{ "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", "CVE_data_meta": { "ID": "CVE-2024-1394", "ASSIGNER": "secalert@redhat.com", "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", "value": "A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs\u200b. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey\u200b and ctx\u200b. That function uses named return parameters to free pkey\u200b and ctx\u200b if there is an error initializing the context or setting the different properties. All return statements related to error cases follow the \"return nil, nil, fail(...)\" pattern, meaning that pkey\u200b and ctx\u200b will be nil inside the deferred function that should free them." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Missing Release of Memory after Effective Lifetime", "cweId": "CWE-401" } ] } ] }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "Red Hat", "product": { "product_data": [ { "product_name": "Red Hat Ansible Automation Platform 2.4 for RHEL 8", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.4.5-1.el8ap", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Ansible Automation Platform 2.4 for RHEL 9", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.4.5-1.el9ap", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Developer Tools", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.19.13-6.el7_9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Enterprise Linux 8", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "8090020240313170136.26eb71ac", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:5.1.1-2.el8_9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:9.2.10-8.el8_9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:9.2.10-16.el8_10", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "8100020240808093819.afee755d", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:101-2.el8_10", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } } ] } }, { "product_name": "Red Hat Enterprise Linux 9", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.20.12-2.el9_3", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:9.2.10-8.el9_3", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:5.1.1-2.el9_3", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.21.9-2.el9_4", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:9.2.10-16.el9_4", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:5.1.1-2.el9_4", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "2:1.33.7-3.el9_4", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "4:4.9.4-5.el9_4", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "6:0.7.3-4.el9_4", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "2:1.14.3-3.el9_4", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "1:1.4.0-4.el9_4", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "4:1.1.12-3.el9_4", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } } ] } }, { "product_name": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "2:4.2.0-4.el9_0", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "1:1.0.1-6.el9_0", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Enterprise Linux 9.2 Extended Update Support", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.19.13-7.el9_2", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "2:4.4.1-20.el9_2", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat OpenShift Container Platform 4.12", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "1:1.23.4-5.2.rhaos4.12.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:0.16.0-2.2.rhaos4.12.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "1:1.4.0-1.1.rhaos4.12.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.25.3-5.2.rhaos4.12.git44a2cb2.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.25.0-2.2.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:2.14.0-7.1.rhaos4.12.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:4.12.0-202403251017.p0.gd4c9e3c.assembly.stream.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "3:4.4.1-2.1.rhaos4.12.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "3:1.1.6-5.2.rhaos4.12.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "2:1.9.4-3.2.rhaos4.12.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat OpenShift Container Platform 4.13", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "1:1.29.1-2.2.rhaos4.13.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "1:1.4.0-1.1.rhaos4.13.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.26.5-11.1.rhaos4.13.git919cc6e.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.26.0-4.2.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:2.15.0-7.1.rhaos4.13.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:4.13.0-202404020737.p0.gd192e90.assembly.stream.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "3:4.4.1-5.2.rhaos4.13.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "4:1.1.12-1.1.rhaos4.13.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "2:1.11.2-2.2.rhaos4.13.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat OpenShift Container Platform 4.14", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:0.19.0-1.3.rhaos4.14.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "1:1.4.0-1.2.rhaos4.14.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.27.0-3.1.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:2.16.2-2.1.rhaos4.14.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:4.14.0-202403251040.p0.g607e2dd.assembly.stream.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "3:4.4.1-11.3.rhaos4.14.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "2:1.11.2-10.3.rhaos4.14.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "1:1.29.1-10.4.rhaos4.14.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:0.19.0-1.4.rhaos4.14.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "3:2.1.7-3.4.rhaos4.14.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "1:1.4.0-1.3.rhaos4.14.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.27.4-7.2.rhaos4.14.git082c52f.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.27.0-3.2.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:2.16.2-2.2.rhaos4.14.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:4.14.0-202404160939.p0.g7bee54d.assembly.stream.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:4.14.0-202404151639.p0.gd2acdd5.assembly.stream.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:4.14.0-202404151639.p0.g81558cc.assembly.stream.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:4.14.0-202404151639.p0.gf7b14a9.assembly.stream.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:4.14.0-202404151639.p0.g8926a29.assembly.stream.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:4.14.0-202404151639.p0.g607e2dd.assembly.stream.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "3:4.4.1-11.4.rhaos4.14.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "4:1.1.12-1.2.rhaos4.14.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "2:1.11.2-10.4.rhaos4.14.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:4.14.19-202403280926.p0.gc1f8861.assembly.4.14.19.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "414.92.202407300859-0", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat OpenShift Container Platform 4.15", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "1:1.29.1-20.3.rhaos4.15.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:0.20.0-1.1.rhaos4.15.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "1:1.4.0-1.2.rhaos4.15.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.28.4-8.rhaos4.15.git24f50b9.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:1.28.0-3.1.el8", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:2.16.2-2.1.rhaos4.15.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:4.15.0-202403211240.p0.g62c4d45.assembly.stream.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:4.15.0-202403211549.p0.g2e3cca1.assembly.stream.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "3:4.4.1-21.1.rhaos4.15.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "4:1.1.12-1.1.rhaos4.15.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "2:1.11.2-21.2.rhaos4.15.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:4.15.6-202403280951.p0.g94b1c2a.assembly.4.15.6.el9", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "415.92.202407191425-0", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat OpenStack Platform 16.2", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:3.3.23-16.el8ost", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } } ] } }, { "product_name": "Red Hat OpenStack Platform 17.1 for RHEL 8", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:0.2.1-3.el8ost", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat OpenStack Platform 17.1 for RHEL 9", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:3.4.26-8.el9ost", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "0:0.2.1-3.el9ost", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "RHODF-4.16-RHEL-9", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "v4.16.0-137", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "versions": [ { "version": "v4.16.0-38", "lessThan": "*", "versionType": "rpm", "status": "unaffected" } ], "defaultStatus": "affected" } } ] } }, { "product_name": "NBDE Tang Server", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } } ] } }, { "product_name": "OpenShift Developer Tools and Services", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } } ] } }, { "product_name": "OpenShift Pipelines", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } } ] } }, { "product_name": "OpenShift Serverless", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Ansible Automation Platform 1.2", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Ansible Automation Platform 2", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Certification for Red Hat Enterprise Linux 8", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Certification for Red Hat Enterprise Linux 9", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Enterprise Linux 7", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unknown" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unknown" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unknown" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unknown" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unknown" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unknown" } } ] } }, { "product_name": "Red Hat OpenShift Container Platform 4", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unknown" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Openshift Container Storage 4", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unknown" } } ] } }, { "product_name": "Red Hat OpenShift Dev Spaces", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat OpenShift GitOps", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat OpenShift on AWS", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat OpenShift Virtualization 4", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } } ] } }, { "product_name": "Red Hat OpenStack Platform 16.1", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unknown" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } } ] } }, { "product_name": "Red Hat OpenStack Platform 17.1", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } } ] } }, { "product_name": "Red Hat OpenStack Platform 18.0", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Service Interconnect 1", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } }, { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "affected" } } ] } }, { "product_name": "Red Hat Software Collections", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unaffected" } } ] } }, { "product_name": "Red Hat Storage 3", "version": { "version_data": [ { "version_value": "not down converted", "x_cve_json_5_version_data": { "defaultStatus": "unknown" } } ] } } ] } } ] } }, "references": { "reference_data": [ { "url": "https://access.redhat.com/errata/RHSA-2024:1462", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:1462" }, { "url": "https://access.redhat.com/errata/RHSA-2024:1468", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:1468" }, { "url": "https://access.redhat.com/errata/RHSA-2024:1472", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:1472" }, { "url": "https://access.redhat.com/errata/RHSA-2024:1501", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:1501" }, { "url": "https://access.redhat.com/errata/RHSA-2024:1502", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:1502" }, { "url": "https://access.redhat.com/errata/RHSA-2024:1561", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:1561" }, { "url": "https://access.redhat.com/errata/RHSA-2024:1563", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:1563" }, { "url": "https://access.redhat.com/errata/RHSA-2024:1566", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:1566" }, { "url": "https://access.redhat.com/errata/RHSA-2024:1567", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:1567" }, { "url": "https://access.redhat.com/errata/RHSA-2024:1574", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:1574" }, { "url": "https://access.redhat.com/errata/RHSA-2024:1640", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:1640" }, { "url": "https://access.redhat.com/errata/RHSA-2024:1644", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:1644" }, { "url": "https://access.redhat.com/errata/RHSA-2024:1646", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:1646" }, { "url": "https://access.redhat.com/errata/RHSA-2024:1763", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:1763" }, { "url": "https://access.redhat.com/errata/RHSA-2024:1897", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:1897" }, { "url": "https://access.redhat.com/errata/RHSA-2024:2562", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:2562" }, { "url": "https://access.redhat.com/errata/RHSA-2024:2568", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:2568" }, { "url": "https://access.redhat.com/errata/RHSA-2024:2569", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:2569" }, { "url": "https://access.redhat.com/errata/RHSA-2024:2729", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:2729" }, { "url": "https://access.redhat.com/errata/RHSA-2024:2730", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:2730" }, { "url": "https://access.redhat.com/errata/RHSA-2024:2767", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:2767" }, { "url": "https://access.redhat.com/errata/RHSA-2024:3265", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:3265" }, { "url": "https://access.redhat.com/errata/RHSA-2024:3352", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:3352" }, { "url": "https://access.redhat.com/errata/RHSA-2024:4146", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4146" }, { "url": "https://access.redhat.com/errata/RHSA-2024:4371", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4371" }, { "url": "https://access.redhat.com/errata/RHSA-2024:4378", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4378" }, { "url": "https://access.redhat.com/errata/RHSA-2024:4379", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4379" }, { "url": "https://access.redhat.com/errata/RHSA-2024:4502", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4502" }, { "url": "https://access.redhat.com/errata/RHSA-2024:4581", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4581" }, { "url": "https://access.redhat.com/errata/RHSA-2024:4591", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4591" }, { "url": "https://access.redhat.com/errata/RHSA-2024:4672", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4672" }, { "url": "https://access.redhat.com/errata/RHSA-2024:4699", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4699" }, { "url": "https://access.redhat.com/errata/RHSA-2024:4761", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4761" }, { "url": "https://access.redhat.com/errata/RHSA-2024:4762", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4762" }, { "url": "https://access.redhat.com/errata/RHSA-2024:4960", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:4960" }, { "url": "https://access.redhat.com/errata/RHSA-2024:5258", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:5258" }, { "url": "https://access.redhat.com/errata/RHSA-2024:5634", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:5634" }, { "url": "https://access.redhat.com/errata/RHSA-2024:7262", "refsource": "MISC", "name": "https://access.redhat.com/errata/RHSA-2024:7262" }, { "url": "https://access.redhat.com/security/cve/CVE-2024-1394", "refsource": "MISC", "name": "https://access.redhat.com/security/cve/CVE-2024-1394" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2262921", "refsource": "MISC", "name": "https://bugzilla.redhat.com/show_bug.cgi?id=2262921" }, { "url": "https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136", "refsource": "MISC", "name": "https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136" }, { "url": "https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6", "refsource": "MISC", "name": "https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6" }, { "url": "https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f", "refsource": "MISC", "name": "https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f" }, { "url": "https://pkg.go.dev/vuln/GO-2024-2660", "refsource": "MISC", "name": "https://pkg.go.dev/vuln/GO-2024-2660" }, { "url": "https://vuln.go.dev/ID/GO-2024-2660.json", "refsource": "MISC", "name": "https://vuln.go.dev/ID/GO-2024-2660.json" } ] }, "work_around": [ { "lang": "en", "value": "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability." } ], "credits": [ { "lang": "en", "value": "Red Hat would like to thank @qmuntal and @r3kumar for reporting this issue." } ], "impact": { "cvss": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" } ] } }