RHSA-2023%3A5379 — Vulnetix

RHSA-2023%3A5379 PUBLISHED CVSS 7.5 HIGH

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in node-semver package via the 'new Range' function. This issue could allow an attacker to pass untrusted malicious regex user data as a range, causing the service to excessively consume CPU depending upon the input size, resulting in a denial of service.

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Timeline

Sep 28, 2023 CVE Published
Apr 30, 2026 CVE Updated
May 1, 2026 Distribution Patch
May 1, 2026 Distribution Patch
May 1, 2026 Security Advisory
May 1, 2026 Security Advisory
May 1, 2026 Security Advisory

References

https://access.redhat.com/errata/RHSA-2023:5379 advisory
https://access.redhat.com/security/updates/classification/#important advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2216475 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2216827 issue
https://issues.redhat.com/browse/NETOBSERV-1009 advisory
https://issues.redhat.com/browse/NETOBSERV-1034 advisory
https://issues.redhat.com/browse/NETOBSERV-1056 advisory
https://issues.redhat.com/browse/NETOBSERV-1107 advisory
https://issues.redhat.com/browse/NETOBSERV-1119 advisory
https://issues.redhat.com/browse/NETOBSERV-1131 advisory
https://issues.redhat.com/browse/NETOBSERV-1137 advisory
https://issues.redhat.com/browse/NETOBSERV-1182 advisory
https://issues.redhat.com/browse/NETOBSERV-1196 advisory
https://issues.redhat.com/browse/NETOBSERV-1224 advisory
https://issues.redhat.com/browse/NETOBSERV-1242 advisory
https://issues.redhat.com/browse/NETOBSERV-1283 advisory
https://issues.redhat.com/browse/NETOBSERV-139 advisory
https://issues.redhat.com/browse/NETOBSERV-962 advisory
https://issues.redhat.com/browse/NETOBSERV-975 advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5379.json advisory

…and 8 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	network-observability/network-observability-operator-bundle@sha256:25dfc5ecfc1614d67a9768b8cebb58367cac16c5e541646bb2dc13d75c705bdd_amd64 as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-operator-bundle@sha256:25dfc5ecfc1614d67a9768b8cebb58367cac16c5e541646bb2dc13d75c705bdd_amd64
Red Hat	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:6e22bcf4ce8ce50501fb2101205940e072ec2ffb7037f487c8b81a527cfc9d5a_amd64 as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:6e22bcf4ce8ce50501fb2101205940e072ec2ffb7037f487c8b81a527cfc9d5a_amd64
Red Hat	network-observability/network-observability-ebpf-agent-rhel9@sha256:301e4df92311d658a96dae2d3ff02a2ada999de89545ef96c4ec651faf54b25f_arm64 as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-ebpf-agent-rhel9@sha256:301e4df92311d658a96dae2d3ff02a2ada999de89545ef96c4ec651faf54b25f_arm64
Red Hat	network-observability/network-observability-rhel9-operator@sha256:632512065b6c3261f599a43bb9a52354bade428ddc7047f123866b8c5b09940b_arm64 as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-rhel9-operator@sha256:632512065b6c3261f599a43bb9a52354bade428ddc7047f123866b8c5b09940b_arm64
Red Hat	network-observability/network-observability-operator-bundle@sha256:e24584ac071694868f26d429505241662c0afd625fdaac6f1b9fabba52060a26_s390x as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-operator-bundle@sha256:e24584ac071694868f26d429505241662c0afd625fdaac6f1b9fabba52060a26_s390x
Red Hat	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b58f7999d572ec7e5acef3af3d97f1ee8e20e393502df9971b8a0b0bbe886dee_ppc64le as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b58f7999d572ec7e5acef3af3d97f1ee8e20e393502df9971b8a0b0bbe886dee_ppc64le
Red Hat	network-observability/network-observability-rhel9-operator@sha256:83a93f8a7ce0baf98dac07bce26e9340be70966fa8d45132c36be38c5338237f_s390x as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-rhel9-operator@sha256:83a93f8a7ce0baf98dac07bce26e9340be70966fa8d45132c36be38c5338237f_s390x
Red Hat	network-observability/network-observability-ebpf-agent-rhel9@sha256:79ca8ed3d7436c87c5b7bce35da7b9aba47d8ce9367988e5b169fd46c2d816a5_amd64 as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-ebpf-agent-rhel9@sha256:79ca8ed3d7436c87c5b7bce35da7b9aba47d8ce9367988e5b169fd46c2d816a5_amd64
Red Hat	network-observability/network-observability-console-plugin-rhel9@sha256:0211283244126419a203cbca952135abd4f44dde06071344dc77400b9a868e61_arm64 as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-console-plugin-rhel9@sha256:0211283244126419a203cbca952135abd4f44dde06071344dc77400b9a868e61_arm64
Red Hat	network-observability/network-observability-console-plugin-rhel9@sha256:5359d3c92203cfa3eeda959c96677526e8b3cefde46f59d0548379840e3e35e6_ppc64le as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-console-plugin-rhel9@sha256:5359d3c92203cfa3eeda959c96677526e8b3cefde46f59d0548379840e3e35e6_ppc64le
Red Hat	network-observability/network-observability-console-plugin-rhel9@sha256:a4b5cfad89aeff1cc0798caa932b59444c39b06f04d41846859476530f669ad9_amd64 as a component of NETOBSERV 1.4 for RHEL 9	*
Red Hat	network-observability/network-observability-rhel9-operator@sha256:0ba541a7141826d6d6f2755add1fd0487ded4a0db34d74733d590d137dcf0da1_amd64 as a component of NETOBSERV 1.4 for RHEL 9	*
Red Hat	network-observability/network-observability-console-plugin-rhel9@sha256:adf7cff9e8861773f73e5d30940f25565474233029837c4d55a979a1fa926582_s390x as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-console-plugin-rhel9@sha256:adf7cff9e8861773f73e5d30940f25565474233029837c4d55a979a1fa926582_s390x
Red Hat	network-observability/network-observability-operator-bundle@sha256:0932d209dbfe7d611e4d2362f0ffc7c17757670b80b691c3fcd7472859ac8128_arm64 as a component of NETOBSERV 1.4 for RHEL 9	*
Red Hat	network-observability/network-observability-ebpf-agent-rhel9@sha256:5353df15da0a204e5672dfee4f95e6ad17cadb033f8ac827904d50ce01e01a5a_s390x as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-ebpf-agent-rhel9@sha256:5353df15da0a204e5672dfee4f95e6ad17cadb033f8ac827904d50ce01e01a5a_s390x
Red Hat	network-observability/network-observability-ebpf-agent-rhel9@sha256:ffb45ad2a13c481c9ce6d29795c3b9182e5fe45d2ae2d48bbcfd8058e2aa3319_ppc64le as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-ebpf-agent-rhel9@sha256:ffb45ad2a13c481c9ce6d29795c3b9182e5fe45d2ae2d48bbcfd8058e2aa3319_ppc64le
Red Hat	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:10d863f938182620abf90b0ce533121e78f240166eee1bb62fd8134c126c88fd_s390x as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:10d863f938182620abf90b0ce533121e78f240166eee1bb62fd8134c126c88fd_s390x
Red Hat	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:05e733ec54543d5f675ee1f6f27f644a90c9ab30f9678266921cd1c14a9554c7_arm64 as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:05e733ec54543d5f675ee1f6f27f644a90c9ab30f9678266921cd1c14a9554c7_arm64
Red Hat	network-observability/network-observability-rhel9-operator@sha256:f766d0fd8688450dbddd31a7d761800e59b1ad681bda11e2ed26efe7403e8ec0_ppc64le as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-rhel9-operator@sha256:f766d0fd8688450dbddd31a7d761800e59b1ad681bda11e2ed26efe7403e8ec0_ppc64le
Red Hat	network-observability/network-observability-operator-bundle@sha256:78c28048adcd4b2df279ba3bb33dc8082d60430fb121e686d1d2774615c0454f_ppc64le as a component of NETOBSERV 1.4 for RHEL 9	network-observability/network-observability-operator-bundle@sha256:78c28048adcd4b2df279ba3bb33dc8082d60430fb121e686d1d2774615c0454f_ppc64le