VDB
RHBA-2024%3A1246
RHBA-2024%3A1246
PUBLISHED
CVSS 8.699999809265137 HIGH
A vulnerability was found in Moby due to an unprotected alternate channel within encrypted overlay networks. This issue could allow a malicious user to cause a denial of service by sending a specially crafted request to inject arbitrary Ethernet frames into the encrypted overlay network.
Risk Scores
CVSS 3.1
8.699999809265137
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | multicluster-engine/cluster-api-provider-kubevirt-rhel8@sha256:dbf6ba04552c6fef4bc6d07595daf2d2ce31d09ce7207c507bd7a098e292b672_amd64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | *, * |
| Red Hat | multicluster-engine/registration-rhel8@sha256:f67c52479a045609049644197783f85b287935b17dfe1fd006e1bf8343ab9de5_amd64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | multicluster-engine/registration-rhel8@sha256:f67c52479a045609049644197783f85b287935b17dfe1fd006e1bf8343ab9de5_amd64, * |
| Red Hat | multicluster-engine/cluster-api-provider-aws-rhel8@sha256:6e6dd4053a252c8bc691e7520b7ff05e98ad44a7ad7389fb29175090f7e1c9c6_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | multicluster-engine/cluster-api-provider-aws-rhel8@sha256:6e6dd4053a252c8bc691e7520b7ff05e98ad44a7ad7389fb29175090f7e1c9c6_ppc64le, * |
| Red Hat | multicluster-engine/cluster-api-provider-aws-rhel8@sha256:2aeaa43a341e8bcc7e659a171a76a8734b0c8cfc9d105f0f4138034f85525832_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | * |
| Red Hat | multicluster-engine/cluster-curator-controller-rhel8@sha256:6e15efbda784489d9e4688f8615521be58c039bb139efece9fb5855d2c9bf877_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | multicluster-engine/cluster-curator-controller-rhel8@sha256:6e15efbda784489d9e4688f8615521be58c039bb139efece9fb5855d2c9bf877_ppc64le |
| Red Hat | multicluster-engine/cluster-api-provider-agent-rhel8@sha256:0b0d42ee21918e45d63a5ed534331e42a4616963a2736e6a30592736f0941e4f_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | *, * |
| Red Hat | multicluster-engine/cluster-proxy-rhel8@sha256:c0d6b45d7eb19b0e33d382cd885e8a35af3201198410a0d2997975feb9673b4e_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | * |
| Red Hat | multicluster-engine/agent-service-rhel8@sha256:d0f872558d2ac8dca6a9ba292671dcd53834756e39043eb847a96c8bfa706677_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | *, multicluster-engine/agent-service-rhel8@sha256:d0f872558d2ac8dca6a9ba292671dcd53834756e39043eb847a96c8bfa706677_s390x |
| Red Hat | multicluster-engine/hive-rhel8@sha256:5e6de735111b775e8df1d6cb07945e143c618e5621f84ad374504d21470d22a3_amd64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | multicluster-engine/hive-rhel8@sha256:5e6de735111b775e8df1d6cb07945e143c618e5621f84ad374504d21470d22a3_amd64, * |
| Red Hat | multicluster-engine/cluster-image-set-controller-rhel8@sha256:1a9633400121be109c92598325d0aecc2aad1c651657513074894d2bf41a3ad0_arm64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | multicluster-engine/cluster-image-set-controller-rhel8@sha256:1a9633400121be109c92598325d0aecc2aad1c651657513074894d2bf41a3ad0_arm64 |
| Red Hat | multicluster-engine/addon-manager-rhel8@sha256:40d3711c6ff4339e3d204a4844b33a811c65acdc91def97e33e4af86aa989912_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | *, multicluster-engine/addon-manager-rhel8@sha256:40d3711c6ff4339e3d204a4844b33a811c65acdc91def97e33e4af86aa989912_s390x |
| Red Hat | multicluster-engine/addon-manager-rhel8@sha256:ba0158716e20f72cf32db2bd94f6fb90d8cabca3a397d28b193e6b683f0ff28b_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | *, multicluster-engine/addon-manager-rhel8@sha256:ba0158716e20f72cf32db2bd94f6fb90d8cabca3a397d28b193e6b683f0ff28b_ppc64le |
| Red Hat | multicluster-engine/multicluster-engine-managed-serviceaccount-rhel8@sha256:952a2e0c035a12d042a44b2b027a6807a97669e3b2f8ee9e14e9d99f2fe1f9cf_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | multicluster-engine/multicluster-engine-managed-serviceaccount-rhel8@sha256:952a2e0c035a12d042a44b2b027a6807a97669e3b2f8ee9e14e9d99f2fe1f9cf_ppc64le |
| Red Hat | multicluster-engine/multicluster-engine-hypershift-addon-rhel8-operator@sha256:bbf4c7da6bfdd1c0bfa1e2d6a46022ebd9a3e0ebecc07a2fea9d48e7e3ac5e11_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | *, multicluster-engine/multicluster-engine-hypershift-addon-rhel8-operator@sha256:bbf4c7da6bfdd1c0bfa1e2d6a46022ebd9a3e0ebecc07a2fea9d48e7e3ac5e11_ppc64le |
| Red Hat | multicluster-engine/registration-rhel8@sha256:01ce119be0c20179d2d3255e71801dd4b01c66af07ae3ad30791f37a27f3c1b2_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | multicluster-engine/registration-rhel8@sha256:01ce119be0c20179d2d3255e71801dd4b01c66af07ae3ad30791f37a27f3c1b2_s390x |
| Red Hat | multicluster-engine/cluster-api-provider-aws-rhel8@sha256:412113d3820e53b5caaa3047995295fd94beff5cbb1d46cb4a0c60fcc2235d53_arm64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | *, * |
| Red Hat | multicluster-engine/managed-serviceaccount-rhel8@sha256:41fdd10396187e82847b0b5393f7028a2cc1092bde8e520b9734b154186fa372_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | multicluster-engine/managed-serviceaccount-rhel8@sha256:41fdd10396187e82847b0b5393f7028a2cc1092bde8e520b9734b154186fa372_s390x |
| Red Hat | multicluster-engine/hypershift-addon-rhel8-operator@sha256:b4d25300111bc1f09ef2f0538e3a453c2be0ef7dcfdb731dbf64ad64eba41e62_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | multicluster-engine/hypershift-addon-rhel8-operator@sha256:b4d25300111bc1f09ef2f0538e3a453c2be0ef7dcfdb731dbf64ad64eba41e62_s390x |
| Red Hat | multicluster-engine/provider-credential-controller-rhel8@sha256:d244a0f5222b0c70aeef398a38f9dd41145a44266809ae824c6ae7e3845dafef_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | multicluster-engine/provider-credential-controller-rhel8@sha256:d244a0f5222b0c70aeef398a38f9dd41145a44266809ae824c6ae7e3845dafef_ppc64le |
| Red Hat | multicluster-engine/assisted-installer-reporter-rhel8@sha256:ed81406ef743c04d911e2c7f8263703543349c40a8bc736b4f24bda671ddd6b1_arm64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8 | multicluster-engine/assisted-installer-reporter-rhel8@sha256:ed81406ef743c04d911e2c7f8263703543349c40a8bc736b4f24bda671ddd6b1_arm64, * |
…and 308 more
Timeline
- Mar 11, 2024 CVE Published
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHBA-2024:1246 advisory
- https://issues.redhat.com/browse/ACM-10236 advisory
- https://issues.redhat.com/browse/ACM-10263 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhba-2024_1246.json advisory
- https://access.redhat.com/security/cve/CVE-2023-28840 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2184683 issue
- https://www.cve.org/CVERecord?id=CVE-2023-28840 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-28840 advisory
- https://github.com/moby/moby/security/advisories/GHSA-232p-vwff-86mp advisory
- https://access.redhat.com/security/cve/CVE-2023-28841 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2184685 issue
- https://www.cve.org/CVERecord?id=CVE-2023-28841 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-28841 advisory
- https://github.com/moby/libnetwork/blob/d9fae4c73daf76c3b0f77e14b45b8bf612ba764d/drivers/overlay/encryption.go#L205-L207 advisory
- https://github.com/moby/moby/issues/43382 advisory
- https://github.com/moby/moby/pull/45118 advisory
- https://github.com/moby/moby/security/advisories/GHSA-33pg-m6jh-5237 advisory
- https://access.redhat.com/security/cve/CVE-2023-28842 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2184688 issue
- https://www.cve.org/CVERecord?id=CVE-2023-28842 advisory
…and 2 more