rhba-2023_3611
Vulnerability from csaf_redhat
Published
2023-06-15 00:29
Modified
2024-09-02 10:01
Summary
Red Hat Bug Fix Advisory: Release of Bug Advisories for the OpenShift Jenkins and Jenkins agent base image
Notes
Topic
Release of Bug Advisories for the OpenShift Jenkins image and Jenkins agent base image
Details
Release of Bug Advisories for the OpenShift Jenkins image and Jenkins agent base image
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Release of Bug Advisories for the OpenShift Jenkins image and Jenkins agent base image", "title": "Topic" }, { "category": "general", "text": "Release of Bug Advisories for the OpenShift Jenkins image and Jenkins agent base image", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHBA-2023:3611", "url": "https://access.redhat.com/errata/RHBA-2023:3611" }, { "category": "external", "summary": "https://docs.openshift.com/container-platform/4.12/cicd/jenkins/important-changes-to-openshift-jenkins-images.html", "url": "https://docs.openshift.com/container-platform/4.12/cicd/jenkins/important-changes-to-openshift-jenkins-images.html" }, { "category": "external", "summary": "OCPBUGS-13652", "url": "https://issues.redhat.com/browse/OCPBUGS-13652" }, { "category": "external", "summary": "OCPBUGS-14393", "url": "https://issues.redhat.com/browse/OCPBUGS-14393" }, { "category": "external", "summary": "OCPBUGS-14642", "url": "https://issues.redhat.com/browse/OCPBUGS-14642" }, { "category": "external", "summary": "OCPBUGS-6632", "url": "https://issues.redhat.com/browse/OCPBUGS-6632" }, { "category": "external", "summary": "OCPBUGS-7016", "url": "https://issues.redhat.com/browse/OCPBUGS-7016" }, { "category": "external", "summary": "OCPBUGS-7017", "url": "https://issues.redhat.com/browse/OCPBUGS-7017" }, { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/data/csaf/v2/advisories/2023/rhba-2023_3611.json" } ], "title": "Red Hat Bug Fix Advisory: Release of Bug Advisories for the OpenShift Jenkins and Jenkins agent base image", "tracking": { "current_release_date": "2024-09-02T10:01:01+00:00", "generator": { "date": "2024-09-02T10:01:01+00:00", "engine": { "name": "Red Hat SDEngine", "version": "3.33.1" } }, "id": "RHBA-2023:3611", "initial_release_date": "2023-06-15T00:29:54+00:00", "revision_history": [ { "date": "2023-06-15T00:29:54+00:00", "number": "1", "summary": "Initial version" }, { "date": "2023-06-15T00:29:54+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-09-02T10:01:01+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "OpenShift Developer Tools and Services for OCP 4.12", "product": { "name": "OpenShift Developer Tools and Services for OCP 4.12", "product_id": "8Base-OCP-Tools-4.12", "product_identification_helper": { "cpe": "cpe:/a:redhat:ocp_tools:4.12::el8" } } } ], "category": "product_family", "name": "OpenShift Jenkins" }, { "branches": [ { "category": "product_version", "name": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:d2b1d82bb799a1be9d814c756bcb62d56fcd6e508e931b74cada392a20818af6_amd64", "product": { "name": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:d2b1d82bb799a1be9d814c756bcb62d56fcd6e508e931b74cada392a20818af6_amd64", "product_id": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:d2b1d82bb799a1be9d814c756bcb62d56fcd6e508e931b74cada392a20818af6_amd64", "product_identification_helper": { "purl": "pkg:oci/jenkins-agent-base-rhel8@sha256:d2b1d82bb799a1be9d814c756bcb62d56fcd6e508e931b74cada392a20818af6?arch=amd64\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel8\u0026tag=v4.12.0-1686649619" } } }, { "category": "product_version", "name": "ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64", "product": { "name": "ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64", "product_id": "ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64", "product_identification_helper": { "purl": "pkg:oci/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc?arch=amd64\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-rhel8\u0026tag=v4.12.0-1686650770" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:85cf90bc3dd633e33cf9d26e99f92859c530d5bcfda1098b75b984a546de71d2_arm64", "product": { "name": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:85cf90bc3dd633e33cf9d26e99f92859c530d5bcfda1098b75b984a546de71d2_arm64", "product_id": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:85cf90bc3dd633e33cf9d26e99f92859c530d5bcfda1098b75b984a546de71d2_arm64", "product_identification_helper": { "purl": "pkg:oci/jenkins-agent-base-rhel8@sha256:85cf90bc3dd633e33cf9d26e99f92859c530d5bcfda1098b75b984a546de71d2?arch=arm64\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel8\u0026tag=v4.12.0-1686649619" } } }, { "category": "product_version", "name": "ocp-tools-4/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e_arm64", "product": { "name": "ocp-tools-4/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e_arm64", "product_id": "ocp-tools-4/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e_arm64", "product_identification_helper": { "purl": "pkg:oci/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e?arch=arm64\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-rhel8\u0026tag=v4.12.0-1686650770" } } } ], "category": "architecture", "name": "arm64" }, { "branches": [ { "category": "product_version", "name": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:8e32ea3e4fd183303f9d39cf2547f094767ea281871779279c11621be8c2dbc8_ppc64le", "product": { "name": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:8e32ea3e4fd183303f9d39cf2547f094767ea281871779279c11621be8c2dbc8_ppc64le", "product_id": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:8e32ea3e4fd183303f9d39cf2547f094767ea281871779279c11621be8c2dbc8_ppc64le", "product_identification_helper": { "purl": "pkg:oci/jenkins-agent-base-rhel8@sha256:8e32ea3e4fd183303f9d39cf2547f094767ea281871779279c11621be8c2dbc8?arch=ppc64le\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel8\u0026tag=v4.12.0-1686649619" } } }, { "category": "product_version", "name": "ocp-tools-4/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb_ppc64le", "product": { "name": "ocp-tools-4/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb_ppc64le", "product_id": "ocp-tools-4/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb_ppc64le", "product_identification_helper": { "purl": "pkg:oci/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb?arch=ppc64le\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-rhel8\u0026tag=v4.12.0-1686650770" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc_s390x", "product": { "name": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc_s390x", "product_id": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc_s390x", "product_identification_helper": { "purl": "pkg:oci/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc?arch=s390x\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel8\u0026tag=v4.12.0-1686649619" } } }, { "category": "product_version", "name": "ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x", "product": { "name": "ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x", "product_id": "ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x", "product_identification_helper": { "purl": "pkg:oci/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3?arch=s390x\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-rhel8\u0026tag=v4.12.0-1686650770" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc_s390x as a component of OpenShift Developer Tools and Services for OCP 4.12", "product_id": "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc_s390x" }, "product_reference": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc_s390x", "relates_to_product_reference": "8Base-OCP-Tools-4.12" }, { "category": "default_component_of", "full_product_name": { "name": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:85cf90bc3dd633e33cf9d26e99f92859c530d5bcfda1098b75b984a546de71d2_arm64 as a component of OpenShift Developer Tools and Services for OCP 4.12", "product_id": "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-agent-base-rhel8@sha256:85cf90bc3dd633e33cf9d26e99f92859c530d5bcfda1098b75b984a546de71d2_arm64" }, "product_reference": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:85cf90bc3dd633e33cf9d26e99f92859c530d5bcfda1098b75b984a546de71d2_arm64", "relates_to_product_reference": "8Base-OCP-Tools-4.12" }, { "category": "default_component_of", "full_product_name": { "name": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:8e32ea3e4fd183303f9d39cf2547f094767ea281871779279c11621be8c2dbc8_ppc64le as a component of OpenShift Developer Tools and Services for OCP 4.12", "product_id": "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-agent-base-rhel8@sha256:8e32ea3e4fd183303f9d39cf2547f094767ea281871779279c11621be8c2dbc8_ppc64le" }, "product_reference": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:8e32ea3e4fd183303f9d39cf2547f094767ea281871779279c11621be8c2dbc8_ppc64le", "relates_to_product_reference": "8Base-OCP-Tools-4.12" }, { "category": "default_component_of", "full_product_name": { "name": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:d2b1d82bb799a1be9d814c756bcb62d56fcd6e508e931b74cada392a20818af6_amd64 as a component of OpenShift Developer Tools and Services for OCP 4.12", "product_id": "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-agent-base-rhel8@sha256:d2b1d82bb799a1be9d814c756bcb62d56fcd6e508e931b74cada392a20818af6_amd64" }, "product_reference": "ocp-tools-4/jenkins-agent-base-rhel8@sha256:d2b1d82bb799a1be9d814c756bcb62d56fcd6e508e931b74cada392a20818af6_amd64", "relates_to_product_reference": "8Base-OCP-Tools-4.12" }, { "category": "default_component_of", "full_product_name": { "name": "ocp-tools-4/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb_ppc64le as a component of OpenShift Developer Tools and Services for OCP 4.12", "product_id": "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb_ppc64le" }, "product_reference": "ocp-tools-4/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb_ppc64le", "relates_to_product_reference": "8Base-OCP-Tools-4.12" }, { "category": "default_component_of", "full_product_name": { "name": "ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x as a component of OpenShift Developer Tools and Services for OCP 4.12", "product_id": "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x" }, "product_reference": "ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x", "relates_to_product_reference": "8Base-OCP-Tools-4.12" }, { "category": "default_component_of", "full_product_name": { "name": "ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64 as a component of OpenShift Developer Tools and Services for OCP 4.12", "product_id": "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64" }, "product_reference": "ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64", "relates_to_product_reference": "8Base-OCP-Tools-4.12" }, { "category": "default_component_of", "full_product_name": { "name": "ocp-tools-4/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e_arm64 as a component of OpenShift Developer Tools and Services for OCP 4.12", "product_id": "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e_arm64" }, "product_reference": "ocp-tools-4/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e_arm64", "relates_to_product_reference": "8Base-OCP-Tools-4.12" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Philippe Antoine" ], "organization": "Catena Cyber" } ], "cve": "CVE-2022-41723", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2023-03-14T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc_s390x", "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-agent-base-rhel8@sha256:85cf90bc3dd633e33cf9d26e99f92859c530d5bcfda1098b75b984a546de71d2_arm64", "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-agent-base-rhel8@sha256:8e32ea3e4fd183303f9d39cf2547f094767ea281871779279c11621be8c2dbc8_ppc64le", "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-agent-base-rhel8@sha256:d2b1d82bb799a1be9d814c756bcb62d56fcd6e508e931b74cada392a20818af6_amd64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2178358" } ], "notes": [ { "category": "description", "text": "A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding", "title": "Vulnerability summary" }, { "category": "other", "text": "Within OpenShift Container Platform, the maximum impact of this vulnerability is a denial of service against an individual container so the impact could not cascade across the entire infrastructure, this vulnerability is rated Moderate impact.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb_ppc64le", "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x", "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64", "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e_arm64" ], "known_not_affected": [ "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc_s390x", "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-agent-base-rhel8@sha256:85cf90bc3dd633e33cf9d26e99f92859c530d5bcfda1098b75b984a546de71d2_arm64", "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-agent-base-rhel8@sha256:8e32ea3e4fd183303f9d39cf2547f094767ea281871779279c11621be8c2dbc8_ppc64le", "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-agent-base-rhel8@sha256:d2b1d82bb799a1be9d814c756bcb62d56fcd6e508e931b74cada392a20818af6_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2022-41723" }, { "category": "external", "summary": "RHBZ#2178358", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2178358" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2022-41723", "url": "https://www.cve.org/CVERecord?id=CVE-2022-41723" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-41723", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41723" }, { "category": "external", "summary": "https://github.com/advisories/GHSA-vvpx-j8f3-3w6h", "url": "https://github.com/advisories/GHSA-vvpx-j8f3-3w6h" }, { "category": "external", "summary": "https://go.dev/cl/468135", "url": "https://go.dev/cl/468135" }, { "category": "external", "summary": "https://go.dev/cl/468295", "url": "https://go.dev/cl/468295" }, { "category": "external", "summary": "https://go.dev/issue/57855", "url": "https://go.dev/issue/57855" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E", "url": "https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2023-1571", "url": "https://pkg.go.dev/vuln/GO-2023-1571" }, { "category": "external", "summary": "https://vuln.go.dev/ID/GO-2023-1571.json", "url": "https://vuln.go.dev/ID/GO-2023-1571.json" } ], "release_date": "2023-02-17T14:00:00+00:00", "remediations": [ { "category": "vendor_fix", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb_ppc64le", "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x", "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64", "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e_arm64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2023:3611" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb_ppc64le", "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x", "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64", "8Base-OCP-Tools-4.12:ocp-tools-4/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e_arm64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding" } ] }
Loading...