VDB
RHSA-2020%3A5364
RHSA-2020%3A5364
PUBLISHED
CVSS 7.5 HIGH
An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker could use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/dpdk-base-rhel8@sha256:5469123407735ca1efa36204ca058cac61cf20c0ba36ad85f93e266a0e32e4eb_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/dpdk-base-rhel8@sha256:5469123407735ca1efa36204ca058cac61cf20c0ba36ad85f93e266a0e32e4eb_amd64 |
| Red Hat | openshift4/cnf-tests-rhel8@sha256:94278f913832813b9c13858e787225bd3509f1119154e3bcb3526b8fe7afcd4e_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/cnf-tests-rhel8@sha256:94278f913832813b9c13858e787225bd3509f1119154e3bcb3526b8fe7afcd4e_amd64 |
| Red Hat | openshift4/performance-addon-operator-bundle-registry-container-rhel8@sha256:f801ddf5f7660f498f9f4b50ae09ec46e76a1d162b4b83b5b24249b9ce5377a1_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/performance-addon-operator-bundle-registry-container-rhel8@sha256:f801ddf5f7660f498f9f4b50ae09ec46e76a1d162b4b83b5b24249b9ce5377a1_amd64 |
| Red Hat | openshift4/performance-addon-rhel8-operator@sha256:61174281eafbb4d66cd2e18465a58b28315305a1c8ef666259de75d1a4e700f6_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/performance-addon-rhel8-operator@sha256:61174281eafbb4d66cd2e18465a58b28315305a1c8ef666259de75d1a4e700f6_amd64 |
| Red Hat | openshift4/performance-addon-operator-must-gather-rhel8@sha256:83faec56cf606b2a6fb7d05bbd2d9d24379c7543b985ec1666eba8cec37f960e_amd64 as a component of Red Hat OpenShift Container Platform 4.7 | openshift4/performance-addon-operator-must-gather-rhel8@sha256:83faec56cf606b2a6fb7d05bbd2d9d24379c7543b985ec1666eba8cec37f960e_amd64 |
Timeline
- Feb 24, 2021 CVE Published
- Apr 30, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2020:5364 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1902111 issue
- https://issues.redhat.com/browse/CNF-802 advisory
- https://issues.redhat.com/browse/CNF-854 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2020_5364.json advisory
- https://access.redhat.com/security/cve/CVE-2020-27813 advisory
- https://www.cve.org/CVERecord?id=CVE-2020-27813 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-27813 advisory
- https://github.com/gorilla/websocket/security/advisories/GHSA-jf24-p9p9-4rjh advisory