OpenShift Container Platform 4.10 update for golang

Published: 2022-08-01

Risk	Medium
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2022-24675 CVE-2022-24921
CWE-ID	CWE-120 CWE-185
Exploitation vector	Network
Public exploit	N/A
Vulnerable software	Red Hat OpenShift Container Platform Client/Desktop applications / Software for system administration cri-o (Red Hat package) Operating systems & Components / Operating system package or component openshift (Red Hat package) Operating systems & Components / Operating system package or component openshift-clients (Red Hat package) Operating systems & Components / Operating system package or component openshift-ansible (Red Hat package) Operating systems & Components / Operating system package or component openstack-ironic (Red Hat package) Operating systems & Components / Operating system package or component openshift-kuryr (Red Hat package) Operating systems & Components / Operating system package or component atomic-openshift-service-idler (Red Hat package) Operating systems & Components / Operating system package or component cri-tools (Red Hat package) Operating systems & Components / Operating system package or component
Vendor	Red Hat Inc.

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Buffer overflow

EUVDB-ID: #VU64266

Risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-24675

CWE-ID: CWE-120 - Buffer overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists in the Golang's library encoding/pem. A remote attacker can send to victim a large (more than 5 MB) PEM input to cause a stack overflow in Decode and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Red Hat OpenShift Container Platform: 4.10 - 4.10.24

cri-o (Red Hat package): 1.23.0-92.rhaos4.10.gitdaab4d1.el7 - 1.23.3-3.rhaos4.10.git5fe1720.el8

openshift (Red Hat package): 4.10.0-202202250816.p0.ge419edf.assembly.stream.el7 - 4.10.0-202204251639.p0.g70fb84c.assembly.stream.el8

openshift-clients (Red Hat package): 4.10.0-202202160023.p0.gf93da17.assembly.stream.el7 - 4.10.0-202203170916.p0.g6de42bd.assembly.stream.el8

openshift-ansible (Red Hat package): 4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7 - 4.10.0-202203112237.p0.g7ca0181.assembly.stream.el7

openstack-ironic (Red Hat package): 19.0.1-0.20220120204037.438b8af.el8

openshift-kuryr (Red Hat package): 4.10.0-202202160023.p0.ge77f917.assembly.stream.el8

atomic-openshift-service-idler (Red Hat package): 4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8

cri-tools (Red Hat package): before 1.23.0-1.1.el7

CPE2.3

External links

https://access.redhat.com/errata/RHSA-2022:5729

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Incorrect Regular Expression

EUVDB-ID: #VU61227

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-24921

CWE-ID: CWE-185 - Incorrect Regular Expression