VDB
RHSA-2023%3A4341
RHSA-2023%3A4341
PUBLISHED
CVSS 7.5 HIGH
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in node-semver package via the 'new Range' function. This issue could allow an attacker to pass untrusted malicious regex user data as a range, causing the service to excessively consume CPU depending upon the input size, resulting in a denial of service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/loki-rhel8-operator@sha256:2b0f8aff7372bb80de5dee22455041afc6514238088adeb643ee3890d6ec0a4d_s390x as a component of RHOL 5.7 for RHEL 8 | * |
| Red Hat | openshift-logging/lokistack-gateway-rhel8@sha256:375048d10fb7192713ca038f43d57e0b34010f7c5707344de7c0abe9b3e59616_ppc64le as a component of RHOL 5.7 for RHEL 8 | openshift-logging/lokistack-gateway-rhel8@sha256:375048d10fb7192713ca038f43d57e0b34010f7c5707344de7c0abe9b3e59616_ppc64le |
| Red Hat | openshift-logging/lokistack-gateway-rhel8@sha256:723e07a7914053df8edabda59d00662f51b41b1f6d3138773100d4a7c2dfd43c_s390x as a component of RHOL 5.7 for RHEL 8 | openshift-logging/lokistack-gateway-rhel8@sha256:723e07a7914053df8edabda59d00662f51b41b1f6d3138773100d4a7c2dfd43c_s390x |
| Red Hat | openshift-logging/opa-openshift-rhel8@sha256:9893a02da55a768baa6e70cd79dacc5cfb41a8b0624f9c5722a8f5faf842627a_arm64 as a component of RHOL 5.7 for RHEL 8 | openshift-logging/opa-openshift-rhel8@sha256:9893a02da55a768baa6e70cd79dacc5cfb41a8b0624f9c5722a8f5faf842627a_arm64 |
| Red Hat | openshift-logging/logging-loki-rhel8@sha256:2cd86e00137e4fa3ac2857c9f71766c43f514265e583f2efb34afda01f4f148c_s390x as a component of RHOL 5.7 for RHEL 8 | * |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:5bb8f176d903c84ed9d07d21d80a5640c15d7e34d0aff8635f62db039602c64f_amd64 as a component of RHOL 5.7 for RHEL 8 | * |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:44ba718456214efb36904719c4843c82449ccb18696925c7571324b4eb4a1c4c_amd64 as a component of RHOL 5.7 for RHEL 8 | * |
| Red Hat | openshift-logging/logging-loki-rhel8@sha256:d39a1cbbdc527136f4019717320fc2bf5de546e8f1155127b116c55cf066a61e_arm64 as a component of RHOL 5.7 for RHEL 8 | openshift-logging/logging-loki-rhel8@sha256:d39a1cbbdc527136f4019717320fc2bf5de546e8f1155127b116c55cf066a61e_arm64 |
| Red Hat | openshift-logging/loki-operator-bundle@sha256:c8c3190680b643c4825b186270d4acfa0cc6ae86f90842dc23b6bad6766f8367_amd64 as a component of RHOL 5.7 for RHEL 8 | openshift-logging/loki-operator-bundle@sha256:c8c3190680b643c4825b186270d4acfa0cc6ae86f90842dc23b6bad6766f8367_amd64 |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:7123433d58b6579455cc263f19c85b63ea951d89f66e2b733bac98a9b7ceac4b_ppc64le as a component of RHOL 5.7 for RHEL 8 | openshift-logging/kibana6-rhel8@sha256:7123433d58b6579455cc263f19c85b63ea951d89f66e2b733bac98a9b7ceac4b_ppc64le |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:5575edf75617e0bd07aa97490cffd26f076aa0bcd82c3274538ab45d51e00225_s390x as a component of RHOL 5.7 for RHEL 8 | openshift-logging/elasticsearch-rhel8-operator@sha256:5575edf75617e0bd07aa97490cffd26f076aa0bcd82c3274538ab45d51e00225_s390x |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:f2d5044bc2af0ec3e78732ae8785d217e80ff18332fca0629ca06c7d481a0d9a_amd64 as a component of RHOL 5.7 for RHEL 8 | openshift-logging/elasticsearch6-rhel8@sha256:f2d5044bc2af0ec3e78732ae8785d217e80ff18332fca0629ca06c7d481a0d9a_amd64 |
| Red Hat | openshift-logging/logging-loki-rhel8@sha256:0375fb8d4343d67fff498cc1d70ea60a2f3bdec1b02462916a252c1d096232f6_amd64 as a component of RHOL 5.7 for RHEL 8 | openshift-logging/logging-loki-rhel8@sha256:0375fb8d4343d67fff498cc1d70ea60a2f3bdec1b02462916a252c1d096232f6_amd64 |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:4fdca7719007c06b5b749a4c89f80f6c9056150f9e60e00933c2c0ee1b7b6441_ppc64le as a component of RHOL 5.7 for RHEL 8 | openshift-logging/elasticsearch6-rhel8@sha256:4fdca7719007c06b5b749a4c89f80f6c9056150f9e60e00933c2c0ee1b7b6441_ppc64le |
| Red Hat | openshift-logging/vector-rhel8@sha256:d6ad099e497eaad1d8dc0f2d160e1869df48c39c3f38ff4e9254799249bc96ab_arm64 as a component of RHOL 5.7 for RHEL 8 | * |
| Red Hat | openshift-logging/vector-rhel8@sha256:dcd90c4fb7fa7dcaed3a27b1e80d7215bab65cde107d58fd8cd54957323f9ea7_ppc64le as a component of RHOL 5.7 for RHEL 8 | openshift-logging/vector-rhel8@sha256:dcd90c4fb7fa7dcaed3a27b1e80d7215bab65cde107d58fd8cd54957323f9ea7_ppc64le |
| Red Hat | openshift-logging/logging-view-plugin-rhel8@sha256:caaf5d6ce2c02b38ede741333d43b8e316a10dd18c2501bfd4cc404bd8029372_arm64 as a component of RHOL 5.7 for RHEL 8 | * |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:832579acb9582f50578a47750fe74b6e872422239aba5277173c6a0bdef51a04_s390x as a component of RHOL 5.7 for RHEL 8 | openshift-logging/logging-curator5-rhel8@sha256:832579acb9582f50578a47750fe74b6e872422239aba5277173c6a0bdef51a04_s390x |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:e0c2fee54eac82bb2db9458c66f5989d1ece106028facc0bf7630cdb10ce22d9_arm64 as a component of RHOL 5.7 for RHEL 8 | * |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:7af0fa05193b2f75a270c16355bcce6d2117183d59f5ed4d040d5a8e7d40e610_arm64 as a component of RHOL 5.7 for RHEL 8 | openshift-logging/elasticsearch6-rhel8@sha256:7af0fa05193b2f75a270c16355bcce6d2117183d59f5ed4d040d5a8e7d40e610_arm64 |
…and 43 more
Timeline
- Aug 2, 2023 CVE Published
- Apr 30, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2023:4341 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2164736 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2216475 issue
- https://issues.redhat.com/browse/LOG-2701 advisory
- https://issues.redhat.com/browse/LOG-3880 advisory
- https://issues.redhat.com/browse/LOG-4015 advisory
- https://issues.redhat.com/browse/LOG-4073 advisory
- https://issues.redhat.com/browse/LOG-4237 advisory
- https://issues.redhat.com/browse/LOG-4242 advisory
- https://issues.redhat.com/browse/LOG-4275 advisory
- https://issues.redhat.com/browse/LOG-4302 advisory
- https://issues.redhat.com/browse/LOG-4361 advisory
- https://issues.redhat.com/browse/LOG-4368 advisory
- https://issues.redhat.com/browse/LOG-4389 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4341.json advisory
- https://access.redhat.com/security/cve/CVE-2022-25883 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-25883 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-25883 advisory
- https://github.com/advisories/GHSA-c2qf-rxjj-qqgw advisory
…and 5 more