OpenShift Container Platform 4.11 update for golang

1) Use of insufficiently random values

EUVDB-ID: #VU66122

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-30629

CWE-ID: CWE-330 - Use of Insufficiently Random Values

Exploit availability: No

Description

The vulnerability allows a remote attacker gain access to sensitive information.

The vulnerability exists in crypto/tls implementation when generating TLS tickets age. The newSessionTicketMsgTLS13.ageAdd is always set to "0" instead of a random value.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Red Hat OpenShift Container Platform: 4.11.0

openshift-kuryr (Red Hat package): 4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8

openshift-clients (Red Hat package): 4.11.0-202207291716.p0.g7075089.assembly.stream.el8

openshift-ansible (Red Hat package): 4.11.0-202206240216.p0.g9de1722.assembly.stream.el8

openshift (Red Hat package): 4.11.0-202207082037.p0.g9546431.assembly.stream.el8

ignition (Red Hat package): 2.14.0-3.rhaos4.11.el8

cri-o (Red Hat package): 1.24.1-11.rhaos4.11.gitb0d2ef3.el8

console-login-helper-messages (Red Hat package): 0.20.3-1.rhaos4.6.el8 - 0.20.3-2.rhaos4.11.el8

butane (Red Hat package): 0.15.0-1.rhaos4.11.el8

python-kubernetes (Red Hat package): before 24.2.0-1.el8

NetworkManager (Red Hat package): before 1.36.0-8.el8_6

CPE2.3

• cpe:2.3:a:red_hat:red_hat_openshift_container_platform:4.11.0:*:*:*:*:*:*:
• cpe:2.3:o:red_hat:openshift-kuryr_redhat_package:4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8:*:*:*:*:red_hat_enterprise_linux:*:
• cpe:2.3:o:red_hat:openshift-clients_redhat_package:4.11.0-202207291716.p0.g7075089.assembly.stream.el8:*:*:*:*:red_hat_enterprise_linux:*:
• cpe:2.3:o:red_hat:openshift-ansible_redhat_package:4.11.0-202206240216.p0.g9de1722.assembly.stream.el8:*:*:*:*:red_hat_enterprise_linux:*:
• cpe:2.3:o:red_hat:openshift_redhat_package:4.11.0-202207082037.p0.g9546431.assembly.stream.el8:*:*:*:*:red_hat_enterprise_linux:*:
• cpe:2.3:o:red_hat:ignition_redhat_package:2.14.0-3.rhaos4.11.el8:*:*:*:*:red_hat_enterprise_linux:*:
• cpe:2.3:o:red_hat:cri-o_redhat_package:1.24.1-11.rhaos4.11.gitb0d2ef3.el8:*:*:*:*:red_hat_enterprise_linux:*:
• cpe:2.3:o:red_hat:console-login-helper-messages_redhat_package:0.20.3-2.rhaos4.11.el8:*:*:*:*:red_hat_enterprise_linux:*:
• cpe:2.3:o:red_hat:console-login-helper-messages_redhat_package:0.20.3-1.rhaos4.10.el8:*:*:*:*:red_hat_enterprise_linux:*:
• cpe:2.3:o:red_hat:console-login-helper-messages_redhat_package:0.20.3-1.rhaos4.9.el8:*:*:*:*:red_hat_enterprise_linux:*:
• cpe:2.3:o:red_hat:butane_redhat_package:0.15.0-1.rhaos4.11.el8:*:*:*:*:red_hat_enterprise_linux:*:

External links

http://access.redhat.com/errata/RHSA-2022:6102

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.