All products

Red Hat OpenShift Container Platform 3.11/openshift-enterprise-image-registry

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795 · GHSA-45X7-PX36-X8W8Version ranges need review. russhgolang.org/x/crypto Rust / CargoGoPyPIRed Hat Medium Fix reported
golang.org/x/crypto/ssh NULL Pointer Dereference vulnerabilityCVE-2020-29652 · GHSA-3VM4-22FP-5RFMVersion ranges need review. golang.org/x/cryptoOpenShift Service Mesh 2.0/3scale-istio-adapter-rhel8-container GoRed Hat High Fix reported
net/http, x/net/http2: close connections when receiving too many headersCVE-2023-45288 · GHSA-4V7X-PQXF-CX7MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
Request smuggling due to accepting invalid headers in net/http via net/textprotoCVE-2019-16276 · GO-2022-0212 stdlibRed Hat Ceph Storage 2/golang GoRed Hat Medium Fix reported
Data race and crash in net/httpCVE-2020-15586 · GO-2021-0224 stdlibOpenShift Service Mesh 1/jaeger-operator GoRed Hat Medium Fix reported
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputsCVE-2020-16845 OpenShift Service Mesh 1/jaeger-operatorOpenShift Service Mesh 1/jaeger Red Hat Medium No fix reported