VDB
RHSA-2023%3A7681
RHSA-2023%3A7681
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the Node.js word-wrap module, where it is vulnerable to a denial of service caused by a Regular expression denial of service (ReDoS) issue in the result variable. By sending a specially crafted regex input, a remote attacker can cause a denial of service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/nmstate-console-plugin-rhel8@sha256:30e5d88e1ee44159c9fee0effefe84371bf7250bfde4f9886a9c090eb7559b17_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/nmstate-console-plugin-rhel8@sha256:30e5d88e1ee44159c9fee0effefe84371bf7250bfde4f9886a9c090eb7559b17_s390x, openshift4/nmstate-console-plugin-rhel8@sha256:30e5d88e1ee44159c9fee0effefe84371bf7250bfde4f9886a9c090eb7559b17_s390x, * |
| Red Hat | openshift4/ose-ptp-rhel9@sha256:eceb6a6bae7ee66f5f71e96589267ae57246671219c1b6b83eccd55294833853_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ptp-rhel9@sha256:eceb6a6bae7ee66f5f71e96589267ae57246671219c1b6b83eccd55294833853_arm64, openshift4/ose-ptp-rhel9@sha256:eceb6a6bae7ee66f5f71e96589267ae57246671219c1b6b83eccd55294833853_arm64, * |
| Red Hat | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:28beffa35d0ec4ba65fe811a307f9c6797636ed091acd3071f9d9d150f9399a5_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:28beffa35d0ec4ba65fe811a307f9c6797636ed091acd3071f9d9d150f9399a5_s390x, *, * |
| Red Hat | openshift4/nmstate-console-plugin-rhel8@sha256:30e5d88e1ee44159c9fee0effefe84371bf7250bfde4f9886a9c090eb7559b17_s390x as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/nmstate-console-plugin-rhel8@sha256:30e5d88e1ee44159c9fee0effefe84371bf7250bfde4f9886a9c090eb7559b17_s390x |
| Red Hat | openshift4/ose-node-feature-discovery@sha256:5c4de1d9e4fd455667b3956afc4f596815e9d0184f03c2458a9204cbcddedc96_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-node-feature-discovery@sha256:5c4de1d9e4fd455667b3956afc4f596815e9d0184f03c2458a9204cbcddedc96_arm64, openshift4/ose-node-feature-discovery@sha256:5c4de1d9e4fd455667b3956afc4f596815e9d0184f03c2458a9204cbcddedc96_arm64 |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:52e96810d73616e716d4fa4eb7de3d89c7665d728412da02b2904eaab9fcb898_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:52e96810d73616e716d4fa4eb7de3d89c7665d728412da02b2904eaab9fcb898_amd64, openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:52e96810d73616e716d4fa4eb7de3d89c7665d728412da02b2904eaab9fcb898_amd64 |
| Red Hat | openshift4/ose-cloud-event-proxy-rhel8@sha256:6c99194985bbea419b05ac7d849489bb43ce9c05007c529b0847812c90251982_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-cloud-event-proxy-rhel8@sha256:6c99194985bbea419b05ac7d849489bb43ce9c05007c529b0847812c90251982_amd64, * |
| Red Hat | openshift4/kubernetes-nmstate-rhel9-operator@sha256:9921943d6354f014e6c9d723b479d384da8827708fed076fe33924ab7b73125c_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/kubernetes-nmstate-rhel9-operator@sha256:9921943d6354f014e6c9d723b479d384da8827708fed076fe33924ab7b73125c_s390x, * |
| Red Hat | openshift4/ose-cluster-nfd-operator@sha256:21c88ebddda5d48811ae77054a1b67d319879a820a02188d5788efe2702c34ff_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-nfd-operator@sha256:21c88ebddda5d48811ae77054a1b67d319879a820a02188d5788efe2702c34ff_arm64, openshift4/ose-cluster-nfd-operator@sha256:21c88ebddda5d48811ae77054a1b67d319879a820a02188d5788efe2702c34ff_arm64, * |
| Red Hat | openshift4/frr-rhel9@sha256:0c554f40009dfcf82ca7a76e02b3d31734bfe80a58969e399e245f51766e0682_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/frr-rhel9@sha256:0c554f40009dfcf82ca7a76e02b3d31734bfe80a58969e399e245f51766e0682_arm64, openshift4/frr-rhel9@sha256:0c554f40009dfcf82ca7a76e02b3d31734bfe80a58969e399e245f51766e0682_arm64 |
| Red Hat | openshift4/ose-ptp-rhel9@sha256:333bc40f33486d63f2e1e66059f74ec0669fb9038a28da2842927aa2c20374a1_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ptp-rhel9@sha256:333bc40f33486d63f2e1e66059f74ec0669fb9038a28da2842927aa2c20374a1_amd64, openshift4/ose-ptp-rhel9@sha256:333bc40f33486d63f2e1e66059f74ec0669fb9038a28da2842927aa2c20374a1_amd64 |
| Red Hat | openshift4/kubernetes-nmstate-rhel9-operator@sha256:754fc25ea38236e982c00f3b7863cd5be5d37ee20cb458ee56da3d99ce255082_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/kubernetes-nmstate-rhel9-operator@sha256:754fc25ea38236e982c00f3b7863cd5be5d37ee20cb458ee56da3d99ce255082_arm64, openshift4/kubernetes-nmstate-rhel9-operator@sha256:754fc25ea38236e982c00f3b7863cd5be5d37ee20cb458ee56da3d99ce255082_arm64, * |
| Red Hat | openshift4/frr-rhel9@sha256:0c554f40009dfcf82ca7a76e02b3d31734bfe80a58969e399e245f51766e0682_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/frr-rhel9@sha256:0c554f40009dfcf82ca7a76e02b3d31734bfe80a58969e399e245f51766e0682_arm64, *, openshift4/frr-rhel9@sha256:0c554f40009dfcf82ca7a76e02b3d31734bfe80a58969e399e245f51766e0682_arm64 |
| Red Hat | openshift4/ose-cluster-nfd-operator@sha256:fdbe21487e0681691918408abc18d4239e66c047ff27df2c24e517681f074ee5_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-nfd-operator@sha256:fdbe21487e0681691918408abc18d4239e66c047ff27df2c24e517681f074ee5_ppc64le, * |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:52e96810d73616e716d4fa4eb7de3d89c7665d728412da02b2904eaab9fcb898_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:5127a266c5add99a099cfc8f71381285b5307a0a56edfd54c3178317fa6fc895_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:5127a266c5add99a099cfc8f71381285b5307a0a56edfd54c3178317fa6fc895_ppc64le, *, openshift4/ose-openshift-proxy-pull-test-rhel8@sha256:5127a266c5add99a099cfc8f71381285b5307a0a56edfd54c3178317fa6fc895_ppc64le |
| Red Hat | openshift4/ose-ptp-operator@sha256:8e6f68291b5a9c16cc5961d1e3c0a7e269a11e2c27514c19b6e595b024a2f1d6_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, * |
| Red Hat | openshift4/ose-node-feature-discovery@sha256:59d416d8d868a17a2489a4c5b9b38b70cf321b0ff21614bd500c29b55720d2fc_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-node-feature-discovery@sha256:59d416d8d868a17a2489a4c5b9b38b70cf321b0ff21614bd500c29b55720d2fc_ppc64le, openshift4/ose-node-feature-discovery@sha256:59d416d8d868a17a2489a4c5b9b38b70cf321b0ff21614bd500c29b55720d2fc_ppc64le |
| Red Hat | openshift4/ose-ptp-operator@sha256:eb75e8e5b0a5d6140d73809bc3e6096fd367bcf00fbfb11dc450f94606aa681a_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ptp-operator@sha256:eb75e8e5b0a5d6140d73809bc3e6096fd367bcf00fbfb11dc450f94606aa681a_amd64, *, * |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8@sha256:f95025c890f3ff4a1a81699bf6e67ff81c052abbe1d3d172a373cb23dae3a6f4_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-clusterresourceoverride-rhel8@sha256:f95025c890f3ff4a1a81699bf6e67ff81c052abbe1d3d172a373cb23dae3a6f4_arm64 |
…and 76 more
Timeline
- Dec 12, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:7681 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2216827 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2245180 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2251198 issue
- https://issues.redhat.com/browse/OCPBUGS-24302 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7681.json advisory
- https://access.redhat.com/security/cve/CVE-2023-26115 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-26115 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-26115 advisory
- https://access.redhat.com/security/cve/CVE-2023-45142 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-45142 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-45142 advisory
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr advisory
- https://access.redhat.com/security/cve/CVE-2023-47108 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-47108 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-47108 advisory
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-8pgv-569h-w5rw advisory