VDB

RHSA-2024%3A4662

RHSA-2024%3A4662 PUBLISHED CVSS 5.900000095367432 MEDIUM

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure in OpenSSH 9.5 against keystroke timing attacks.

Risk Scores

CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Products

VendorProductVersions
Red Hatcontainer-native-virtualization/hco-bundle-registry-rhel9@sha256:be006b1a142e3aa28fad8b8e5d6b64e883d7570d5229fbe1456f3d7f46acc1d8_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/hco-bundle-registry-rhel9@sha256:be006b1a142e3aa28fad8b8e5d6b64e883d7570d5229fbe1456f3d7f46acc1d8_arm64, *
Red Hatcontainer-native-virtualization/kubevirt-apiserver-proxy-rhel9@sha256:5cdaf53ac49a128e0c7a5a9d04ec0913fa6b27268ff7d204a40b5d22b605fa22_amd64 as a component of CNV 4.15 for RHEL 9*
Red Hatcontainer-native-virtualization/mtq-lock-server-rhel9@sha256:88ae23e380e965d5178a51c83c3d991ef62bab112c6e7b60b1dec8d6973e7291_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/mtq-lock-server-rhel9@sha256:88ae23e380e965d5178a51c83c3d991ef62bab112c6e7b60b1dec8d6973e7291_amd64
Red Hatcontainer-native-virtualization/mtq-operator-rhel9@sha256:1b43c237f1f84d7d626c2e4f0733ad0bbc0533b7f48141587487fdccd199320a_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/mtq-operator-rhel9@sha256:1b43c237f1f84d7d626c2e4f0733ad0bbc0533b7f48141587487fdccd199320a_amd64
Red Hatcontainer-native-virtualization/bridge-marker-rhel9@sha256:0ab580d3e2ddb969296793ae6a3ad2c11f512bac76be56b6d9b041bc7c23f5f1_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/bridge-marker-rhel9@sha256:0ab580d3e2ddb969296793ae6a3ad2c11f512bac76be56b6d9b041bc7c23f5f1_arm64, container-native-virtualization/bridge-marker-rhel9@sha256:0ab580d3e2ddb969296793ae6a3ad2c11f512bac76be56b6d9b041bc7c23f5f1_arm64
Red Hatcontainer-native-virtualization/multus-dynamic-networks-rhel9@sha256:f4f6a025e678bcf40898070e923b54312401026b5fb5ee0e3157b4ba77ea8ba0_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/multus-dynamic-networks-rhel9@sha256:f4f6a025e678bcf40898070e923b54312401026b5fb5ee0e3157b4ba77ea8ba0_amd64, *
Red Hatcontainer-native-virtualization/hostpath-provisioner-rhel9@sha256:1e33504032b80835ed85348192e116aaf715a83252c1517a1784552d1f3fbfcc_arm64 as a component of CNV 4.15 for RHEL 9*, *
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9@sha256:a26e6791b3216362dabaebe671c9a8f3f2db141ef37721081d0f91eb3863d980_amd64 as a component of CNV 4.15 for RHEL 9*, container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9@sha256:a26e6791b3216362dabaebe671c9a8f3f2db141ef37721081d0f91eb3863d980_amd64
Red Hatcontainer-native-virtualization/virtio-win-rhel9@sha256:149a743a0390de583536c1a90b7ee9a7508d4d5e7ba810d29322b1f5e090bbe6_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/virtio-win-rhel9@sha256:149a743a0390de583536c1a90b7ee9a7508d4d5e7ba810d29322b1f5e090bbe6_arm64, container-native-virtualization/virtio-win-rhel9@sha256:149a743a0390de583536c1a90b7ee9a7508d4d5e7ba810d29322b1f5e090bbe6_arm64
Red Hatcontainer-native-virtualization/kubevirt-template-validator-rhel9@sha256:3a4471635e2cb8e629542ce9b3bb8a1b99127c5ee3cbe4371ffb45f18756ce25_arm64 as a component of CNV 4.15 for RHEL 9*
Red Hatcontainer-native-virtualization/virt-operator-rhel9@sha256:972bf70cbd4419020b8d60f93d6be584ef7c3aacd1b7012fe1a78a98e74c74eb_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/virt-operator-rhel9@sha256:972bf70cbd4419020b8d60f93d6be584ef7c3aacd1b7012fe1a78a98e74c74eb_arm64
Red Hatcontainer-native-virtualization/hostpath-csi-driver-rhel9@sha256:3a99bf810f46005cb1117f9525de10360fccc377e94cd2c18ffb8fcfb38a33fa_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/hostpath-csi-driver-rhel9@sha256:3a99bf810f46005cb1117f9525de10360fccc377e94cd2c18ffb8fcfb38a33fa_arm64
Red Hatcontainer-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:cef6f31f70998a11ad5c71dda3b92ff987b266b05cd29d36646629019bc0008c_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:cef6f31f70998a11ad5c71dda3b92ff987b266b05cd29d36646629019bc0008c_arm64
Red Hatcontainer-native-virtualization/ovs-cni-plugin-rhel9@sha256:534fbf91cc007b5fe808c39800ae213f9a9e8e7c826adb8fdef9a67135911d5d_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/ovs-cni-plugin-rhel9@sha256:534fbf91cc007b5fe808c39800ae213f9a9e8e7c826adb8fdef9a67135911d5d_arm64
Red Hatcontainer-native-virtualization/mtq-controller-rhel9@sha256:e61f791dfc2ff686e8df2284705775a346e5014c871e16057751101ec0c92fb0_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/mtq-controller-rhel9@sha256:e61f791dfc2ff686e8df2284705775a346e5014c871e16057751101ec0c92fb0_amd64
Red Hatcontainer-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:cef6f31f70998a11ad5c71dda3b92ff987b266b05cd29d36646629019bc0008c_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:cef6f31f70998a11ad5c71dda3b92ff987b266b05cd29d36646629019bc0008c_arm64, container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:cef6f31f70998a11ad5c71dda3b92ff987b266b05cd29d36646629019bc0008c_arm64
Red Hatcontainer-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:3b47a4a82964f736d5dd33446b80c01369127e1d19ca95097d8f773ae3049ed5_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:3b47a4a82964f736d5dd33446b80c01369127e1d19ca95097d8f773ae3049ed5_amd64, container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:3b47a4a82964f736d5dd33446b80c01369127e1d19ca95097d8f773ae3049ed5_amd64
Red Hatcontainer-native-virtualization/virt-cdi-operator-rhel9@sha256:944b9b937c90e585c354db73647d28f280d059a9a9764f00aee45e10df3ddf7c_amd64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/virt-cdi-operator-rhel9@sha256:944b9b937c90e585c354db73647d28f280d059a9a9764f00aee45e10df3ddf7c_amd64, container-native-virtualization/virt-cdi-operator-rhel9@sha256:944b9b937c90e585c354db73647d28f280d059a9a9764f00aee45e10df3ddf7c_amd64
Red Hatcontainer-native-virtualization/virt-cdi-cloner-rhel9@sha256:8dc08cf8ede1a927af619ed3a8ddf79c398458745d243dd966fd2ab80206b404_amd64 as a component of CNV 4.15 for RHEL 9*
Red Hatcontainer-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:2aaa5b8701d91a116e3d83fc481332e4d7af013b40333343003b49cecb0d0277_arm64 as a component of CNV 4.15 for RHEL 9container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:2aaa5b8701d91a116e3d83fc481332e4d7af013b40333343003b49cecb0d0277_arm64

…and 180 more

Timeline

  • Jul 18, 2024 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 11, 2026 CVE Updated

References

…and 4 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›