Security
English
همهٔ محصولات

Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8

Red Hat · بسته
14 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
Elasticsearch PKI Realm Authentication Bypass Vulnerability Allows User Impersonation Through Crafted Client CertificatesCVE-2025-37731 · GHSA-M9GH-789G-Q5PV org.elasticsearch.plugin:x-pack-coreorg.elasticsearch.plugin:x-pack-security MavenRed Hat متوسط اصلاح گزارش شده
Rack has an Unbounded-Parameter DoS in Rack::QueryParserCVE-2025-46727 · GHSA-GJH7-P2FX-99VX Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 Red HatRubyGems زیاد اصلاح گزارش شده
Rack session gets restored after deletionCVE-2025-46336 · GHSA-9J94-67JR-4CQJ Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 Red HatRubyGems متوسط اصلاح گزارش شده
Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)CVE-2025-61772 · GHSA-WPV5-97WM-HP9C Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundleLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator Red HatRubyGems زیاد اصلاح گزارش شده
Rack session gets restored after deletionCVE-2025-32441 · GHSA-VPFW-47H7-XJ4G Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 Red HatRubyGems متوسط اصلاح گزارش شده
Ruby WEBrick read_headers method can lead to HTTP Request/Response SmugglingCVE-2025-6442 · GHSA-R995-Q44H-HR64 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 Red HatRubyGems متوسط اصلاح گزارش شده
Rack has possible DoS Vulnerability in Multipart MIME parsingCVE-2023-27530 · GHSA-3H57-HMJ3-GJ3P Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/zync-rhel8 Red HatRubyGems زیاد اصلاح گزارش شده
openssl: Excessive time spent checking DSA keys and parametersCVE-2024-4603 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat کم اصلاح اعلام نشده
openssl: Use After Free with SSL_free_buffersCVE-2024-4741 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat کم اصلاح اعلام نشده
openssl: SSL_select_next_proto buffer overreadCVE-2024-5535 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat کم اصلاح اعلام نشده
openssl: remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculationsCVE-2024-41996 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat کم اصلاح اعلام نشده
openssl: Low-level invalid GF(2^m) parameters lead to OOB memory accessCVE-2024-9143 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat کم اصلاح اعلام نشده
openssl: Timing side-channel in ECDSA signature computationCVE-2024-13176 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat کم اصلاح اعلام نشده
ydb: ydb: Denial of Service via memory leakCVE-2026-24825 Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundleLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator Red Hat متوسط اصلاح اعلام نشده