Multiple vulnerabilities in Openshift Logging 5.3
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 20 |
| CVE-ID | CVE-2022-21626 CVE-2022-40674 CVE-2022-39399 CVE-2022-37434 CVE-2022-29901 CVE-2022-29900 CVE-2022-23825 CVE-2022-23816 CVE-2022-21628 CVE-2022-21624 CVE-2022-32149 CVE-2022-21619 CVE-2022-21618 CVE-2022-3515 CVE-2022-2588 CVE-2022-2509 CVE-2022-1353 CVE-2022-0494 CVE-2020-35527 CVE-2020-35525 |
| CWE-ID | CWE-20 CWE-416 CWE-122 CWE-1037 CWE-843 CWE-400 CWE-190 CWE-415 CWE-200 CWE-125 CWE-476 |
| Exploitation vector | Network |
| Public exploit |
Public exploit code for vulnerability #4 is available. Vulnerability #15 is being exploited in the wild. |
| Vulnerable software |
OpenShift Logging Server applications / Other server solutions |
| Vendor | Red Hat Inc. |
Security Bulletin
This security bulletin contains information about 20 vulnerabilities.
1) Improper input validation
EUVDB-ID: #VU68438
Risk: Medium
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2022-21626
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote non-authenticated attacker to perform service disruption.
The vulnerability exists due to improper input validation within the Security component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to perform service disruption.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Use-after-free
EUVDB-ID: #VU67532
Risk: High
CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2022-40674
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error in the doContent() function in xmlparse.c. A remote attacker can pass specially crafted input to the application that is using the affected library, trigger a use-after-free error and execute arbitrary code on the system.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Improper input validation
EUVDB-ID: #VU68440
Risk: Low
CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-39399
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote non-authenticated attacker to manipulate data.
The vulnerability exists due to improper input validation within the Networking component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to manipulate data.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Heap-based buffer overflow
EUVDB-ID: #VU66153
Risk: High
CVSSv4.0: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber]
CVE-ID: CVE-2022-37434
CWE-ID:
CWE-122 - Heap-based Buffer Overflow
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing a large gzip header within inflateGetHeader in inflate.c. A remote attacker can pass a specially crafted file to the affected application, trigger heap-based buffer overflow and execute arbitrary code on the target system.
Install updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
5) Processor optimization removal or modification of security-critical code
EUVDB-ID: #VU65220
Risk: Low
CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-29901
CWE-ID:
CWE-1037 - Processor optimization removal or modification of security-critical code
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to the way non-transparent sharing of branch predictor targets between contexts. A local user can exploit the vulnerability to gain access to sensitive information.
Install updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
6) Processor optimization removal or modification of security-critical code
EUVDB-ID: #VU65205
Risk: Low
CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-29900
CWE-ID:
CWE-1037 - Processor optimization removal or modification of security-critical code
Exploit availability: No
Description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a mistrained branch predictions for return instructions. A local user can execute arbitrary speculative code under certain microarchitecture-dependent conditions. The vulnerability was dubbed RETbleed.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
7) Type Confusion
EUVDB-ID: #VU65204
Risk: Low
CVSSv4.0: 0.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-23825
CWE-ID:
CWE-843 - Type confusion
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to a branch type confusion. A local user can force the branch predictor to predict the wrong branch type and gain access to sensitive information.
Install updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
8) Type Confusion
EUVDB-ID: #VU65219
Risk: Low
CVSSv4.0: 0.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-23816
CWE-ID:
CWE-843 - Type confusion
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to a branch type confusion. A local user can force the branch predictor to predict the wrong branch type and gain access to sensitive information.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
9) Improper input validation
EUVDB-ID: #VU68437
Risk: Medium
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2022-21628
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote non-authenticated attacker to perform service disruption.
The vulnerability exists due to improper input validation within the Lightweight HTTP Server component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to perform service disruption.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
10) Improper input validation
EUVDB-ID: #VU68441
Risk: Low
CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-21624
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote non-authenticated attacker to manipulate data.
The vulnerability exists due to improper input validation within the JNDI component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to manipulate data.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
11) Resource exhaustion
EUVDB-ID: #VU68897
Risk: Medium
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2022-32149
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to ParseAcceptLanguage does not properly control consumption of internal resources. A remote attacker can send a specially crafted Accept-Language header that will take a significant time to parse and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
12) Improper input validation
EUVDB-ID: #VU68442
Risk: Low
CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-21619
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote non-authenticated attacker to manipulate data.
The vulnerability exists due to improper input validation within the Security component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to manipulate data.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
13) Improper input validation
EUVDB-ID: #VU68439
Risk: Medium
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2022-21618
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote non-authenticated attacker to manipulate data.
The vulnerability exists due to improper input validation within the JGSS component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to manipulate data.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
14) Integer overflow
EUVDB-ID: #VU68376
Risk: High
CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2022-3515
CWE-ID:
CWE-190 - Integer overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to integer overflow within the CRL parser in libksba. A remote attacker can pass specially crafted data to the application, trigger an integer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
15) Double Free
EUVDB-ID: #VU66397
Risk: Low
CVSSv4.0: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Clear]
CVE-ID: CVE-2022-2588
CWE-ID:
CWE-415 - Double Free
Exploit availability: Yes
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The
vulnerability exists due to a double free error within the network packet scheduler implementation
in the route4_change() function in Linux kernel when removing all references to a route filter
before freeing it. A local user can run a specially crafted program to
crash the kernel or execute arbitrary code.
Install updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
Yes. This vulnerability is being exploited in the wild.
16) Double Free
EUVDB-ID: #VU65915
Risk: High
CVSSv4.0: 6.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2022-2509
CWE-ID:
CWE-415 - Double Free
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within gnutls_pkcs7_verify() function when verifying the pkcs7 signatures. A remote attacker can pass specially crafted data to the application, trigger a double free error and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
17) Information disclosure
EUVDB-ID: #VU63388
Risk: Low
CVSSv4.0: 4.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-1353
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output by the application in the pfkey_register function in net/key/af_key.c in the Linux kernel. A local user can gain unauthorized access to kernel memory, leading to a system crash or a leak of internal kernel information.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
18) Information disclosure
EUVDB-ID: #VU64259
Risk: Low
CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-0494
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output in the scsi_ioctl() function in drivers/scsi/scsi_ioctl.c in the Linux kernel. A local user with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) can gain unauthorized access to sensitive information on the system.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
19) Out-of-bounds read
EUVDB-ID: #VU67412
Risk: Medium
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2020-35527
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition when handling ALTER TABLE for views that have a nested FROM clause. A remote attacker can pass specially crafted input to the application, trigger an out-of-bounds read error and read contents of memory on the system.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
20) NULL pointer dereference
EUVDB-ID: #VU67411
Risk: Medium
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2020-35525
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the INTERSEC query processing. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's website.
OpenShift Logging: 5.3.0 - 5.3.12
CPE2.3- cpe:2.3:a:red_hat:openshift_logging:5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:openshift_logging:5.3.2:*:*:*:*:*:*:*
https://access.redhat.com/errata/RHSA-2022:6882
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
