VDB

RHSA-2024%3A2869

RHSA-2024%3A2869 PUBLISHED CVSS 4.300000190734863 MEDIUM

A vulnerability was found in Jose due to improper handling of highly compressed data. This issue could allow an attacker to send a JWE containing compressed data that uses large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti.

Risk Scores

CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-cluster-autoscaler-operator@sha256:75d1b1020ac464315085fe8ba2dfff46ec2293213e575b79f7d9d1c3ec216481_s390x as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-cluster-autoscaler-operator@sha256:75d1b1020ac464315085fe8ba2dfff46ec2293213e575b79f7d9d1c3ec216481_s390x
Red Hatopenshift4/ose-machine-api-provider-gcp-rhel8@sha256:39cabceed2737aba6a4d50c0fab9be3fa1fbcba10974e669c79095156dd89c4e_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, *
Red Hatopenshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:037742bdb39d04a54a1c2c7bab0abd970c4808d5c4c63c6a619d57f8f12455ef_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:037742bdb39d04a54a1c2c7bab0abd970c4808d5c4c63c6a619d57f8f12455ef_s390x, openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:037742bdb39d04a54a1c2c7bab0abd970c4808d5c4c63c6a619d57f8f12455ef_s390x
Red Hatopenshift4/ose-machine-api-provider-azure-rhel8@sha256:ece717233dc1a5a2cb2891c01d7b4cbedd4e230c8aa30ba552251ccba8c4a0f0_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-machine-api-provider-azure-rhel8@sha256:ece717233dc1a5a2cb2891c01d7b4cbedd4e230c8aa30ba552251ccba8c4a0f0_amd64
Red Hatopenshift4/ose-cluster-image-registry-operator@sha256:afc588b6daa161150a515c1e0b46e9fe00f58c4d35297a0a0fb8a6e64977fdf0_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-cluster-image-registry-operator@sha256:afc588b6daa161150a515c1e0b46e9fe00f58c4d35297a0a0fb8a6e64977fdf0_s390x, *
Red Hatopenshift4/ose-console-operator@sha256:21668a87bd93e8492d4a4ebe2af90134bbe7e4de9dbc7aa36b3a33c792b599fc_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-console-operator@sha256:21668a87bd93e8492d4a4ebe2af90134bbe7e4de9dbc7aa36b3a33c792b599fc_arm64, openshift4/ose-console-operator@sha256:21668a87bd93e8492d4a4ebe2af90134bbe7e4de9dbc7aa36b3a33c792b599fc_arm64
Red Hatopenshift4/ose-gcp-cloud-controller-manager-rhel8@sha256:11a6c060203647f61723de3e34b14b003cbf8a6ac8b09fa4872a841873aefc27_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-gcp-cloud-controller-manager-rhel8@sha256:11a6c060203647f61723de3e34b14b003cbf8a6ac8b09fa4872a841873aefc27_arm64, *
Red Hatopenshift4/ose-prometheus-config-reloader@sha256:874b5119d955db6f3d6239b6f530f47459f04775b2a1ee6c631ae3c61d58465f_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-prometheus-config-reloader@sha256:874b5119d955db6f3d6239b6f530f47459f04775b2a1ee6c631ae3c61d58465f_ppc64le
Red Hatopenshift4/ose-cluster-openshift-controller-manager-operator@sha256:5764406c494760588df6a5c4f3b2244fc4182264f4e6429689d2e55d8180dc7c_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-cluster-openshift-controller-manager-operator@sha256:5764406c494760588df6a5c4f3b2244fc4182264f4e6429689d2e55d8180dc7c_ppc64le
Red Hatopenshift4/ose-prometheus@sha256:5ae1e5de86608dbe7afa4506d3b578678bf8f0783c5ac31825bb8520ff7bb1f2_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-prometheus@sha256:5ae1e5de86608dbe7afa4506d3b578678bf8f0783c5ac31825bb8520ff7bb1f2_amd64
Red Hatopenshift4/network-tools-rhel8@sha256:54f29617b9b0bbba1c74d58ca2b37f74e5dee2ccb45f25afe3643ee8971c2d71_s390x as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/network-tools-rhel8@sha256:54f29617b9b0bbba1c74d58ca2b37f74e5dee2ccb45f25afe3643ee8971c2d71_s390x
Red Hatopenshift4/ose-ovirt-machine-controllers-rhel8@sha256:fef96c365677ac44946934d090d7ea78589f628c92a48d7b7d09ceb30f8aa838_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-ovirt-machine-controllers-rhel8@sha256:fef96c365677ac44946934d090d7ea78589f628c92a48d7b7d09ceb30f8aa838_amd64, openshift4/ose-ovirt-machine-controllers-rhel8@sha256:fef96c365677ac44946934d090d7ea78589f628c92a48d7b7d09ceb30f8aa838_amd64
Red Hatopenshift4/ose-csi-external-resizer-rhel8@sha256:98c996e09001f26d97989108549a0497f6167df827e167477ed46d5e1797b42e_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-csi-external-resizer-rhel8@sha256:98c996e09001f26d97989108549a0497f6167df827e167477ed46d5e1797b42e_amd64
Red Hatopenshift4/ose-csi-external-provisioner-rhel8@sha256:56f4b97bf253810ead65a48ee766c8e13c6ffa74c2600f2946417ab1b06601e0_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-csi-external-provisioner-rhel8@sha256:56f4b97bf253810ead65a48ee766c8e13c6ffa74c2600f2946417ab1b06601e0_s390x, *
Red Hatopenshift4/ose-prometheus-operator-admission-webhook-rhel8@sha256:c6799c6c1e7d700b652ab11937afb3b8d9357ee005953db35ef7ee5f4bf72b99_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-prometheus-operator-admission-webhook-rhel8@sha256:c6799c6c1e7d700b652ab11937afb3b8d9357ee005953db35ef7ee5f4bf72b99_s390x, openshift4/ose-prometheus-operator-admission-webhook-rhel8@sha256:c6799c6c1e7d700b652ab11937afb3b8d9357ee005953db35ef7ee5f4bf72b99_s390x
Red Hatopenshift4/ose-ovn-kubernetes@sha256:bfe908e65769db9ceff3c24f31424683173d0c5b76fc98fa4c7251d7138358e3_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-ovn-kubernetes@sha256:bfe908e65769db9ceff3c24f31424683173d0c5b76fc98fa4c7251d7138358e3_arm64, openshift4/ose-ovn-kubernetes@sha256:bfe908e65769db9ceff3c24f31424683173d0c5b76fc98fa4c7251d7138358e3_arm64
Red Hatopenshift4/ose-agent-installer-orchestrator-rhel8@sha256:e0ac1dd7ab7af0d72b10f0440c88c12ae7ceb3aabf34def3c3f9cf75e0c814e1_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-agent-installer-orchestrator-rhel8@sha256:e0ac1dd7ab7af0d72b10f0440c88c12ae7ceb3aabf34def3c3f9cf75e0c814e1_ppc64le, openshift4/ose-agent-installer-orchestrator-rhel8@sha256:e0ac1dd7ab7af0d72b10f0440c88c12ae7ceb3aabf34def3c3f9cf75e0c814e1_ppc64le
Red Hatopenshift4/ose-apiserver-network-proxy-rhel8@sha256:569093741abe5438a0b29b9928dfbbda106e82953dde8cf3b8828014e6062c7c_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, *
Red Hatopenshift4/ose-cluster-update-keys@sha256:e1306752b052d00e945c73ed77ce7961820084a4130d636b0ceccc7b305103d9_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-cluster-update-keys@sha256:e1306752b052d00e945c73ed77ce7961820084a4130d636b0ceccc7b305103d9_amd64
Red Hatopenshift4/ose-console@sha256:d14faf1b3c89582a4e83e0f903881ec796a8a004c3c19e742c7e7699c2e6b675_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, *

…and 1302 more

Timeline

  • May 23, 2024 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 15, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›