VDB
RHSA-2024%3A11037
RHSA-2024%3A11037
PUBLISHED
CVSS 8.199999809265137 HIGH
A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:6b821f84d5a2c230a0efbeaaa13c5f94db9d64e96dd398c96289725a5bf529d9_s390x as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:6b821f84d5a2c230a0efbeaaa13c5f94db9d64e96dd398c96289725a5bf529d9_s390x, openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:6b821f84d5a2c230a0efbeaaa13c5f94db9d64e96dd398c96289725a5bf529d9_s390x, openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:6b821f84d5a2c230a0efbeaaa13c5f94db9d64e96dd398c96289725a5bf529d9_s390x |
| Red Hat | openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:6dd8637c87008164d803f5ea338df987270e562bcf1d1323790670d8541f2339_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | *, *, * |
| Red Hat | openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:eca8464f39a05b5916d249c3e69c556dcbc83e10232739a9a13adc6043d06e30_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:eca8464f39a05b5916d249c3e69c556dcbc83e10232739a9a13adc6043d06e30_arm64, openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:eca8464f39a05b5916d249c3e69c556dcbc83e10232739a9a13adc6043d06e30_arm64, openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:eca8464f39a05b5916d249c3e69c556dcbc83e10232739a9a13adc6043d06e30_arm64 |
| Red Hat | openshift4/ose-sriov-network-webhook-rhel9@sha256:b1377cdbbd72a1888cca3bbe512fcf33ce87a072682dce3a5ae8354ae37da1a0_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-sriov-network-webhook-rhel9@sha256:b1377cdbbd72a1888cca3bbe512fcf33ce87a072682dce3a5ae8354ae37da1a0_amd64, openshift4/ose-sriov-network-webhook-rhel9@sha256:b1377cdbbd72a1888cca3bbe512fcf33ce87a072682dce3a5ae8354ae37da1a0_amd64, openshift4/ose-sriov-network-webhook-rhel9@sha256:b1377cdbbd72a1888cca3bbe512fcf33ce87a072682dce3a5ae8354ae37da1a0_amd64 |
| Red Hat | openshift4/ptp-must-gather-rhel9@sha256:88ce09aa2c27e2a2cb55aed9a2a17f75bce7529a132a068f88c6161ff78c12b2_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ptp-must-gather-rhel9@sha256:88ce09aa2c27e2a2cb55aed9a2a17f75bce7529a132a068f88c6161ff78c12b2_ppc64le, openshift4/ptp-must-gather-rhel9@sha256:88ce09aa2c27e2a2cb55aed9a2a17f75bce7529a132a068f88c6161ff78c12b2_ppc64le, openshift4/ptp-must-gather-rhel9@sha256:88ce09aa2c27e2a2cb55aed9a2a17f75bce7529a132a068f88c6161ff78c12b2_ppc64le |
| Red Hat | openshift4/sriov-cni-rhel9@sha256:e10f7e7d7e78a2c143fb9a934d3caacdbf6374dcc61e69f949c55417e286f5c0_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/sriov-cni-rhel9@sha256:e10f7e7d7e78a2c143fb9a934d3caacdbf6374dcc61e69f949c55417e286f5c0_amd64, openshift4/sriov-cni-rhel9@sha256:e10f7e7d7e78a2c143fb9a934d3caacdbf6374dcc61e69f949c55417e286f5c0_amd64, openshift4/sriov-cni-rhel9@sha256:e10f7e7d7e78a2c143fb9a934d3caacdbf6374dcc61e69f949c55417e286f5c0_amd64 |
| Red Hat | openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:b16efb981283a5dd5a4e7e9d9353e029cdb945b106452b7df9fcc6a7bd3eab1d_s390x as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:b16efb981283a5dd5a4e7e9d9353e029cdb945b106452b7df9fcc6a7bd3eab1d_s390x, openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:b16efb981283a5dd5a4e7e9d9353e029cdb945b106452b7df9fcc6a7bd3eab1d_s390x, openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:b16efb981283a5dd5a4e7e9d9353e029cdb945b106452b7df9fcc6a7bd3eab1d_s390x |
| Red Hat | openshift4/sriov-cni-rhel9@sha256:7150ef91e18ddecd1e0ba6abbd4c41b21612ff9a31e9081ba29207727d587ba3_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | *, *, openshift4/sriov-cni-rhel9@sha256:7150ef91e18ddecd1e0ba6abbd4c41b21612ff9a31e9081ba29207727d587ba3_arm64 |
| Red Hat | openshift4/ptp-must-gather-rhel9@sha256:88ce09aa2c27e2a2cb55aed9a2a17f75bce7529a132a068f88c6161ff78c12b2_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | *, *, * |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:3a2e3863b83128e095d8f8706017f5ceb04cdfef048bfbcca6e816942981938f_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | *, *, openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:3a2e3863b83128e095d8f8706017f5ceb04cdfef048bfbcca6e816942981938f_arm64 |
| Red Hat | openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:5e76e053d29519921c741ef450e27c53d726fabc1a5763c5abe21968256c39a9_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:5e76e053d29519921c741ef450e27c53d726fabc1a5763c5abe21968256c39a9_amd64, openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:5e76e053d29519921c741ef450e27c53d726fabc1a5763c5abe21968256c39a9_amd64, openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:5e76e053d29519921c741ef450e27c53d726fabc1a5763c5abe21968256c39a9_amd64 |
| Red Hat | openshift4/ose-egress-router-rhel9@sha256:31d6e70a33fd531c18efa81ed6da57d1c5e82a9f9fd59d263a339002ea919826_s390x as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-egress-router-rhel9@sha256:31d6e70a33fd531c18efa81ed6da57d1c5e82a9f9fd59d263a339002ea919826_s390x, openshift4/ose-egress-router-rhel9@sha256:31d6e70a33fd531c18efa81ed6da57d1c5e82a9f9fd59d263a339002ea919826_s390x, openshift4/ose-egress-router-rhel9@sha256:31d6e70a33fd531c18efa81ed6da57d1c5e82a9f9fd59d263a339002ea919826_s390x |
| Red Hat | openshift4/ose-dpu-rhel9-operator@sha256:7b64e48f7710b7de57a398fd1e3ed62a2c4527a3735db5e811da6c548ed4eef5_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | *, *, openshift4/ose-dpu-rhel9-operator@sha256:7b64e48f7710b7de57a398fd1e3ed62a2c4527a3735db5e811da6c548ed4eef5_ppc64le |
| Red Hat | openshift4/ose-secrets-store-csi-driver-rhel9@sha256:608007dcd2d140e17b325f2ef37f82dda924b673a2dfe36da1b1a3c2bd2333a2_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | *, openshift4/ose-secrets-store-csi-driver-rhel9@sha256:608007dcd2d140e17b325f2ef37f82dda924b673a2dfe36da1b1a3c2bd2333a2_ppc64le, openshift4/ose-secrets-store-csi-driver-rhel9@sha256:608007dcd2d140e17b325f2ef37f82dda924b673a2dfe36da1b1a3c2bd2333a2_ppc64le |
| Red Hat | openshift4/ose-ansible-rhel9-operator@sha256:52396641bc98267c3648d75248d317d7fbe5b019dd5762b3700fdc0cc5fae23d_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-ansible-rhel9-operator@sha256:52396641bc98267c3648d75248d317d7fbe5b019dd5762b3700fdc0cc5fae23d_ppc64le, openshift4/ose-ansible-rhel9-operator@sha256:52396641bc98267c3648d75248d317d7fbe5b019dd5762b3700fdc0cc5fae23d_ppc64le, openshift4/ose-ansible-rhel9-operator@sha256:52396641bc98267c3648d75248d317d7fbe5b019dd5762b3700fdc0cc5fae23d_ppc64le |
| Red Hat | openshift4/metallb-rhel9-operator@sha256:bfb27b24e0aebf6655b4ec37b2f28f22b09f4974d3898ca891dc088eebc6d6f1_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | *, *, * |
| Red Hat | openshift4/metallb-rhel9@sha256:41e911c64bdb2de0a4286cbad5b7cfb8b7a30a01b22ce11667e1baedf7c7ee87_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | *, *, * |
| Red Hat | openshift4/ose-ptp-rhel9@sha256:9ed6783adb29bd37001c2f08ebad91016c23bfa273054757cd1942ce4a0b7814_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-ptp-rhel9@sha256:9ed6783adb29bd37001c2f08ebad91016c23bfa273054757cd1942ce4a0b7814_arm64, *, * |
| Red Hat | openshift4/ose-ansible-rhel9-operator@sha256:8642effee8e9c033b956ad216a9a26f99e926078a5922312ab44458cad2a93f0_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | *, openshift4/ose-ansible-rhel9-operator@sha256:8642effee8e9c033b956ad216a9a26f99e926078a5922312ab44458cad2a93f0_arm64, openshift4/ose-ansible-rhel9-operator@sha256:8642effee8e9c033b956ad216a9a26f99e926078a5922312ab44458cad2a93f0_arm64 |
| Red Hat | openshift4/ose-dpu-cni-rhel9@sha256:7235fa1c34a9a4c692e4ca516cb765f9710fe47ded34ab2f9f98cc15a388aafc_s390x as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-dpu-cni-rhel9@sha256:7235fa1c34a9a4c692e4ca516cb765f9710fe47ded34ab2f9f98cc15a388aafc_s390x, openshift4/ose-dpu-cni-rhel9@sha256:7235fa1c34a9a4c692e4ca516cb765f9710fe47ded34ab2f9f98cc15a388aafc_s390x, openshift4/ose-dpu-cni-rhel9@sha256:7235fa1c34a9a4c692e4ca516cb765f9710fe47ded34ab2f9f98cc15a388aafc_s390x |
…and 353 more
Timeline
- Jun 17, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jul 25, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:11037 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2331720 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2333122 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2348366 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2348367 issue
- https://issues.redhat.com/browse/OCPBUGS-20159 advisory
- https://issues.redhat.com/browse/OCPBUGS-31059 advisory
- https://issues.redhat.com/browse/OCPBUGS-44354 advisory
- https://issues.redhat.com/browse/OCPBUGS-44879 advisory
- https://issues.redhat.com/browse/OCPBUGS-45095 advisory
- https://issues.redhat.com/browse/OCPBUGS-46419 advisory
- https://issues.redhat.com/browse/OCPBUGS-46439 advisory
- https://issues.redhat.com/browse/OCPBUGS-46446 advisory
- https://issues.redhat.com/browse/OCPBUGS-46566 advisory
- https://issues.redhat.com/browse/OCPBUGS-47512 advisory
- https://issues.redhat.com/browse/OCPBUGS-47731 advisory
- https://issues.redhat.com/browse/OCPBUGS-48384 advisory
- https://issues.redhat.com/browse/OCPBUGS-49658 advisory
- https://issues.redhat.com/browse/OCPBUGS-50496 advisory
…and 41 more