VDB
RHSA-2024%3A1210
RHSA-2024%3A1210
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure in OpenSSH 9.5 against keystroke timing attacks.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-pod-rhel9@sha256:156ee1e15e418c49f68d95b0e985f507b4d4cb33d15f0820e50d175526201212_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-pod-rhel9@sha256:156ee1e15e418c49f68d95b0e985f507b4d4cb33d15f0820e50d175526201212_s390x, * |
| Red Hat | openshift4/ose-olm-operator-controller-rhel8@sha256:2836e1aa877085d80f330e1e343f02e11c2d1418a563c5216ea51dd965d39c2d_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-olm-operator-controller-rhel8@sha256:2836e1aa877085d80f330e1e343f02e11c2d1418a563c5216ea51dd965d39c2d_amd64, * |
| Red Hat | openshift4/ose-network-interface-bond-cni-rhel8@sha256:1361319f0bb70674b698b384b14bb535515fad5d4d301dcad4862c699c8c5d19_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-network-interface-bond-cni-rhel8@sha256:1361319f0bb70674b698b384b14bb535515fad5d4d301dcad4862c699c8c5d19_s390x |
| Red Hat | openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator@sha256:06f7149274563045f4da817692ad3dc7d9c6f14c405faae1e3799ff6cba2948a_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator@sha256:06f7149274563045f4da817692ad3dc7d9c6f14c405faae1e3799ff6cba2948a_s390x, openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator@sha256:06f7149274563045f4da817692ad3dc7d9c6f14c405faae1e3799ff6cba2948a_s390x |
| Red Hat | openshift4/ose-container-networking-plugins-rhel8@sha256:fc685fd3de782ea04946ffb55d651dcea9fda82f6d367801319e7618e838a6f6_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-container-networking-plugins-rhel8@sha256:fc685fd3de782ea04946ffb55d651dcea9fda82f6d367801319e7618e838a6f6_s390x, openshift4/ose-container-networking-plugins-rhel8@sha256:fc685fd3de782ea04946ffb55d651dcea9fda82f6d367801319e7618e838a6f6_s390x |
| Red Hat | openshift4/ose-prometheus@sha256:fd1cdbe198c602c9072f74372a843a05aa7e9ede7a4616ffbe36005683148c49_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-prometheus@sha256:fd1cdbe198c602c9072f74372a843a05aa7e9ede7a4616ffbe36005683148c49_ppc64le |
| Red Hat | openshift4/ose-agent-installer-orchestrator-rhel8@sha256:3169fd9dda82bbd01f34824fb7369e4937686bda385fe7a6c4debf5d26b54d3c_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-agent-installer-orchestrator-rhel8@sha256:3169fd9dda82bbd01f34824fb7369e4937686bda385fe7a6c4debf5d26b54d3c_ppc64le |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:60301516888bd5760149c44e00e0444c88cf7ccc5eb458cabf710baf236a187d_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:60301516888bd5760149c44e00e0444c88cf7ccc5eb458cabf710baf236a187d_s390x |
| Red Hat | openshift4/ose-cluster-config-rhel9-operator@sha256:7825bfb4db9480cf88e91d80c42445f629c6a167dc44b5bfa82f004020a73900_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-config-rhel9-operator@sha256:7825bfb4db9480cf88e91d80c42445f629c6a167dc44b5bfa82f004020a73900_s390x, * |
| Red Hat | openshift4/ose-prometheus-rhel9-operator@sha256:94d8beacf06bb78fff52c434e1fefcf9eb9672d3eb86f4a8f241fa88f602e63f_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-prometheus-rhel9-operator@sha256:94d8beacf06bb78fff52c434e1fefcf9eb9672d3eb86f4a8f241fa88f602e63f_ppc64le |
| Red Hat | openshift4/ose-tests@sha256:d64cb842cf591d87530aa9f948094717285022309163079fd93465afaaccdf8b_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-tests@sha256:d64cb842cf591d87530aa9f948094717285022309163079fd93465afaaccdf8b_s390x, openshift4/ose-tests@sha256:d64cb842cf591d87530aa9f948094717285022309163079fd93465afaaccdf8b_s390x |
| Red Hat | openshift4/ose-kube-rbac-proxy@sha256:d8167776e4ac9b9a1169006a215d3d05ad757d26418dd93b4ce45fcde577e3ca_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-kube-rbac-proxy@sha256:d8167776e4ac9b9a1169006a215d3d05ad757d26418dd93b4ce45fcde577e3ca_arm64, openshift4/ose-kube-rbac-proxy@sha256:d8167776e4ac9b9a1169006a215d3d05ad757d26418dd93b4ce45fcde577e3ca_arm64 |
| Red Hat | openshift4/ose-thanos-rhel8@sha256:f2ab67e7058c7baeaa80c3293d1508f7a58f6a33bdd3c6b8cd2ae2bf7fe225e7_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-thanos-rhel8@sha256:f2ab67e7058c7baeaa80c3293d1508f7a58f6a33bdd3c6b8cd2ae2bf7fe225e7_ppc64le, openshift4/ose-thanos-rhel8@sha256:f2ab67e7058c7baeaa80c3293d1508f7a58f6a33bdd3c6b8cd2ae2bf7fe225e7_ppc64le |
| Red Hat | openshift4/ose-cluster-authentication-rhel9-operator@sha256:7fd2e996e345bd7821f55a551c95e78c804419c5c7b93e3683ceca850771ca63_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-authentication-rhel9-operator@sha256:7fd2e996e345bd7821f55a551c95e78c804419c5c7b93e3683ceca850771ca63_amd64, * |
| Red Hat | openshift4/ose-csi-driver-shared-resource-rhel9@sha256:27925a22c58b09971b61d64952ad8c9fe684349b1a617f5f280d5f22c9e8a2bf_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-csi-driver-shared-resource-rhel9@sha256:27925a22c58b09971b61d64952ad8c9fe684349b1a617f5f280d5f22c9e8a2bf_s390x, * |
| Red Hat | openshift4/ose-openshift-apiserver-rhel9@sha256:5b447c80652d965f461a64151b30d73fb59a6b1b2858fa1845f7ae0d2f1dfe7d_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-openshift-apiserver-rhel9@sha256:5b447c80652d965f461a64151b30d73fb59a6b1b2858fa1845f7ae0d2f1dfe7d_amd64, * |
| Red Hat | openshift4/ose-deployer@sha256:153e763fe57e522ce656d5e3d9bdd40d0a71a0e568cf84ab37e962270be05131_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-deployer@sha256:153e763fe57e522ce656d5e3d9bdd40d0a71a0e568cf84ab37e962270be05131_ppc64le, openshift4/ose-deployer@sha256:153e763fe57e522ce656d5e3d9bdd40d0a71a0e568cf84ab37e962270be05131_ppc64le |
| Red Hat | openshift4/network-tools-rhel8@sha256:a5ef5aeb7655ad1c0e733d45d6216919b6e10108ac6aacf3ebb5e4839af8f82b_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/network-tools-rhel8@sha256:a5ef5aeb7655ad1c0e733d45d6216919b6e10108ac6aacf3ebb5e4839af8f82b_ppc64le, openshift4/network-tools-rhel8@sha256:a5ef5aeb7655ad1c0e733d45d6216919b6e10108ac6aacf3ebb5e4839af8f82b_ppc64le |
| Red Hat | openshift4/ose-baremetal-runtimecfg-rhel9@sha256:3025882d3bbf738151012d0c4c51bcf234d9b947aff72525759a5a1334199b1d_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-baremetal-runtimecfg-rhel9@sha256:3025882d3bbf738151012d0c4c51bcf234d9b947aff72525759a5a1334199b1d_arm64, openshift4/ose-baremetal-runtimecfg-rhel9@sha256:3025882d3bbf738151012d0c4c51bcf234d9b947aff72525759a5a1334199b1d_arm64 |
| Red Hat | openshift4/ose-cli-artifacts@sha256:d376b7bbde5a22510a065417058e53fc69766756fac1449e29498dd2eb1c4d0a_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cli-artifacts@sha256:d376b7bbde5a22510a065417058e53fc69766756fac1449e29498dd2eb1c4d0a_ppc64le, * |
…and 1316 more
Timeline
- Mar 13, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Aug 4, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:1210 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://docs.openshift.com/container-platform/4.15/release_notes/ocp-4-15-release-notes.html advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2254210 issue
- https://issues.redhat.com/browse/OCPBUGS-23946 advisory
- https://issues.redhat.com/browse/OCPBUGS-24153 advisory
- https://issues.redhat.com/browse/OCPBUGS-26012 advisory
- https://issues.redhat.com/browse/OCPBUGS-26481 advisory
- https://issues.redhat.com/browse/OCPBUGS-26567 advisory
- https://issues.redhat.com/browse/OCPBUGS-27113 advisory
- https://issues.redhat.com/browse/OCPBUGS-27431 advisory
- https://issues.redhat.com/browse/OCPBUGS-27494 advisory
- https://issues.redhat.com/browse/OCPBUGS-28232 advisory
- https://issues.redhat.com/browse/OCPBUGS-28623 advisory
- https://issues.redhat.com/browse/OCPBUGS-28628 advisory
- https://issues.redhat.com/browse/OCPBUGS-28841 advisory
- https://issues.redhat.com/browse/OCPBUGS-28889 advisory
- https://issues.redhat.com/browse/OCPBUGS-28942 advisory
- https://issues.redhat.com/browse/OCPBUGS-29025 advisory
- https://issues.redhat.com/browse/OCPBUGS-29079 advisory
…and 57 more