VDB
RHSA-2024%3A2944
RHSA-2024%3A2944
PUBLISHED
CVSS 7.5 HIGH
There's an input validation flaw in golang.org/x/crypto's readCipherPacket() function. An unauthenticated attacker who sends an empty plaintext packet to a program linked with golang.org/x/crypto/ssh could cause a panic, potentially leading to denial of service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | amq7/amq-broker-init-rhel8@sha256:3bd3ed2acad8c5792c7222254c8ef09c2eeb4dcfd3e96622fe98f50ce094ca3e_ppc64le as a component of Middleware Containers for OpenShift | *, *, amq7/amq-broker-init-rhel8@sha256:3bd3ed2acad8c5792c7222254c8ef09c2eeb4dcfd3e96622fe98f50ce094ca3e_ppc64le |
| Red Hat | amq7/amq-broker-init-rhel8@sha256:de1724d437174eefb20ed7dd8981a05607c55cfe8d6ea6667df94fdfdefe6ead_arm64 as a component of Middleware Containers for OpenShift | amq7/amq-broker-init-rhel8@sha256:de1724d437174eefb20ed7dd8981a05607c55cfe8d6ea6667df94fdfdefe6ead_arm64, *, * |
| Red Hat | amq7/amq-broker-rhel8-operator@sha256:a840f54acec50b424b1c4a8d984230777bf042fb98b526d213cbb5b3df023435_ppc64le as a component of Middleware Containers for OpenShift | amq7/amq-broker-rhel8-operator@sha256:a840f54acec50b424b1c4a8d984230777bf042fb98b526d213cbb5b3df023435_ppc64le, amq7/amq-broker-rhel8-operator@sha256:a840f54acec50b424b1c4a8d984230777bf042fb98b526d213cbb5b3df023435_ppc64le, amq7/amq-broker-rhel8-operator@sha256:a840f54acec50b424b1c4a8d984230777bf042fb98b526d213cbb5b3df023435_ppc64le |
| Red Hat | amq7/amq-broker-rhel8@sha256:b2aa89fb6eb23d41b1101ef2080a628a51d2a0949395e921247be302ff0e9778_ppc64le as a component of Middleware Containers for OpenShift | amq7/amq-broker-rhel8@sha256:b2aa89fb6eb23d41b1101ef2080a628a51d2a0949395e921247be302ff0e9778_ppc64le, amq7/amq-broker-rhel8@sha256:b2aa89fb6eb23d41b1101ef2080a628a51d2a0949395e921247be302ff0e9778_ppc64le, * |
| Red Hat | amq7/amq-broker-init-rhel8@sha256:e3c7913dc5a441fc38f35081cd405425ec3f4d299d77890db9d57b042f459852_s390x as a component of Middleware Containers for OpenShift | amq7/amq-broker-init-rhel8@sha256:e3c7913dc5a441fc38f35081cd405425ec3f4d299d77890db9d57b042f459852_s390x, *, * |
| Red Hat | amq7/amq-broker-init-rhel8@sha256:de1724d437174eefb20ed7dd8981a05607c55cfe8d6ea6667df94fdfdefe6ead_arm64 as a component of Middleware Containers for OpenShift | amq7/amq-broker-init-rhel8@sha256:de1724d437174eefb20ed7dd8981a05607c55cfe8d6ea6667df94fdfdefe6ead_arm64, amq7/amq-broker-init-rhel8@sha256:de1724d437174eefb20ed7dd8981a05607c55cfe8d6ea6667df94fdfdefe6ead_arm64, amq7/amq-broker-init-rhel8@sha256:de1724d437174eefb20ed7dd8981a05607c55cfe8d6ea6667df94fdfdefe6ead_arm64 |
| Red Hat | amq7/amq-broker-init-rhel8@sha256:e3c7913dc5a441fc38f35081cd405425ec3f4d299d77890db9d57b042f459852_s390x as a component of Middleware Containers for OpenShift | amq7/amq-broker-init-rhel8@sha256:e3c7913dc5a441fc38f35081cd405425ec3f4d299d77890db9d57b042f459852_s390x, *, amq7/amq-broker-init-rhel8@sha256:e3c7913dc5a441fc38f35081cd405425ec3f4d299d77890db9d57b042f459852_s390x |
| Red Hat | amq7/amq-broker-rhel8-operator-bundle@sha256:22ba090595eb88cc56d69c759388310d477e50fd97a4c6fcf3e7eecd94df99f9_amd64 as a component of Middleware Containers for OpenShift | amq7/amq-broker-rhel8-operator-bundle@sha256:22ba090595eb88cc56d69c759388310d477e50fd97a4c6fcf3e7eecd94df99f9_amd64, amq7/amq-broker-rhel8-operator-bundle@sha256:22ba090595eb88cc56d69c759388310d477e50fd97a4c6fcf3e7eecd94df99f9_amd64, amq7/amq-broker-rhel8-operator-bundle@sha256:22ba090595eb88cc56d69c759388310d477e50fd97a4c6fcf3e7eecd94df99f9_amd64 |
| Red Hat | amq7/amq-broker-rhel8@sha256:cd306c06c811d5e5c3d1912dd2bf2d08c10e057f1d7c59cba8475e105dd72cf0_arm64 as a component of Middleware Containers for OpenShift | *, *, * |
| Red Hat | amq7/amq-broker-rhel8@sha256:cd306c06c811d5e5c3d1912dd2bf2d08c10e057f1d7c59cba8475e105dd72cf0_arm64 as a component of Middleware Containers for OpenShift | amq7/amq-broker-rhel8@sha256:cd306c06c811d5e5c3d1912dd2bf2d08c10e057f1d7c59cba8475e105dd72cf0_arm64, *, amq7/amq-broker-rhel8@sha256:cd306c06c811d5e5c3d1912dd2bf2d08c10e057f1d7c59cba8475e105dd72cf0_arm64 |
| Red Hat | amq7/amq-broker-rhel8-operator-bundle@sha256:22ba090595eb88cc56d69c759388310d477e50fd97a4c6fcf3e7eecd94df99f9_amd64 as a component of Middleware Containers for OpenShift | amq7/amq-broker-rhel8-operator-bundle@sha256:22ba090595eb88cc56d69c759388310d477e50fd97a4c6fcf3e7eecd94df99f9_amd64, amq7/amq-broker-rhel8-operator-bundle@sha256:22ba090595eb88cc56d69c759388310d477e50fd97a4c6fcf3e7eecd94df99f9_amd64, * |
| Red Hat | amq7/amq-broker-rhel8-operator@sha256:27deae2dfec99135f1dd3dcfffdaf6167e056e29aa481cb3f78ee36d407181b8_arm64 as a component of Middleware Containers for OpenShift | amq7/amq-broker-rhel8-operator@sha256:27deae2dfec99135f1dd3dcfffdaf6167e056e29aa481cb3f78ee36d407181b8_arm64, amq7/amq-broker-rhel8-operator@sha256:27deae2dfec99135f1dd3dcfffdaf6167e056e29aa481cb3f78ee36d407181b8_arm64, amq7/amq-broker-rhel8-operator@sha256:27deae2dfec99135f1dd3dcfffdaf6167e056e29aa481cb3f78ee36d407181b8_arm64 |
| Red Hat | amq7/amq-broker-rhel8-operator@sha256:a840f54acec50b424b1c4a8d984230777bf042fb98b526d213cbb5b3df023435_ppc64le as a component of Middleware Containers for OpenShift | *, amq7/amq-broker-rhel8-operator@sha256:a840f54acec50b424b1c4a8d984230777bf042fb98b526d213cbb5b3df023435_ppc64le, amq7/amq-broker-rhel8-operator@sha256:a840f54acec50b424b1c4a8d984230777bf042fb98b526d213cbb5b3df023435_ppc64le |
| Red Hat | amq7/amq-broker-rhel8-operator@sha256:7231e51c0f078cd742b12c52c6616f19e669909ebb2fb6e02292173a5def5fab_s390x as a component of Middleware Containers for OpenShift | *, *, amq7/amq-broker-rhel8-operator@sha256:7231e51c0f078cd742b12c52c6616f19e669909ebb2fb6e02292173a5def5fab_s390x |
| Red Hat | amq7/amq-broker-rhel8-operator@sha256:996d20078a6a4f98f220793bded0b1c7ad08df3a292f26be71e52070fc538367_amd64 as a component of Middleware Containers for OpenShift | amq7/amq-broker-rhel8-operator@sha256:996d20078a6a4f98f220793bded0b1c7ad08df3a292f26be71e52070fc538367_amd64, amq7/amq-broker-rhel8-operator@sha256:996d20078a6a4f98f220793bded0b1c7ad08df3a292f26be71e52070fc538367_amd64, * |
| Red Hat | amq7/amq-broker-rhel8@sha256:081c73ec804f236ff0d00d7495a6d1053d1b6161ae7d944c889fc2d1181caa3f_amd64 as a component of Middleware Containers for OpenShift | amq7/amq-broker-rhel8@sha256:081c73ec804f236ff0d00d7495a6d1053d1b6161ae7d944c889fc2d1181caa3f_amd64, *, * |
| Red Hat | amq7/amq-broker-rhel8@sha256:081c73ec804f236ff0d00d7495a6d1053d1b6161ae7d944c889fc2d1181caa3f_amd64 as a component of Middleware Containers for OpenShift | amq7/amq-broker-rhel8@sha256:081c73ec804f236ff0d00d7495a6d1053d1b6161ae7d944c889fc2d1181caa3f_amd64, amq7/amq-broker-rhel8@sha256:081c73ec804f236ff0d00d7495a6d1053d1b6161ae7d944c889fc2d1181caa3f_amd64, amq7/amq-broker-rhel8@sha256:081c73ec804f236ff0d00d7495a6d1053d1b6161ae7d944c889fc2d1181caa3f_amd64 |
| Red Hat | amq7/amq-broker-init-rhel8@sha256:3bd3ed2acad8c5792c7222254c8ef09c2eeb4dcfd3e96622fe98f50ce094ca3e_ppc64le as a component of Middleware Containers for OpenShift | amq7/amq-broker-init-rhel8@sha256:3bd3ed2acad8c5792c7222254c8ef09c2eeb4dcfd3e96622fe98f50ce094ca3e_ppc64le, amq7/amq-broker-init-rhel8@sha256:3bd3ed2acad8c5792c7222254c8ef09c2eeb4dcfd3e96622fe98f50ce094ca3e_ppc64le, amq7/amq-broker-init-rhel8@sha256:3bd3ed2acad8c5792c7222254c8ef09c2eeb4dcfd3e96622fe98f50ce094ca3e_ppc64le |
| Red Hat | amq7/amq-broker-init-rhel8@sha256:4755cc6d13566065f6fd0b9544001ece5e0424ddbff774420f5be9bbfe03ae9e_amd64 as a component of Middleware Containers for OpenShift | amq7/amq-broker-init-rhel8@sha256:4755cc6d13566065f6fd0b9544001ece5e0424ddbff774420f5be9bbfe03ae9e_amd64, amq7/amq-broker-init-rhel8@sha256:4755cc6d13566065f6fd0b9544001ece5e0424ddbff774420f5be9bbfe03ae9e_amd64, amq7/amq-broker-init-rhel8@sha256:4755cc6d13566065f6fd0b9544001ece5e0424ddbff774420f5be9bbfe03ae9e_amd64 |
| Red Hat | amq7/amq-broker-rhel8-operator@sha256:27deae2dfec99135f1dd3dcfffdaf6167e056e29aa481cb3f78ee36d407181b8_arm64 as a component of Middleware Containers for OpenShift | amq7/amq-broker-rhel8-operator@sha256:27deae2dfec99135f1dd3dcfffdaf6167e056e29aa481cb3f78ee36d407181b8_arm64, amq7/amq-broker-rhel8-operator@sha256:27deae2dfec99135f1dd3dcfffdaf6167e056e29aa481cb3f78ee36d407181b8_arm64, amq7/amq-broker-rhel8-operator@sha256:27deae2dfec99135f1dd3dcfffdaf6167e056e29aa481cb3f78ee36d407181b8_arm64 |
…and 6 more
Timeline
- May 21, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:2944 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/documentation/en-us/red_hat_amq_broker/ advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2030787 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2045880 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2113814 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2124669 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2132867 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2132868 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2132872 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2178358 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2178488 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2178492 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2184481 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2184482 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2184483 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2184484 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2196026 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2196027 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2196029 issue
…and 102 more