RHSA-2024:1444
ExploitedCISA KEV listedCRITICAL2024-03-20
Red Hat Security Advisory: nodejs:16 security update
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). Each row also links to the raw CSAF document stored on the Vulnetix artefact mirror. 12 are already weaponised in the wild: see the Exploited section.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
Red Hat Security Advisory: nodejs:16 security update
Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.0 for RHEL 9:security update
CVEs:CVE-2023-39325CVE-2023-44487
| Product | Status | Vendor | Package |
|---|---|---|---|
| kube-descheduler-operator/descheduler-rhel9@sha256:5d214d8b4827026bb783695f84175b5bd4b1c742b7003174e503cda258bcf0ec_s390x as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/descheduler-rhel9@sha256:5d214d8b4827026bb783695f84175b5bd4b1c742b7003174e503cda258bcf0ec_s390x as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/descheduler-rhel9@sha256:5d214d8b4827026bb783695f84175b5bd4b1c742b7003174e503cda258bcf0ec_s390x as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/descheduler-rhel9@sha256:5d214d8b4827026bb783695f84175b5bd4b1c742b7003174e503cda258bcf0ec_s390x as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/descheduler-rhel9@sha256:d6d747caebc5dc1bafe605c8790f0520c2bca6220c04b1660d44b3f44e5b67ce_amd64 as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/descheduler-rhel9@sha256:d6d747caebc5dc1bafe605c8790f0520c2bca6220c04b1660d44b3f44e5b67ce_amd64 as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/descheduler-rhel9@sha256:d6d747caebc5dc1bafe605c8790f0520c2bca6220c04b1660d44b3f44e5b67ce_amd64 as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/descheduler-rhel9@sha256:d6d747caebc5dc1bafe605c8790f0520c2bca6220c04b1660d44b3f44e5b67ce_amd64 as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/descheduler-rhel9@sha256:e5734b5dcb0d09412dada260881b6dca9b6c60d52666808ecdf71b86610b89bc_ppc64le as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/descheduler-rhel9@sha256:e5734b5dcb0d09412dada260881b6dca9b6c60d52666808ecdf71b86610b89bc_ppc64le as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/descheduler-rhel9@sha256:e5734b5dcb0d09412dada260881b6dca9b6c60d52666808ecdf71b86610b89bc_ppc64le as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/descheduler-rhel9@sha256:e5734b5dcb0d09412dada260881b6dca9b6c60d52666808ecdf71b86610b89bc_ppc64le as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/descheduler-rhel9@sha256:fae36bd3f00aa63a91e80723a656711f377f3bf654fa90189826dc060ac24656_arm64 as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/descheduler-rhel9@sha256:fae36bd3f00aa63a91e80723a656711f377f3bf654fa90189826dc060ac24656_arm64 as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/descheduler-rhel9@sha256:fae36bd3f00aa63a91e80723a656711f377f3bf654fa90189826dc060ac24656_arm64 as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/descheduler-rhel9@sha256:fae36bd3f00aa63a91e80723a656711f377f3bf654fa90189826dc060ac24656_arm64 as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/kube-descheduler-operator-bundle@sha256:ebcc836c3052bebfe7747c18b57ccc3a2870b5907e5ead894d87c8b2e33a12d9_amd64 as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/kube-descheduler-operator-bundle@sha256:ebcc836c3052bebfe7747c18b57ccc3a2870b5907e5ead894d87c8b2e33a12d9_amd64 as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/kube-descheduler-operator-bundle@sha256:ebcc836c3052bebfe7747c18b57ccc3a2870b5907e5ead894d87c8b2e33a12d9_amd64 as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/kube-descheduler-operator-bundle@sha256:ebcc836c3052bebfe7747c18b57ccc3a2870b5907e5ead894d87c8b2e33a12d9_amd64 as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:8a2f111ca16eae0fc2cd8a99261572e0693d3d062f67ec15b8e1006e30ba6bd3_ppc64le as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:8a2f111ca16eae0fc2cd8a99261572e0693d3d062f67ec15b8e1006e30ba6bd3_ppc64le as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:8a2f111ca16eae0fc2cd8a99261572e0693d3d062f67ec15b8e1006e30ba6bd3_ppc64le as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:8a2f111ca16eae0fc2cd8a99261572e0693d3d062f67ec15b8e1006e30ba6bd3_ppc64le as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:9ef3e097672d5d7ded62974a66477cecb04112ad541e3baeb94f6519eb5076a0_amd64 as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:9ef3e097672d5d7ded62974a66477cecb04112ad541e3baeb94f6519eb5076a0_amd64 as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:9ef3e097672d5d7ded62974a66477cecb04112ad541e3baeb94f6519eb5076a0_amd64 as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:9ef3e097672d5d7ded62974a66477cecb04112ad541e3baeb94f6519eb5076a0_amd64 as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:a08ab5ee072a334a4e1d730039ddac532d1da6ed30cb33e0a0c479005c5925e9_s390x as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:a08ab5ee072a334a4e1d730039ddac532d1da6ed30cb33e0a0c479005c5925e9_s390x as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:a08ab5ee072a334a4e1d730039ddac532d1da6ed30cb33e0a0c479005c5925e9_s390x as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:a08ab5ee072a334a4e1d730039ddac532d1da6ed30cb33e0a0c479005c5925e9_s390x as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:f22837b5a75ed8c7295440140f986b30cb951fce3b268bdac4defec28b663206_arm64 as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:f22837b5a75ed8c7295440140f986b30cb951fce3b268bdac4defec28b663206_arm64 as a component of KDO 5.0 for RHEL 9 |
| kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:f22837b5a75ed8c7295440140f986b30cb951fce3b268bdac4defec28b663206_arm64 as a component of KDO 5.0 for RHEL 9 | fixed | Red Hat | kube-descheduler-operator/kube-descheduler-rhel9-operator@sha256:f22837b5a75ed8c7295440140f986b30cb951fce3b268bdac4defec28b663206_arm64 as a component of KDO 5.0 for RHEL 9 |
Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift Builds 1.0.1
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.15.0 security, enhancement, & bug fix update
CVEs:CVE-2023-3462CVE-2023-5954CVE-2023-7104CVE-2023-26159CVE-2023-39321CVE-2023-39322CVE-2023-42282CVE-2023-43646CVE-2023-48631CVE-2023-48795CVE-2021-35937CVE-2021-35938CVE-2021-35939CVE-2023-24532CVE-2023-27043CVE-2023-28486CVE-2023-28487CVE-2023-29406CVE-2023-29409CVE-2023-39318CVE-2023-39319CVE-2023-39615CVE-2023-42465CVE-2023-43804CVE-2023-45803CVE-2023-46218CVE-2023-51385CVE-2023-5363CVE-2023-5981CVE-2024-0553CVE-2024-0567
Red Hat Security Advisory: OpenShift Container Platform 4.15.2 bug fix and security update
CVEs:CVE-2023-48795
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 security update
CVEs:CVE-2023-48795
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 security update
CVEs:CVE-2023-48795
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update
CVEs:CVE-2023-4043CVE-2023-4759CVE-2023-35887CVE-2023-48795CVE-2024-6162CVE-2024-41909
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update
Red Hat Security Advisory: openssh security update
Red Hat Security Advisory: buildah security update
CVEs:CVE-2023-48795
Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.5 security update
CVEs:CVE-2022-1471CVE-2022-40151CVE-2022-41966CVE-2022-44729CVE-2022-44730CVE-2023-0482CVE-2023-33201CVE-2023-3635CVE-2023-5072CVE-2023-6481CVE-2023-6717
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP3 security update
CVEs:CVE-2023-31122CVE-2023-46218CVE-2023-46219CVE-2023-5678CVE-2023-6710
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP3 security update
CVEs:CVE-2023-31122CVE-2023-39615CVE-2023-46218CVE-2023-46219CVE-2023-5678CVE-2023-6710CVE-2024-25062
Red Hat Security Advisory: edk2 security update
CVEs:CVE-2019-14560CVE-2023-3446CVE-2023-45230CVE-2023-45234GSD-2019-14560
Red Hat Security Advisory: ACS 4.4 enhancement and security update
CVEs:CVE-2019-25210CVE-2023-26144CVE-2024-26147CVE-2023-29406CVE-2023-49568CVE-2024-28180
Red Hat Security Advisory: Red Hat JBoss Web Server 6.0.1 release and security update
CVEs:CVE-2023-41080CVE-2023-46589CVE-2023-5678CVE-2024-24549
Red Hat Security Advisory: Red Hat JBoss Web Server 6.0.1 release and security update
Red Hat Security Advisory: OpenShift Container Platform 4.11.59 bug fix and security update
CVEs:CVE-2023-39325
Red Hat Security Advisory: OpenShift Container Platform 4.15.5 bug fix and security update
Red Hat Security Advisory: OpenShift Container Platform 4.13.38 bug fix and security update
CVEs:CVE-2023-39325
Red Hat Security Advisory: OpenShift Container Platform 4.14.18 bug fix and security update
Red Hat Security Advisory: OpenShift Container Platform 4.13.36 bug fix and security update
CVEs:CVE-2023-39325
Red Hat Security Advisory: OpenShift Container Platform 4.12.51 bug fix and security update
Red Hat Security Advisory: nodejs:18 security update
Red Hat Security Advisory: nodejs:18 security update
Red Hat Security Advisory: nodejs security update
CVEs:CVE-2024-22019
Red Hat Security Advisory: nodejs security update
CVEs:CVE-2024-22019
Red Hat Security Advisory: rh-nodejs14 security update
CVEs:CVE-2024-22019
Red Hat Security Advisory: expat security update
Red Hat Security Advisory: OpenShift Container Platform 4.13.38 packages and security update
Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.9.3 security and bug fix container updates
CVEs:CVE-2024-25620CVE-2024-26147CVE-2023-45142CVE-2023-47108
Red Hat Security Advisory: OpenShift Container Platform 4.12 low-latency extras security update
CVEs:CVE-2024-24786
Red Hat Security Advisory: OpenShift Container Platform 4.13.38 low-latency extras security update
CVEs:CVE-2024-24786
Red Hat Security Advisory: logging for Red Hat OpenShift security update
Red Hat Security Advisory: logging for Red Hat OpenShift security update
CVEs:CVE-2024-24786
Red Hat Security Advisory: logging for Red Hat OpenShift security update
CVEs:CVE-2024-24786
Red Hat Security Advisory: OpenShift Container Platform 4.14.18 packages and security update
Red Hat Security Advisory: OpenShift Container Platform 4.14.17 low-latency extras security update
CVEs:CVE-2024-24786
Red Hat Security Advisory: OpenShift Container Platform 4.15.3 low-latency extras security update
CVEs:CVE-2024-24786
Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.2.1 for RHEL 9
CVEs:CVE-2023-45287CVE-2023-39326
| Product | Status | Vendor | Package |
|---|---|---|---|
| openshift-secondary-scheduler-operator/secondary-scheduler-operator-bundle@sha256:959d5567fa57212bb1d707c6cd0b67d47af4431d7b567f81bcb7e19892fdde30_amd64 as a component of OSSO 1.2 for RHEL 9 | fixed | Red Hat | openshift-secondary-scheduler-operator/secondary-scheduler-operator-bundle@sha256:959d5567fa57212bb1d707c6cd0b67d47af4431d7b567f81bcb7e19892fdde30_amd64 as a component of OSSO 1.2 for RHEL 9 |
| openshift-secondary-scheduler-operator/secondary-scheduler-operator-bundle@sha256:959d5567fa57212bb1d707c6cd0b67d47af4431d7b567f81bcb7e19892fdde30_amd64 as a component of OSSO 1.2 for RHEL 9 | fixed | Red Hat | openshift-secondary-scheduler-operator/secondary-scheduler-operator-bundle@sha256:959d5567fa57212bb1d707c6cd0b67d47af4431d7b567f81bcb7e19892fdde30_amd64 as a component of OSSO 1.2 for RHEL 9 |
| openshift-secondary-scheduler-operator/secondary-scheduler-rhel9-operator@sha256:b085cface9e8b74c3a2588ac70ccb1ea75740065aa006d2993c7f7295154c9dc_amd64 as a component of OSSO 1.2 for RHEL 9 | fixed | Red Hat | openshift-secondary-scheduler-operator/secondary-scheduler-rhel9-operator@sha256:b085cface9e8b74c3a2588ac70ccb1ea75740065aa006d2993c7f7295154c9dc_amd64 as a component of OSSO 1.2 for RHEL 9 |
| openshift-secondary-scheduler-operator/secondary-scheduler-rhel9-operator@sha256:b085cface9e8b74c3a2588ac70ccb1ea75740065aa006d2993c7f7295154c9dc_amd64 as a component of OSSO 1.2 for RHEL 9 | fixed | Red Hat | openshift-secondary-scheduler-operator/secondary-scheduler-rhel9-operator@sha256:b085cface9e8b74c3a2588ac70ccb1ea75740065aa006d2993c7f7295154c9dc_amd64 as a component of OSSO 1.2 for RHEL 9 |
Red Hat Security Advisory: Service Telemetry Framework 1.5.4 security update
Red Hat Security Advisory: Red Hat OpenShift distributed tracing 3.1.1 operator/operand containers
CVEs:CVE-2023-39326
Red Hat Security Advisory: rhc-worker-script security update
Red Hat Security Advisory: skopeo security update
Red Hat Security Advisory: golang security update
Red Hat Security Advisory: ACS 4.3 enhancement and security update
Red Hat Security Advisory: Red Hat Data Grid 8.4.7 security update
Red Hat Security Advisory: OpenShift Container Platform 4.12.53 bug fix and security update
CVEs:CVE-2023-25165
Red Hat Security Advisory: ACS 4.3 enhancement and security update
Red Hat Security Advisory: Migration Toolkit for Applications security and bug fix update
CVEs:CVE-2022-1962
Red Hat Security Advisory: OpenShift Container Platform 4.15.3 bug fix and security update
CVEs:CVE-2024-25620
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.