262",
"url": "https://bugzilla.suse.com/802795"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0262"
},
{
"cve": "CVE-2013-0263",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0263"
}
],
"notes": [
{
"category": "general",
"text": "Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0263",
"url": "https://www.suse.com/security/cve/CVE-2013-0263"
},
{
"category": "external",
"summary": "SUSE Bug 802794 for CVE-2013-0263",
"url": "https://bugzilla.suse.com/802794"
},
{
"category": "external",
"summary": "SUSE Bug 809839 for CVE-2013-0263",
"url": "https://bugzilla.suse.com/809839"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0263"
},
{
"cve": "CVE-2015-3225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3225"
}
],
"notes": [
{
"category": "general",
"text": "lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3225",
"url": "https://www.suse.com/security/cve/CVE-2015-3225"
},
{
"category": "external",
"summary": "SUSE Bug 934797 for CVE-2015-3225",
"url": "https://bugzilla.suse.com/934797"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-3225"
},
{
"cve": "CVE-2018-16471",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16471"
}
],
"notes": [
{
"category": "general",
"text": "There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by the `scheme` method on `Rack::Request`. Applications that expect the scheme to be limited to \u0027http\u0027 or \u0027https\u0027 and do not escape the return value could be vulnerable to an XSS attack. Note that applications using the normal escaping mechanisms provided by Rails may not impacted, but applications that bypass the escaping mechanisms, or do not use them may be vulnerable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16471",
"url": "https://www.suse.com/security/cve/CVE-2018-16471"
},
{
"category": "external",
"summary": "SUSE Bug 1114828 for CVE-2018-16471",
"url": "https://bugzilla.suse.com/1114828"
},
{
"category": "external",
"summary": "SUSE Bug 1116600 for CVE-2018-16471",
"url": "https://bugzilla.suse.com/1116600"
},
{
"category": "external",
"summary": "SUSE Bug 1122178 for CVE-2018-16471",
"url": "https://bugzilla.suse.com/1122178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-16471"
},
{
"cve": "CVE-2019-16782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-16782"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find and hijack sessions by using timing attacks targeting the session id. Session ids are usually stored and indexed in a database that uses some kind of scheme for speeding up lookups of that session id. By carefully measuring the amount of time it takes to look up a session, an attacker may be able to find a valid session id and hijack the session. The session id itself may be generated randomly, but the way the session is indexed by the backing store does not use a secure comparison.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-16782",
"url": "https://www.suse.com/security/cve/CVE-2019-16782"
},
{
"category": "external",
"summary": "SUSE Bug 1159548 for CVE-2019-16782",
"url": "https://bugzilla.suse.com/1159548"
},
{
"category": "external",
"summary": "SUSE Bug 1183174 for CVE-2019-16782",
"url": "https://bugzilla.suse.com/1183174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-16782"
},
{
"cve": "CVE-2020-8184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8184"
}
],
"notes": [
{
"category": "general",
"text": "A reliance on cookies without validation/integrity check security vulnerability exists in rack \u003c 2.2.3, rack \u003c 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8184",
"url": "https://www.suse.com/security/cve/CVE-2020-8184"
},
{
"category": "external",
"summary": "SUSE Bug 1173351 for CVE-2020-8184",
"url": "https://bugzilla.suse.com/1173351"
},
{
"category": "external",
"summary": "SUSE Bug 1177352 for CVE-2020-8184",
"url": "https://bugzilla.suse.com/1177352"
},
{
"category": "external",
"summary": "SUSE Bug 1193081 for CVE-2020-8184",
"url": "https://bugzilla.suse.com/1193081"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-8184"
},
{
"cve": "CVE-2022-30122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-30122"
}
],
"notes": [
{
"category": "general",
"text": "A possible denial of service vulnerability exists in Rack \u003c2.0.9.1, \u003c2.1.4.1 and \u003c2.2.3.1 in the multipart parsing component of Rack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-30122",
"url": "https://www.suse.com/security/cve/CVE-2022-30122"
},
{
"category": "external",
"summary": "SUSE Bug 1200748 for CVE-2022-30122",
"url": "https://bugzilla.suse.com/1200748"
},
{
"category": "external",
"summary": "SUSE Bug 1201588 for CVE-2022-30122",
"url": "https://bugzilla.suse.com/1201588"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-30122"
},
{
"cve": "CVE-2022-30123",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-30123"
}
],
"notes": [
{
"category": "general",
"text": "A sequence injection vulnerability exists in Rack \u003c2.0.9.1, \u003c2.1.4.1 and \u003c2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-30123",
"url": "https://www.suse.com/security/cve/CVE-2022-30123"
},
{
"category": "external",
"summary": "SUSE Bug 1200750 for CVE-2022-30123",
"url": "https://bugzilla.suse.com/1200750"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-30123"
},
{
"cve": "CVE-2022-44570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-44570"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability in the Range header parsing component of Rack \u003e= 1.5.0. A Carefully crafted input can cause the Range header parsing component in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that deal with Range requests (such as streaming applications, or applications that serve files) may be impacted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-44570",
"url": "https://www.suse.com/security/cve/CVE-2022-44570"
},
{
"category": "external",
"summary": "SUSE Bug 1207597 for CVE-2022-44570",
"url": "https://bugzilla.suse.com/1207597"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-44570"
},
{
"cve": "CVE-2022-44571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-44571"
}
],
"notes": [
{
"category": "general",
"text": "There is a denial of service vulnerability in the Content-Disposition parsingcomponent of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1. This could allow an attacker to craft an input that can cause Content-Disposition header parsing in Rackto take an unexpected amount of time, possibly resulting in a denial ofservice attack vector. This header is used typically used in multipartparsing. Any applications that parse multipart posts using Rack (virtuallyall Rails applications) are impacted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-44571",
"url": "https://www.suse.com/security/cve/CVE-2022-44571"
},
{
"category": "external",
"summary": "SUSE Bug 1207599 for CVE-2022-44571",
"url": "https://bugzilla.suse.com/1207599"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-44571"
},
{
"cve": "CVE-2022-44572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-44572"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability in the multipart parsing component of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1 and 3.0.0.1 could allow an attacker tocraft input that can cause RFC2183 multipart boundary parsing in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that parse multipart posts using Rack (virtually all Rails applications) are impacted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-44572",
"url": "https://www.suse.com/security/cve/CVE-2022-44572"
},
{
"category": "external",
"summary": "SUSE Bug 1207596 for CVE-2022-44572",
"url": "https://bugzilla.suse.com/1207596"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-44572"
},
{
"cve": "CVE-2023-27530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-27530"
}
],
"notes": [
{
"category": "general",
"text": "A DoS vulnerability exists in Rack \u003cv3.0.4.2, \u003cv2.2.6.3, \u003cv2.1.4.3 and \u003cv2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing to take longer than expected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-27530",
"url": "https://www.suse.com/security/cve/CVE-2023-27530"
},
{
"category": "external",
"summary": "SUSE Bug 1209095 for CVE-2023-27530",
"url": "https://bugzilla.suse.com/1209095"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-27530"
},
{
"cve": "CVE-2023-27539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-27539"
}
],
"notes": [
{
"category": "general",
"text": "There is a denial of service vulnerability in the header parsing component of Rack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-27539",
"url": "https://www.suse.com/security/cve/CVE-2023-27539"
},
{
"category": "external",
"summary": "SUSE Bug 1209503 for CVE-2023-27539",
"url": "https://bugzilla.suse.com/1209503"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-27539"
},
{
"cve": "CVE-2024-25126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-25126"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack\u0027s media type parser to take much longer than expected, leading to a possible denial of service vulnerability (ReDos 2nd degree polynomial). This vulnerability is patched in 3.0.9.1 and 2.2.8.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-25126",
"url": "https://www.suse.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "SUSE Bug 1220239 for CVE-2024-25126",
"url": "https://bugzilla.suse.com/1220239"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-25126"
},
{
"cve": "CVE-2024-26141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26141"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such large responses could lead to a denial of service issue. Vulnerable applications will use the `Rack::File` middleware or the `Rack::Utils.byte_ranges` methods (this includes Rails applications). The vulnerability is fixed in 3.0.9.1 and 2.2.8.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26141",
"url": "https://www.suse.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "SUSE Bug 1220242 for CVE-2024-26141",
"url": "https://bugzilla.suse.com/1220242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-26141"
},
{
"cve": "CVE-2024-26146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26146"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26146",
"url": "https://www.suse.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "SUSE Bug 1220248 for CVE-2024-26146",
"url": "https://bugzilla.suse.com/1220248"
},
{
"category": "external",
"summary": "SUSE Bug 1227310 for CVE-2024-26146",
"url": "https://bugzilla.suse.com/1227310"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26146"
},
{
"cve": "CVE-2025-25184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-25184"
}
],
"notes": [
{
"category": "general",
"text": "Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.11, 3.0.12, and 3.1.10, Rack::CommonLogger can be exploited by crafting input that includes newline characters to manipulate log entries. The supplied proof-of-concept demonstrates injecting malicious content into logs. When a user provides the authorization credentials via Rack::Auth::Basic, if success, the username will be put in env[\u0027REMOTE_USER\u0027] and later be used by Rack::CommonLogger for logging purposes. The issue occurs when a server intentionally or unintentionally allows a user creation with the username contain CRLF and white space characters, or the server just want to log every login attempts. If an attacker enters a username with CRLF character, the logger will log the malicious username with CRLF characters into the logfile. Attackers can break log formats or insert fraudulent entries, potentially obscuring real activity or injecting malicious data into log files. Versions 2.2.11, 3.0.12, and 3.1.10 contain a fix.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-25184",
"url": "https://www.suse.com/security/cve/CVE-2025-25184"
},
{
"category": "external",
"summary": "SUSE Bug 1237141 for CVE-2025-25184",
"url": "https://bugzilla.suse.com/1237141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-25184"
},
{
"cve": "CVE-2025-27111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-27111"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by injecting escape sequences (such as newline characters) into the header, resulting in log injection. This vulnerability is fixed in 2.2.12, 3.0.13, and 3.1.11.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-27111",
"url": "https://www.suse.com/security/cve/CVE-2025-27111"
},
{
"category": "external",
"summary": "SUSE Bug 1238607 for CVE-2025-27111",
"url": "https://bugzilla.suse.com/1238607"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-3.1.12-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-11T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-27111"
}
]
}
OPENSUSE-SU-2024:13726-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
ruby3.3-rubygem-rack-3.0.9.1-1.1 on GA media
Notes
Title of the patch
ruby3.3-rubygem-rack-3.0.9.1-1.1 on GA media
Description of the patch
These are all security issues fixed in the ruby3.3-rubygem-rack-3.0.9.1-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-13726
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "ruby3.3-rubygem-rack-3.0.9.1-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the ruby3.3-rubygem-rack-3.0.9.1-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-13726",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13726-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0262 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0263 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0263/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3225 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16471 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16471/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-16782 page",
"url": "https://www.suse.com/security/cve/CVE-2019-16782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8184 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8184/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-30122 page",
"url": "https://www.suse.com/security/cve/CVE-2022-30122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-30123 page",
"url": "https://www.suse.com/security/cve/CVE-2022-30123/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-44570 page",
"url": "https://www.suse.com/security/cve/CVE-2022-44570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-44571 page",
"url": "https://www.suse.com/security/cve/CVE-2022-44571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-44572 page",
"url": "https://www.suse.com/security/cve/CVE-2022-44572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-27530 page",
"url": "https://www.suse.com/security/cve/CVE-2023-27530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-27539 page",
"url": "https://www.suse.com/security/cve/CVE-2023-27539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-25126 page",
"url": "https://www.suse.com/security/cve/CVE-2024-25126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26146 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26146/"
}
],
"title": "ruby3.3-rubygem-rack-3.0.9.1-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:13726-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"product": {
"name": "ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"product_id": "ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"product": {
"name": "ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"product_id": "ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"product": {
"name": "ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"product_id": "ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64",
"product": {
"name": "ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64",
"product_id": "ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64"
},
"product_reference": "ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le"
},
"product_reference": "ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x"
},
"product_reference": "ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
},
"product_reference": "ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-0262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0262"
}
],
"notes": [
{
"category": "general",
"text": "rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka \"symlink path traversals.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0262",
"url": "https://www.suse.com/security/cve/CVE-2013-0262"
},
{
"category": "external",
"summary": "SUSE Bug 802795 for CVE-2013-0262",
"url": "https://bugzilla.suse.com/802795"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0262"
},
{
"cve": "CVE-2013-0263",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0263"
}
],
"notes": [
{
"category": "general",
"text": "Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0263",
"url": "https://www.suse.com/security/cve/CVE-2013-0263"
},
{
"category": "external",
"summary": "SUSE Bug 802794 for CVE-2013-0263",
"url": "https://bugzilla.suse.com/802794"
},
{
"category": "external",
"summary": "SUSE Bug 809839 for CVE-2013-0263",
"url": "https://bugzilla.suse.com/809839"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0263"
},
{
"cve": "CVE-2015-3225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3225"
}
],
"notes": [
{
"category": "general",
"text": "lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3225",
"url": "https://www.suse.com/security/cve/CVE-2015-3225"
},
{
"category": "external",
"summary": "SUSE Bug 934797 for CVE-2015-3225",
"url": "https://bugzilla.suse.com/934797"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-3225"
},
{
"cve": "CVE-2018-16471",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16471"
}
],
"notes": [
{
"category": "general",
"text": "There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by the `scheme` method on `Rack::Request`. Applications that expect the scheme to be limited to \u0027http\u0027 or \u0027https\u0027 and do not escape the return value could be vulnerable to an XSS attack. Note that applications using the normal escaping mechanisms provided by Rails may not impacted, but applications that bypass the escaping mechanisms, or do not use them may be vulnerable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16471",
"url": "https://www.suse.com/security/cve/CVE-2018-16471"
},
{
"category": "external",
"summary": "SUSE Bug 1114828 for CVE-2018-16471",
"url": "https://bugzilla.suse.com/1114828"
},
{
"category": "external",
"summary": "SUSE Bug 1116600 for CVE-2018-16471",
"url": "https://bugzilla.suse.com/1116600"
},
{
"category": "external",
"summary": "SUSE Bug 1122178 for CVE-2018-16471",
"url": "https://bugzilla.suse.com/1122178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-16471"
},
{
"cve": "CVE-2019-16782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-16782"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find and hijack sessions by using timing attacks targeting the session id. Session ids are usually stored and indexed in a database that uses some kind of scheme for speeding up lookups of that session id. By carefully measuring the amount of time it takes to look up a session, an attacker may be able to find a valid session id and hijack the session. The session id itself may be generated randomly, but the way the session is indexed by the backing store does not use a secure comparison.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-16782",
"url": "https://www.suse.com/security/cve/CVE-2019-16782"
},
{
"category": "external",
"summary": "SUSE Bug 1159548 for CVE-2019-16782",
"url": "https://bugzilla.suse.com/1159548"
},
{
"category": "external",
"summary": "SUSE Bug 1183174 for CVE-2019-16782",
"url": "https://bugzilla.suse.com/1183174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-16782"
},
{
"cve": "CVE-2020-8184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8184"
}
],
"notes": [
{
"category": "general",
"text": "A reliance on cookies without validation/integrity check security vulnerability exists in rack \u003c 2.2.3, rack \u003c 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8184",
"url": "https://www.suse.com/security/cve/CVE-2020-8184"
},
{
"category": "external",
"summary": "SUSE Bug 1173351 for CVE-2020-8184",
"url": "https://bugzilla.suse.com/1173351"
},
{
"category": "external",
"summary": "SUSE Bug 1177352 for CVE-2020-8184",
"url": "https://bugzilla.suse.com/1177352"
},
{
"category": "external",
"summary": "SUSE Bug 1193081 for CVE-2020-8184",
"url": "https://bugzilla.suse.com/1193081"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-8184"
},
{
"cve": "CVE-2022-30122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-30122"
}
],
"notes": [
{
"category": "general",
"text": "A possible denial of service vulnerability exists in Rack \u003c2.0.9.1, \u003c2.1.4.1 and \u003c2.2.3.1 in the multipart parsing component of Rack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-30122",
"url": "https://www.suse.com/security/cve/CVE-2022-30122"
},
{
"category": "external",
"summary": "SUSE Bug 1200748 for CVE-2022-30122",
"url": "https://bugzilla.suse.com/1200748"
},
{
"category": "external",
"summary": "SUSE Bug 1201588 for CVE-2022-30122",
"url": "https://bugzilla.suse.com/1201588"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-30122"
},
{
"cve": "CVE-2022-30123",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-30123"
}
],
"notes": [
{
"category": "general",
"text": "A sequence injection vulnerability exists in Rack \u003c2.0.9.1, \u003c2.1.4.1 and \u003c2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-30123",
"url": "https://www.suse.com/security/cve/CVE-2022-30123"
},
{
"category": "external",
"summary": "SUSE Bug 1200750 for CVE-2022-30123",
"url": "https://bugzilla.suse.com/1200750"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-30123"
},
{
"cve": "CVE-2022-44570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-44570"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability in the Range header parsing component of Rack \u003e= 1.5.0. A Carefully crafted input can cause the Range header parsing component in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that deal with Range requests (such as streaming applications, or applications that serve files) may be impacted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-44570",
"url": "https://www.suse.com/security/cve/CVE-2022-44570"
},
{
"category": "external",
"summary": "SUSE Bug 1207597 for CVE-2022-44570",
"url": "https://bugzilla.suse.com/1207597"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-44570"
},
{
"cve": "CVE-2022-44571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-44571"
}
],
"notes": [
{
"category": "general",
"text": "There is a denial of service vulnerability in the Content-Disposition parsingcomponent of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1. This could allow an attacker to craft an input that can cause Content-Disposition header parsing in Rackto take an unexpected amount of time, possibly resulting in a denial ofservice attack vector. This header is used typically used in multipartparsing. Any applications that parse multipart posts using Rack (virtuallyall Rails applications) are impacted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-44571",
"url": "https://www.suse.com/security/cve/CVE-2022-44571"
},
{
"category": "external",
"summary": "SUSE Bug 1207599 for CVE-2022-44571",
"url": "https://bugzilla.suse.com/1207599"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-44571"
},
{
"cve": "CVE-2022-44572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-44572"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability in the multipart parsing component of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1 and 3.0.0.1 could allow an attacker tocraft input that can cause RFC2183 multipart boundary parsing in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that parse multipart posts using Rack (virtually all Rails applications) are impacted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-44572",
"url": "https://www.suse.com/security/cve/CVE-2022-44572"
},
{
"category": "external",
"summary": "SUSE Bug 1207596 for CVE-2022-44572",
"url": "https://bugzilla.suse.com/1207596"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-44572"
},
{
"cve": "CVE-2023-27530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-27530"
}
],
"notes": [
{
"category": "general",
"text": "A DoS vulnerability exists in Rack \u003cv3.0.4.2, \u003cv2.2.6.3, \u003cv2.1.4.3 and \u003cv2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing to take longer than expected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-27530",
"url": "https://www.suse.com/security/cve/CVE-2023-27530"
},
{
"category": "external",
"summary": "SUSE Bug 1209095 for CVE-2023-27530",
"url": "https://bugzilla.suse.com/1209095"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-27530"
},
{
"cve": "CVE-2023-27539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-27539"
}
],
"notes": [
{
"category": "general",
"text": "There is a denial of service vulnerability in the header parsing component of Rack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-27539",
"url": "https://www.suse.com/security/cve/CVE-2023-27539"
},
{
"category": "external",
"summary": "SUSE Bug 1209503 for CVE-2023-27539",
"url": "https://bugzilla.suse.com/1209503"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-27539"
},
{
"cve": "CVE-2024-25126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-25126"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack\u0027s media type parser to take much longer than expected, leading to a possible denial of service vulnerability (ReDos 2nd degree polynomial). This vulnerability is patched in 3.0.9.1 and 2.2.8.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-25126",
"url": "https://www.suse.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "SUSE Bug 1220239 for CVE-2024-25126",
"url": "https://bugzilla.suse.com/1220239"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-25126"
},
{
"cve": "CVE-2024-26141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26141"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such large responses could lead to a denial of service issue. Vulnerable applications will use the `Rack::File` middleware or the `Rack::Utils.byte_ranges` methods (this includes Rails applications). The vulnerability is fixed in 3.0.9.1 and 2.2.8.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26141",
"url": "https://www.suse.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "SUSE Bug 1220242 for CVE-2024-26141",
"url": "https://bugzilla.suse.com/1220242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-26141"
},
{
"cve": "CVE-2024-26146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26146"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26146",
"url": "https://www.suse.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "SUSE Bug 1220248 for CVE-2024-26146",
"url": "https://bugzilla.suse.com/1220248"
},
{
"category": "external",
"summary": "SUSE Bug 1227310 for CVE-2024-26146",
"url": "https://bugzilla.suse.com/1227310"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-3.0.9.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26146"
}
]
}
OPENSUSE-SU-2025:14811-1
Vulnerability from csaf_opensuse - Published: 2025-02-14 00:00 - Updated: 2025-02-14 00:00Summary
ruby3.4-rubygem-rack-2.2-2.2.11-1.1 on GA media
Notes
Title of the patch
ruby3.4-rubygem-rack-2.2-2.2.11-1.1 on GA media
Description of the patch
These are all security issues fixed in the ruby3.4-rubygem-rack-2.2-2.2.11-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2025-14811
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the ruby3.4-rubygem-rack-2.2-2.2.11-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2025-14811",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_14811-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2025:14811-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FLQ74D2IZAJC5KD6QXVUZAQ6O5LNAWZX/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2025:14811-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FLQ74D2IZAJC5KD6QXVUZAQ6O5LNAWZX/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0262 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0263 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0263/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3225 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16471 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16471/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-16782 page",
"url": "https://www.suse.com/security/cve/CVE-2019-16782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8184 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8184/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-30122 page",
"url": "https://www.suse.com/security/cve/CVE-2022-30122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-30123 page",
"url": "https://www.suse.com/security/cve/CVE-2022-30123/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-44570 page",
"url": "https://www.suse.com/security/cve/CVE-2022-44570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-44571 page",
"url": "https://www.suse.com/security/cve/CVE-2022-44571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-44572 page",
"url": "https://www.suse.com/security/cve/CVE-2022-44572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-27530 page",
"url": "https://www.suse.com/security/cve/CVE-2023-27530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-27539 page",
"url": "https://www.suse.com/security/cve/CVE-2023-27539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-25126 page",
"url": "https://www.suse.com/security/cve/CVE-2024-25126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26146 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-25184 page",
"url": "https://www.suse.com/security/cve/CVE-2025-25184/"
}
],
"title": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1 on GA media",
"tracking": {
"current_release_date": "2025-02-14T00:00:00Z",
"generator": {
"date": "2025-02-14T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2025:14811-1",
"initial_release_date": "2025-02-14T00:00:00Z",
"revision_history": [
{
"date": "2025-02-14T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"product": {
"name": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"product_id": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"product": {
"name": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"product_id": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"product": {
"name": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"product_id": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64",
"product": {
"name": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64",
"product_id": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64"
},
"product_reference": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le"
},
"product_reference": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x"
},
"product_reference": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
},
"product_reference": "ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-0262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0262"
}
],
"notes": [
{
"category": "general",
"text": "rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka \"symlink path traversals.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0262",
"url": "https://www.suse.com/security/cve/CVE-2013-0262"
},
{
"category": "external",
"summary": "SUSE Bug 802795 for CVE-2013-0262",
"url": "https://bugzilla.suse.com/802795"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0262"
},
{
"cve": "CVE-2013-0263",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0263"
}
],
"notes": [
{
"category": "general",
"text": "Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0263",
"url": "https://www.suse.com/security/cve/CVE-2013-0263"
},
{
"category": "external",
"summary": "SUSE Bug 802794 for CVE-2013-0263",
"url": "https://bugzilla.suse.com/802794"
},
{
"category": "external",
"summary": "SUSE Bug 809839 for CVE-2013-0263",
"url": "https://bugzilla.suse.com/809839"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0263"
},
{
"cve": "CVE-2015-3225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3225"
}
],
"notes": [
{
"category": "general",
"text": "lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3225",
"url": "https://www.suse.com/security/cve/CVE-2015-3225"
},
{
"category": "external",
"summary": "SUSE Bug 934797 for CVE-2015-3225",
"url": "https://bugzilla.suse.com/934797"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-3225"
},
{
"cve": "CVE-2018-16471",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16471"
}
],
"notes": [
{
"category": "general",
"text": "There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by the `scheme` method on `Rack::Request`. Applications that expect the scheme to be limited to \u0027http\u0027 or \u0027https\u0027 and do not escape the return value could be vulnerable to an XSS attack. Note that applications using the normal escaping mechanisms provided by Rails may not impacted, but applications that bypass the escaping mechanisms, or do not use them may be vulnerable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16471",
"url": "https://www.suse.com/security/cve/CVE-2018-16471"
},
{
"category": "external",
"summary": "SUSE Bug 1114828 for CVE-2018-16471",
"url": "https://bugzilla.suse.com/1114828"
},
{
"category": "external",
"summary": "SUSE Bug 1116600 for CVE-2018-16471",
"url": "https://bugzilla.suse.com/1116600"
},
{
"category": "external",
"summary": "SUSE Bug 1122178 for CVE-2018-16471",
"url": "https://bugzilla.suse.com/1122178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-16471"
},
{
"cve": "CVE-2019-16782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-16782"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find and hijack sessions by using timing attacks targeting the session id. Session ids are usually stored and indexed in a database that uses some kind of scheme for speeding up lookups of that session id. By carefully measuring the amount of time it takes to look up a session, an attacker may be able to find a valid session id and hijack the session. The session id itself may be generated randomly, but the way the session is indexed by the backing store does not use a secure comparison.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-16782",
"url": "https://www.suse.com/security/cve/CVE-2019-16782"
},
{
"category": "external",
"summary": "SUSE Bug 1159548 for CVE-2019-16782",
"url": "https://bugzilla.suse.com/1159548"
},
{
"category": "external",
"summary": "SUSE Bug 1183174 for CVE-2019-16782",
"url": "https://bugzilla.suse.com/1183174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-16782"
},
{
"cve": "CVE-2020-8184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8184"
}
],
"notes": [
{
"category": "general",
"text": "A reliance on cookies without validation/integrity check security vulnerability exists in rack \u003c 2.2.3, rack \u003c 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8184",
"url": "https://www.suse.com/security/cve/CVE-2020-8184"
},
{
"category": "external",
"summary": "SUSE Bug 1173351 for CVE-2020-8184",
"url": "https://bugzilla.suse.com/1173351"
},
{
"category": "external",
"summary": "SUSE Bug 1177352 for CVE-2020-8184",
"url": "https://bugzilla.suse.com/1177352"
},
{
"category": "external",
"summary": "SUSE Bug 1193081 for CVE-2020-8184",
"url": "https://bugzilla.suse.com/1193081"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-8184"
},
{
"cve": "CVE-2022-30122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-30122"
}
],
"notes": [
{
"category": "general",
"text": "A possible denial of service vulnerability exists in Rack \u003c2.0.9.1, \u003c2.1.4.1 and \u003c2.2.3.1 in the multipart parsing component of Rack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-30122",
"url": "https://www.suse.com/security/cve/CVE-2022-30122"
},
{
"category": "external",
"summary": "SUSE Bug 1200748 for CVE-2022-30122",
"url": "https://bugzilla.suse.com/1200748"
},
{
"category": "external",
"summary": "SUSE Bug 1201588 for CVE-2022-30122",
"url": "https://bugzilla.suse.com/1201588"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-30122"
},
{
"cve": "CVE-2022-30123",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-30123"
}
],
"notes": [
{
"category": "general",
"text": "A sequence injection vulnerability exists in Rack \u003c2.0.9.1, \u003c2.1.4.1 and \u003c2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-30123",
"url": "https://www.suse.com/security/cve/CVE-2022-30123"
},
{
"category": "external",
"summary": "SUSE Bug 1200750 for CVE-2022-30123",
"url": "https://bugzilla.suse.com/1200750"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-30123"
},
{
"cve": "CVE-2022-44570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-44570"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability in the Range header parsing component of Rack \u003e= 1.5.0. A Carefully crafted input can cause the Range header parsing component in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that deal with Range requests (such as streaming applications, or applications that serve files) may be impacted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-44570",
"url": "https://www.suse.com/security/cve/CVE-2022-44570"
},
{
"category": "external",
"summary": "SUSE Bug 1207597 for CVE-2022-44570",
"url": "https://bugzilla.suse.com/1207597"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-44570"
},
{
"cve": "CVE-2022-44571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-44571"
}
],
"notes": [
{
"category": "general",
"text": "There is a denial of service vulnerability in the Content-Disposition parsingcomponent of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1. This could allow an attacker to craft an input that can cause Content-Disposition header parsing in Rackto take an unexpected amount of time, possibly resulting in a denial ofservice attack vector. This header is used typically used in multipartparsing. Any applications that parse multipart posts using Rack (virtuallyall Rails applications) are impacted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-44571",
"url": "https://www.suse.com/security/cve/CVE-2022-44571"
},
{
"category": "external",
"summary": "SUSE Bug 1207599 for CVE-2022-44571",
"url": "https://bugzilla.suse.com/1207599"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-44571"
},
{
"cve": "CVE-2022-44572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-44572"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability in the multipart parsing component of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1 and 3.0.0.1 could allow an attacker tocraft input that can cause RFC2183 multipart boundary parsing in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that parse multipart posts using Rack (virtually all Rails applications) are impacted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-44572",
"url": "https://www.suse.com/security/cve/CVE-2022-44572"
},
{
"category": "external",
"summary": "SUSE Bug 1207596 for CVE-2022-44572",
"url": "https://bugzilla.suse.com/1207596"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-44572"
},
{
"cve": "CVE-2023-27530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-27530"
}
],
"notes": [
{
"category": "general",
"text": "A DoS vulnerability exists in Rack \u003cv3.0.4.2, \u003cv2.2.6.3, \u003cv2.1.4.3 and \u003cv2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing to take longer than expected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-27530",
"url": "https://www.suse.com/security/cve/CVE-2023-27530"
},
{
"category": "external",
"summary": "SUSE Bug 1209095 for CVE-2023-27530",
"url": "https://bugzilla.suse.com/1209095"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-27530"
},
{
"cve": "CVE-2023-27539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-27539"
}
],
"notes": [
{
"category": "general",
"text": "There is a denial of service vulnerability in the header parsing component of Rack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-27539",
"url": "https://www.suse.com/security/cve/CVE-2023-27539"
},
{
"category": "external",
"summary": "SUSE Bug 1209503 for CVE-2023-27539",
"url": "https://bugzilla.suse.com/1209503"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-27539"
},
{
"cve": "CVE-2024-25126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-25126"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack\u0027s media type parser to take much longer than expected, leading to a possible denial of service vulnerability (ReDos 2nd degree polynomial). This vulnerability is patched in 3.0.9.1 and 2.2.8.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-25126",
"url": "https://www.suse.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "SUSE Bug 1220239 for CVE-2024-25126",
"url": "https://bugzilla.suse.com/1220239"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-25126"
},
{
"cve": "CVE-2024-26141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26141"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such large responses could lead to a denial of service issue. Vulnerable applications will use the `Rack::File` middleware or the `Rack::Utils.byte_ranges` methods (this includes Rails applications). The vulnerability is fixed in 3.0.9.1 and 2.2.8.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26141",
"url": "https://www.suse.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "SUSE Bug 1220242 for CVE-2024-26141",
"url": "https://bugzilla.suse.com/1220242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-26141"
},
{
"cve": "CVE-2024-26146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26146"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26146",
"url": "https://www.suse.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "SUSE Bug 1220248 for CVE-2024-26146",
"url": "https://bugzilla.suse.com/1220248"
},
{
"category": "external",
"summary": "SUSE Bug 1227310 for CVE-2024-26146",
"url": "https://bugzilla.suse.com/1227310"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26146"
},
{
"cve": "CVE-2025-25184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-25184"
}
],
"notes": [
{
"category": "general",
"text": "Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.11, 3.0.12, and 3.1.10, Rack::CommonLogger can be exploited by crafting input that includes newline characters to manipulate log entries. The supplied proof-of-concept demonstrates injecting malicious content into logs. When a user provides the authorization credentials via Rack::Auth::Basic, if success, the username will be put in env[\u0027REMOTE_USER\u0027] and later be used by Rack::CommonLogger for logging purposes. The issue occurs when a server intentionally or unintentionally allows a user creation with the username contain CRLF and white space characters, or the server just want to log every login attempts. If an attacker enters a username with CRLF character, the logger will log the malicious username with CRLF characters into the logfile. Attackers can break log formats or insert fraudulent entries, potentially obscuring real activity or injecting malicious data into log files. Versions 2.2.11, 3.0.12, and 3.1.10 contain a fix.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-25184",
"url": "https://www.suse.com/security/cve/CVE-2025-25184"
},
{
"category": "external",
"summary": "SUSE Bug 1237141 for CVE-2025-25184",
"url": "https://bugzilla.suse.com/1237141"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.s390x",
"openSUSE Tumbleweed:ruby3.4-rubygem-rack-2.2-2.2.11-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-25184"
}
]
}
OPENSUSE-SU-2024:13727-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 on GA media
Notes
Title of the patch
ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 on GA media
Description of the patch
These are all security issues fixed in the ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-13727
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-13727",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13727-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0262 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0263 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0263/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3225 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-16471 page",
"url": "https://www.suse.com/security/cve/CVE-2018-16471/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-16782 page",
"url": "https://www.suse.com/security/cve/CVE-2019-16782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8184 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8184/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-30122 page",
"url": "https://www.suse.com/security/cve/CVE-2022-30122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-30123 page",
"url": "https://www.suse.com/security/cve/CVE-2022-30123/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-44570 page",
"url": "https://www.suse.com/security/cve/CVE-2022-44570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-44571 page",
"url": "https://www.suse.com/security/cve/CVE-2022-44571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-44572 page",
"url": "https://www.suse.com/security/cve/CVE-2022-44572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-27530 page",
"url": "https://www.suse.com/security/cve/CVE-2023-27530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-27539 page",
"url": "https://www.suse.com/security/cve/CVE-2023-27539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-25126 page",
"url": "https://www.suse.com/security/cve/CVE-2024-25126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26146 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26146/"
}
],
"title": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:13727-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"product": {
"name": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"product_id": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"product": {
"name": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"product_id": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"product": {
"name": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"product_id": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64",
"product": {
"name": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64",
"product_id": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64"
},
"product_reference": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le"
},
"product_reference": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x"
},
"product_reference": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
},
"product_reference": "ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-0262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0262"
}
],
"notes": [
{
"category": "general",
"text": "rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka \"symlink path traversals.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0262",
"url": "https://www.suse.com/security/cve/CVE-2013-0262"
},
{
"category": "external",
"summary": "SUSE Bug 802795 for CVE-2013-0262",
"url": "https://bugzilla.suse.com/802795"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0262"
},
{
"cve": "CVE-2013-0263",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0263"
}
],
"notes": [
{
"category": "general",
"text": "Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0263",
"url": "https://www.suse.com/security/cve/CVE-2013-0263"
},
{
"category": "external",
"summary": "SUSE Bug 802794 for CVE-2013-0263",
"url": "https://bugzilla.suse.com/802794"
},
{
"category": "external",
"summary": "SUSE Bug 809839 for CVE-2013-0263",
"url": "https://bugzilla.suse.com/809839"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0263"
},
{
"cve": "CVE-2015-3225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3225"
}
],
"notes": [
{
"category": "general",
"text": "lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (SystemStackError) via a request with a large parameter depth.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3225",
"url": "https://www.suse.com/security/cve/CVE-2015-3225"
},
{
"category": "external",
"summary": "SUSE Bug 934797 for CVE-2015-3225",
"url": "https://bugzilla.suse.com/934797"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-3225"
},
{
"cve": "CVE-2018-16471",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-16471"
}
],
"notes": [
{
"category": "general",
"text": "There is a possible XSS vulnerability in Rack before 2.0.6 and 1.6.11. Carefully crafted requests can impact the data returned by the `scheme` method on `Rack::Request`. Applications that expect the scheme to be limited to \u0027http\u0027 or \u0027https\u0027 and do not escape the return value could be vulnerable to an XSS attack. Note that applications using the normal escaping mechanisms provided by Rails may not impacted, but applications that bypass the escaping mechanisms, or do not use them may be vulnerable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-16471",
"url": "https://www.suse.com/security/cve/CVE-2018-16471"
},
{
"category": "external",
"summary": "SUSE Bug 1114828 for CVE-2018-16471",
"url": "https://bugzilla.suse.com/1114828"
},
{
"category": "external",
"summary": "SUSE Bug 1116600 for CVE-2018-16471",
"url": "https://bugzilla.suse.com/1116600"
},
{
"category": "external",
"summary": "SUSE Bug 1122178 for CVE-2018-16471",
"url": "https://bugzilla.suse.com/1122178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-16471"
},
{
"cve": "CVE-2019-16782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-16782"
}
],
"notes": [
{
"category": "general",
"text": "There\u0027s a possible information leak / session hijack vulnerability in Rack (RubyGem rack). This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find and hijack sessions by using timing attacks targeting the session id. Session ids are usually stored and indexed in a database that uses some kind of scheme for speeding up lookups of that session id. By carefully measuring the amount of time it takes to look up a session, an attacker may be able to find a valid session id and hijack the session. The session id itself may be generated randomly, but the way the session is indexed by the backing store does not use a secure comparison.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-16782",
"url": "https://www.suse.com/security/cve/CVE-2019-16782"
},
{
"category": "external",
"summary": "SUSE Bug 1159548 for CVE-2019-16782",
"url": "https://bugzilla.suse.com/1159548"
},
{
"category": "external",
"summary": "SUSE Bug 1183174 for CVE-2019-16782",
"url": "https://bugzilla.suse.com/1183174"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-16782"
},
{
"cve": "CVE-2020-8184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8184"
}
],
"notes": [
{
"category": "general",
"text": "A reliance on cookies without validation/integrity check security vulnerability exists in rack \u003c 2.2.3, rack \u003c 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie prefix.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8184",
"url": "https://www.suse.com/security/cve/CVE-2020-8184"
},
{
"category": "external",
"summary": "SUSE Bug 1173351 for CVE-2020-8184",
"url": "https://bugzilla.suse.com/1173351"
},
{
"category": "external",
"summary": "SUSE Bug 1177352 for CVE-2020-8184",
"url": "https://bugzilla.suse.com/1177352"
},
{
"category": "external",
"summary": "SUSE Bug 1193081 for CVE-2020-8184",
"url": "https://bugzilla.suse.com/1193081"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-8184"
},
{
"cve": "CVE-2022-30122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-30122"
}
],
"notes": [
{
"category": "general",
"text": "A possible denial of service vulnerability exists in Rack \u003c2.0.9.1, \u003c2.1.4.1 and \u003c2.2.3.1 in the multipart parsing component of Rack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-30122",
"url": "https://www.suse.com/security/cve/CVE-2022-30122"
},
{
"category": "external",
"summary": "SUSE Bug 1200748 for CVE-2022-30122",
"url": "https://bugzilla.suse.com/1200748"
},
{
"category": "external",
"summary": "SUSE Bug 1201588 for CVE-2022-30122",
"url": "https://bugzilla.suse.com/1201588"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-30122"
},
{
"cve": "CVE-2022-30123",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-30123"
}
],
"notes": [
{
"category": "general",
"text": "A sequence injection vulnerability exists in Rack \u003c2.0.9.1, \u003c2.1.4.1 and \u003c2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-30123",
"url": "https://www.suse.com/security/cve/CVE-2022-30123"
},
{
"category": "external",
"summary": "SUSE Bug 1200750 for CVE-2022-30123",
"url": "https://bugzilla.suse.com/1200750"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2022-30123"
},
{
"cve": "CVE-2022-44570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-44570"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability in the Range header parsing component of Rack \u003e= 1.5.0. A Carefully crafted input can cause the Range header parsing component in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that deal with Range requests (such as streaming applications, or applications that serve files) may be impacted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-44570",
"url": "https://www.suse.com/security/cve/CVE-2022-44570"
},
{
"category": "external",
"summary": "SUSE Bug 1207597 for CVE-2022-44570",
"url": "https://bugzilla.suse.com/1207597"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-44570"
},
{
"cve": "CVE-2022-44571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-44571"
}
],
"notes": [
{
"category": "general",
"text": "There is a denial of service vulnerability in the Content-Disposition parsingcomponent of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1. This could allow an attacker to craft an input that can cause Content-Disposition header parsing in Rackto take an unexpected amount of time, possibly resulting in a denial ofservice attack vector. This header is used typically used in multipartparsing. Any applications that parse multipart posts using Rack (virtuallyall Rails applications) are impacted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-44571",
"url": "https://www.suse.com/security/cve/CVE-2022-44571"
},
{
"category": "external",
"summary": "SUSE Bug 1207599 for CVE-2022-44571",
"url": "https://bugzilla.suse.com/1207599"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-44571"
},
{
"cve": "CVE-2022-44572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-44572"
}
],
"notes": [
{
"category": "general",
"text": "A denial of service vulnerability in the multipart parsing component of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1 and 3.0.0.1 could allow an attacker tocraft input that can cause RFC2183 multipart boundary parsing in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that parse multipart posts using Rack (virtually all Rails applications) are impacted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-44572",
"url": "https://www.suse.com/security/cve/CVE-2022-44572"
},
{
"category": "external",
"summary": "SUSE Bug 1207596 for CVE-2022-44572",
"url": "https://bugzilla.suse.com/1207596"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-44572"
},
{
"cve": "CVE-2023-27530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-27530"
}
],
"notes": [
{
"category": "general",
"text": "A DoS vulnerability exists in Rack \u003cv3.0.4.2, \u003cv2.2.6.3, \u003cv2.1.4.3 and \u003cv2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing to take longer than expected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-27530",
"url": "https://www.suse.com/security/cve/CVE-2023-27530"
},
{
"category": "external",
"summary": "SUSE Bug 1209095 for CVE-2023-27530",
"url": "https://bugzilla.suse.com/1209095"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-27530"
},
{
"cve": "CVE-2023-27539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-27539"
}
],
"notes": [
{
"category": "general",
"text": "There is a denial of service vulnerability in the header parsing component of Rack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-27539",
"url": "https://www.suse.com/security/cve/CVE-2023-27539"
},
{
"category": "external",
"summary": "SUSE Bug 1209503 for CVE-2023-27539",
"url": "https://bugzilla.suse.com/1209503"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-27539"
},
{
"cve": "CVE-2024-25126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-25126"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack\u0027s media type parser to take much longer than expected, leading to a possible denial of service vulnerability (ReDos 2nd degree polynomial). This vulnerability is patched in 3.0.9.1 and 2.2.8.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-25126",
"url": "https://www.suse.com/security/cve/CVE-2024-25126"
},
{
"category": "external",
"summary": "SUSE Bug 1220239 for CVE-2024-25126",
"url": "https://bugzilla.suse.com/1220239"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-25126"
},
{
"cve": "CVE-2024-26141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26141"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such large responses could lead to a denial of service issue. Vulnerable applications will use the `Rack::File` middleware or the `Rack::Utils.byte_ranges` methods (this includes Rails applications). The vulnerability is fixed in 3.0.9.1 and 2.2.8.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26141",
"url": "https://www.suse.com/security/cve/CVE-2024-26141"
},
{
"category": "external",
"summary": "SUSE Bug 1220242 for CVE-2024-26141",
"url": "https://bugzilla.suse.com/1220242"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2024-26141"
},
{
"cve": "CVE-2024-26146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26146"
}
],
"notes": [
{
"category": "general",
"text": "Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26146",
"url": "https://www.suse.com/security/cve/CVE-2024-26146"
},
{
"category": "external",
"summary": "SUSE Bug 1220248 for CVE-2024-26146",
"url": "https://bugzilla.suse.com/1220248"
},
{
"category": "external",
"summary": "SUSE Bug 1227310 for CVE-2024-26146",
"url": "https://bugzilla.suse.com/1227310"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.aarch64",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.ppc64le",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.s390x",
"openSUSE Tumbleweed:ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-26146"
}
]
}
GSD-2024-26146
Vulnerability from gsd - Updated: 2024-02-15 06:02Details
Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.
Aliases
{
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2024-26146"
],
"details": "Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.\n",
"id": "GSD-2024-26146",
"modified": "2024-02-15T06:02:25.144475Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "security-advisories@github.com",
"ID": "CVE-2024-26146",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "rack",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "\u003e= 3.0.0, \u003c 3.0.9.1"
},
{
"version_affected": "=",
"version_value": "\u003e= 2.2.0, \u003c 2.2.8.1"
},
{
"version_affected": "=",
"version_value": "\u003e= 2.1.0, \u003c 2.1.4.4"
},
{
"version_affected": "=",
"version_value": "\u003c 2.0.9.4"
}
]
}
}
]
},
"vendor_name": "rack"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.\n"
}
]
},
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"cweId": "CWE-1333",
"lang": "eng",
"value": "CWE-1333: Inefficient Regular Expression Complexity"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f",
"refsource": "MISC",
"url": "https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f"
},
{
"name": "https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716",
"refsource": "MISC",
"url": "https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716"
},
{
"name": "https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582",
"refsource": "MISC",
"url": "https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582"
},
{
"name": "https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f",
"refsource": "MISC",
"url": "https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f"
},
{
"name": "https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd",
"refsource": "MISC",
"url": "https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd"
},
{
"name": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942",
"refsource": "MISC",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
},
{
"name": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml",
"refsource": "MISC",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml"
}
]
},
"source": {
"advisory": "GHSA-54rr-7fvw-6x8f",
"discovery": "UNKNOWN"
}
},
"nvd.nist.gov": {
"cve": {
"descriptions": [
{
"lang": "en",
"value": "Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1.\n"
}
],
"id": "CVE-2024-26146",
"lastModified": "2024-02-29T13:49:47.277",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4,
"source": "security-advisories@github.com",
"type": "Secondary"
}
]
},
"published": "2024-02-29T00:15:51.597",
"references": [
{
"source": "security-advisories@github.com",
"url": "https://discuss.rubyonrails.org/t/possible-denial-of-service-vulnerability-in-rack-header-parsing/84942"
},
{
"source": "security-advisories@github.com",
"url": "https://github.com/rack/rack/commit/30b8e39a578b25d4bdcc082c1c52c6f164b59716"
},
{
"source": "security-advisories@github.com",
"url": "https://github.com/rack/rack/commit/6c5d90bdcec0949f7ba06db62fb740dab394b582"
},
{
"source": "security-advisories@github.com",
"url": "https://github.com/rack/rack/commit/a227cd793778c7c3a827d32808058571569cda6f"
},
{
"source": "security-advisories@github.com",
"url": "https://github.com/rack/rack/commit/e4c117749ba24a66f8ec5a08eddf68deeb425ccd"
},
{
"source": "security-advisories@github.com",
"url": "https://github.com/rack/rack/security/advisories/GHSA-54rr-7fvw-6x8f"
},
{
"source": "security-advisories@github.com",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2024-26146.yml"
}
],
"sourceIdentifier": "security-advisories@github.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-1333"
}
],
"source": "security-advisories@github.com",
"type": "Secondary"
}
]
}
}
}
}
WID-SEC-W-2024-0911
Vulnerability from csaf_certbund - Published: 2024-04-16 22:00 - Updated: 2024-12-04 23:00Summary
Red Hat Enterprise Linux (pcs): Mehrere Schwachstellen ermöglichen Denial of Service
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux (pcs) ausnutzen, um einen Denial of Service Angriff durchzuführen.
Betroffene Betriebssysteme
- Linux
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Red Hat Enterprise Linux (RHEL) ist eine popul\u00e4re Linux-Distribution.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux (pcs) ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-0911 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0911.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-0911 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0911"
},
{
"category": "external",
"summary": "Red Hat Security Advisory vom 2024-04-16",
"url": "https://access.redhat.com/errata/RHSA-2024:1841"
},
{
"category": "external",
"summary": "Red Hat Security Advisory vom 2024-04-16",
"url": "https://access.redhat.com/errata/RHSA-2024:1846"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2007 vom 2024-04-23",
"url": "https://access.redhat.com/errata/RHSA-2024:2007"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-3800 vom 2024-04-29",
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00022.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2584 vom 2024-04-30",
"url": "https://access.redhat.com/errata/RHSA-2024:2584"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2581 vom 2024-04-30",
"url": "https://access.redhat.com/errata/RHSA-2024:2581"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2953 vom 2024-05-22",
"url": "https://access.redhat.com/errata/RHSA-2024:2953"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:3431 vom 2024-05-28",
"url": "https://access.redhat.com/errata/RHSA-2024:3431"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6837-1 vom 2024-06-17",
"url": "https://ubuntu.com/security/notices/USN-6837-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7036-1 vom 2024-09-26",
"url": "https://ubuntu.com/security/notices/USN-7036-1"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:10806 vom 2024-12-04",
"url": "https://access.redhat.com/errata/RHSA-2024:10806"
}
],
"source_lang": "en-US",
"title": "Red Hat Enterprise Linux (pcs): Mehrere Schwachstellen erm\u00f6glichen Denial of Service",
"tracking": {
"current_release_date": "2024-12-04T23:00:00.000+00:00",
"generator": {
"date": "2024-12-05T09:06:07.038+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.10"
}
},
"id": "WID-SEC-W-2024-0911",
"initial_release_date": "2024-04-16T22:00:00.000+00:00",
"revision_history": [
{
"date": "2024-04-16T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-04-23T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-04-29T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2024-05-01T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-05-21T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-05-28T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-06-17T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2024-09-25T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2024-12-04T23:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "9"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "T034267",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "product_name",
"name": "Enterprise Linux"
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25126",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Red Hat Enterprise Linux. Diese Fehler bestehen in der Komponente pcs aufgrund einer unsachgem\u00e4\u00dfen Eingabevalidierung. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen."
}
],
"product_status": {
"known_affected": [
"2951",
"67646",
"T000126",
"T034267"
]
},
"release_date": "2024-04-16T22:00:00.000+00:00",
"title": "CVE-2024-25126"
},
{
"cve": "CVE-2024-26141",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Red Hat Enterprise Linux. Diese Fehler bestehen in der Komponente pcs aufgrund einer unsachgem\u00e4\u00dfen Eingabevalidierung. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen."
}
],
"product_status": {
"known_affected": [
"2951",
"67646",
"T000126",
"T034267"
]
},
"release_date": "2024-04-16T22:00:00.000+00:00",
"title": "CVE-2024-26141"
},
{
"cve": "CVE-2024-26146",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen in Red Hat Enterprise Linux. Diese Fehler bestehen in der Komponente pcs aufgrund einer unsachgem\u00e4\u00dfen Eingabevalidierung. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen."
}
],
"product_status": {
"known_affected": [
"2951",
"67646",
"T000126",
"T034267"
]
},
"release_date": "2024-04-16T22:00:00.000+00:00",
"title": "CVE-2024-26146"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…