VDB

RHSA-2023%3A7323

RHSA-2023%3A7323 PUBLISHED CVSS 7.5 HIGH

A flaw was found in Rekor. Versions prior to 1.1.1 may crash due to out of memory (OOM) conditions caused by reading archive metadata files into memory without checking their sizes first. Verification of a JAR file submitted to Rekor can cause an out of memory crash if files within the META-INF directory of the JAR are sufficiently large. Parsing an APK file submitted to Rekor can also cause an out of memory crash if the .SIGN or .PKGINFO files within the APK are sufficiently large. The OOM crash has been patched in Rekor version 1.1.1. There are no known workarounds.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-multus-cni@sha256:68398a39e04ff3fb8e2d4aeaa932608d5ea960e40b50f9524b02a73620112930_s390x as a component of Red Hat OpenShift Container Platform 4.13*, openshift4/ose-multus-cni@sha256:68398a39e04ff3fb8e2d4aeaa932608d5ea960e40b50f9524b02a73620112930_s390x, openshift4/ose-multus-cni@sha256:68398a39e04ff3fb8e2d4aeaa932608d5ea960e40b50f9524b02a73620112930_s390x
Red Hatopenshift4/ose-must-gather@sha256:295a3470eac41398d40b63dd28aec68b3e12bcb0f946c1ea510d8555b815ab7c_s390x as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-must-gather@sha256:295a3470eac41398d40b63dd28aec68b3e12bcb0f946c1ea510d8555b815ab7c_s390x, openshift4/ose-must-gather@sha256:295a3470eac41398d40b63dd28aec68b3e12bcb0f946c1ea510d8555b815ab7c_s390x, openshift4/ose-must-gather@sha256:295a3470eac41398d40b63dd28aec68b3e12bcb0f946c1ea510d8555b815ab7c_s390x
Red Hatopenshift4/ose-baremetal-runtimecfg-rhel8@sha256:a9222516d280e07dab0b3d58239353e2378ab812c2ca2b6e3707c0a65acd3999_amd64 as a component of Red Hat OpenShift Container Platform 4.13*, *, openshift4/ose-baremetal-runtimecfg-rhel8@sha256:a9222516d280e07dab0b3d58239353e2378ab812c2ca2b6e3707c0a65acd3999_amd64
Red Hatopenshift4/ose-sdn-rhel8@sha256:28c43ebfea7ea3dcf809b4130fc6d5d7ec34659363c29a290ed230d12f5b5939_s390x as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-sdn-rhel8@sha256:28c43ebfea7ea3dcf809b4130fc6d5d7ec34659363c29a290ed230d12f5b5939_s390x, openshift4/ose-sdn-rhel8@sha256:28c43ebfea7ea3dcf809b4130fc6d5d7ec34659363c29a290ed230d12f5b5939_s390x, openshift4/ose-sdn-rhel8@sha256:28c43ebfea7ea3dcf809b4130fc6d5d7ec34659363c29a290ed230d12f5b5939_s390x
Red Hatopenshift4/ose-multus-networkpolicy-rhel8@sha256:75b2a1c141d2ff694e265943847c052865d8962e4a1bf2485e2f22f9e9f3f2ff_amd64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-multus-networkpolicy-rhel8@sha256:75b2a1c141d2ff694e265943847c052865d8962e4a1bf2485e2f22f9e9f3f2ff_amd64, openshift4/ose-multus-networkpolicy-rhel8@sha256:75b2a1c141d2ff694e265943847c052865d8962e4a1bf2485e2f22f9e9f3f2ff_amd64, openshift4/ose-multus-networkpolicy-rhel8@sha256:75b2a1c141d2ff694e265943847c052865d8962e4a1bf2485e2f22f9e9f3f2ff_amd64
Red Hatopenshift4/ose-installer@sha256:6a9b718650895997597af6d1f668f103252eca316256095a07e9a2ce0e721e54_s390x as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-installer@sha256:6a9b718650895997597af6d1f668f103252eca316256095a07e9a2ce0e721e54_s390x, openshift4/ose-installer@sha256:6a9b718650895997597af6d1f668f103252eca316256095a07e9a2ce0e721e54_s390x, openshift4/ose-installer@sha256:6a9b718650895997597af6d1f668f103252eca316256095a07e9a2ce0e721e54_s390x
Red Hatopenshift4/ose-aws-pod-identity-webhook-rhel8@sha256:2c0340a78153869d9bfbb5a7c1361dce3e2f3b930d3edec2a939a3883b7d169a_arm64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:2c0340a78153869d9bfbb5a7c1361dce3e2f3b930d3edec2a939a3883b7d169a_arm64, *, *
Red Hatopenshift4/ose-installer@sha256:5b9939ad93888fb3ed399d4ab4da4479f453d9fdaf84077f91185e1af4870f2d_amd64 as a component of Red Hat OpenShift Container Platform 4.13*, openshift4/ose-installer@sha256:5b9939ad93888fb3ed399d4ab4da4479f453d9fdaf84077f91185e1af4870f2d_amd64, openshift4/ose-installer@sha256:5b9939ad93888fb3ed399d4ab4da4479f453d9fdaf84077f91185e1af4870f2d_amd64
Red Hatopenshift4/ose-cli-artifacts@sha256:fb7366fab235e7065a33865565c9adcc2da887ea021f76179099626a8a9d236a_ppc64le as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-cli-artifacts@sha256:fb7366fab235e7065a33865565c9adcc2da887ea021f76179099626a8a9d236a_ppc64le, openshift4/ose-cli-artifacts@sha256:fb7366fab235e7065a33865565c9adcc2da887ea021f76179099626a8a9d236a_ppc64le, openshift4/ose-cli-artifacts@sha256:fb7366fab235e7065a33865565c9adcc2da887ea021f76179099626a8a9d236a_ppc64le
Red Hatopenshift4/ose-machine-os-images-rhel8@sha256:d9125654a63c067818d7ea8ac0df3afe7308e26a18cf1806273696913b60aa01_ppc64le as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-machine-os-images-rhel8@sha256:d9125654a63c067818d7ea8ac0df3afe7308e26a18cf1806273696913b60aa01_ppc64le, openshift4/ose-machine-os-images-rhel8@sha256:d9125654a63c067818d7ea8ac0df3afe7308e26a18cf1806273696913b60aa01_ppc64le, openshift4/ose-machine-os-images-rhel8@sha256:d9125654a63c067818d7ea8ac0df3afe7308e26a18cf1806273696913b60aa01_ppc64le
Red Hatopenshift4/ose-cluster-capi-rhel8-operator@sha256:636654d9d984d9469157f3bfa46712717b8b0ba2c8ccd4979dba76aa6be01421_s390x as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-cluster-capi-rhel8-operator@sha256:636654d9d984d9469157f3bfa46712717b8b0ba2c8ccd4979dba76aa6be01421_s390x, *, *
Red Hatopenshift4/ose-agent-installer-api-server-rhel8@sha256:31d5312c00eaaaeabb0b7315a6e27ca18c111b9463e7d33533551c4364c62d63_ppc64le as a component of Red Hat OpenShift Container Platform 4.13*, *, *
Red Hatopenshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:f0f4728123571c0d4954a3fc9c2692cddb2f46fd7190f26342dfbce31a34b45a_ppc64le as a component of Red Hat OpenShift Container Platform 4.13*, *, *
Red Hatopenshift4/ose-cli@sha256:eee4ead8ed03ee8c771427b1d11f4420d30f3a06b1313f3660d4a8e2570670b2_ppc64le as a component of Red Hat OpenShift Container Platform 4.13*, openshift4/ose-cli@sha256:eee4ead8ed03ee8c771427b1d11f4420d30f3a06b1313f3660d4a8e2570670b2_ppc64le, *
Red Hatopenshift4/ose-ovn-kubernetes@sha256:5af7c01c6ca4a0a8ebe0fa43fc27cccd0f314ac7a4baa3c9f664e7ef588c60e0_arm64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-ovn-kubernetes@sha256:5af7c01c6ca4a0a8ebe0fa43fc27cccd0f314ac7a4baa3c9f664e7ef588c60e0_arm64, openshift4/ose-ovn-kubernetes@sha256:5af7c01c6ca4a0a8ebe0fa43fc27cccd0f314ac7a4baa3c9f664e7ef588c60e0_arm64, *
Red Hatopenshift4/ose-cluster-kube-apiserver-operator@sha256:f46b3f632fd2ca58d4e93295a6f1178be522fa5e1a5a9904778eaff672851344_amd64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-cluster-kube-apiserver-operator@sha256:f46b3f632fd2ca58d4e93295a6f1178be522fa5e1a5a9904778eaff672851344_amd64, openshift4/ose-cluster-kube-apiserver-operator@sha256:f46b3f632fd2ca58d4e93295a6f1178be522fa5e1a5a9904778eaff672851344_amd64, openshift4/ose-cluster-kube-apiserver-operator@sha256:f46b3f632fd2ca58d4e93295a6f1178be522fa5e1a5a9904778eaff672851344_amd64
Red Hatopenshift4/ovirt-csi-driver-rhel8@sha256:bccc1e1c15c97e1ae6330a524202c5a133fc326f208fef2b50b6d6acc6853f88_amd64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ovirt-csi-driver-rhel8@sha256:bccc1e1c15c97e1ae6330a524202c5a133fc326f208fef2b50b6d6acc6853f88_amd64, *, *
Red Hatopenshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:760a928c33db90d9ebdc94f71c6ad03b857057f069a9071f3866982ee3a300d5_s390x as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:760a928c33db90d9ebdc94f71c6ad03b857057f069a9071f3866982ee3a300d5_s390x, *, openshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:760a928c33db90d9ebdc94f71c6ad03b857057f069a9071f3866982ee3a300d5_s390x
Red Hatopenshift4/ose-ovn-kubernetes@sha256:4178bdff246766bb76ccf227157303e02be9aa99806aa6d80dd14332398d1b58_amd64 as a component of Red Hat OpenShift Container Platform 4.13*, openshift4/ose-ovn-kubernetes@sha256:4178bdff246766bb76ccf227157303e02be9aa99806aa6d80dd14332398d1b58_amd64, *
Red Hatopenshift4/ose-cluster-kube-apiserver-operator@sha256:16162b5f7846885866e9002782bcb0e808bd97e75376875d2ded96962b596e57_arm64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-cluster-kube-apiserver-operator@sha256:16162b5f7846885866e9002782bcb0e808bd97e75376875d2ded96962b596e57_arm64, *, openshift4/ose-cluster-kube-apiserver-operator@sha256:16162b5f7846885866e9002782bcb0e808bd97e75376875d2ded96962b596e57_arm64

…and 344 more

Timeline

  • Nov 21, 2023 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 21, 2026 CVE Updated

References

…and 9 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›