VDB
RHSA-2024%3A4699
RHSA-2024%3A4699
PUBLISHED
CVSS 5.900000095367432 MEDIUM
The dnspython stub resolver is vulnerable to a denial of service (DoS) risk if an attacker sends a malicious response forged with the correct address and port before a legitimate one arrives on the UDP port used by dnspython for the query. In such cases, dnspython could either switch to another resolver or abandon the query altogether, potentially leading to service denial for that resolution.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:ecaccfd0a4d3f77ef99f773f3eb2871e88c4475cd21f88c3b08de65d981a5415_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/driver-toolkit-rhel9@sha256:ecaccfd0a4d3f77ef99f773f3eb2871e88c4475cd21f88c3b08de65d981a5415_arm64 |
| Red Hat | openshift4/ose-openshift-apiserver-rhel9@sha256:bebb0cd840636d5842f25d072e53cb8d035c7e365ec180ce1dd886ec671b8605_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-openshift-apiserver-rhel9@sha256:bebb0cd840636d5842f25d072e53cb8d035c7e365ec180ce1dd886ec671b8605_amd64 |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel9@sha256:bbbb8eb3dd778ff6810285183a67269433ab438a2f1c04fe4e3769e107273fb6_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-agent-installer-node-agent-rhel9@sha256:bbbb8eb3dd778ff6810285183a67269433ab438a2f1c04fe4e3769e107273fb6_amd64 |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:3d1ddf83d574fad19230cb3106aca6cf53ed96d2984cd6c125de2ee67f069ee1_s390x as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-tests@sha256:6bb999803ae0303f272c8a1e7d613319d382e831a28409ba9e86daaa0a77a6bc_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-tests@sha256:6bb999803ae0303f272c8a1e7d613319d382e831a28409ba9e86daaa0a77a6bc_ppc64le |
| Red Hat | openshift4/ose-ibm-vpc-block-csi-driver-rhel9@sha256:ca2d7f1c708b1e558cbaf5952d26b62e6dc4d932d27949f493820865fc871543_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-ibm-vpc-block-csi-driver-rhel9@sha256:ca2d7f1c708b1e558cbaf5952d26b62e6dc4d932d27949f493820865fc871543_s390x |
| Red Hat | openshift4/ose-sdn-rhel9@sha256:3150a42c81df09c386dc1a455d6819f8aafd91d6fdbe1beb2099d84333065afa_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-sdn-rhel9@sha256:3150a42c81df09c386dc1a455d6819f8aafd91d6fdbe1beb2099d84333065afa_s390x |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel9@sha256:255936cb31c1aeb1cb7b1f93b5aa43ce5b7023f0a38d808a24972344a2c7b19f_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-agent-installer-node-agent-rhel9@sha256:255936cb31c1aeb1cb7b1f93b5aa43ce5b7023f0a38d808a24972344a2c7b19f_arm64 |
| Red Hat | openshift4/ose-deployer@sha256:45938b2b24c1a13f56498847aee35e6cc95e5901f0a8febcb6446e993b456342_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-deployer@sha256:45938b2b24c1a13f56498847aee35e6cc95e5901f0a8febcb6446e993b456342_arm64 |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:49ec9cd1831327ed5915d41cfc6a643aa17f1aa6b7e961213d40cb0389649cfd_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-cluster-ingress-rhel9-operator@sha256:3d71b84e504dc37bfedb11f152a0bb456d34fa8d18b121155f451426238603d2_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-installer-altinfra-rhel8@sha256:280c1f1f118bfe1c0f8dfdf1a9696f6c627fc0a99d9421b127f243b80e64ca14_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-installer-altinfra-rhel8@sha256:280c1f1f118bfe1c0f8dfdf1a9696f6c627fc0a99d9421b127f243b80e64ca14_s390x |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel9@sha256:b0c6fc83f98e85fad2f4cee8bef57692199e96fb93ac38d0c42f68bd816812b5_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-agent-installer-node-agent-rhel9@sha256:b0c6fc83f98e85fad2f4cee8bef57692199e96fb93ac38d0c42f68bd816812b5_s390x |
| Red Hat | openshift4/ose-cli-artifacts@sha256:d0c35e88f4d581cdce71be29b1613102d470d353c8899ce320d1f172cb473be0_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cli-artifacts@sha256:d0c35e88f4d581cdce71be29b1613102d470d353c8899ce320d1f172cb473be0_s390x |
| Red Hat | openshift4/ose-agent-installer-utils-rhel9@sha256:6f3fbc193bb17f28b0b4e75eb40f375c00793884920fa9a7b9677d77e60bcac7_s390x as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | rhcos@sha256:911e7b1c956e2b6528b104495b032c322c15745ed1453e94bb60fdaab968efbd_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | rhcos@sha256:911e7b1c956e2b6528b104495b032c322c15745ed1453e94bb60fdaab968efbd_ppc64le |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:84574ef689ba5108e5c5cd1788346929d28d1b7a8fe1ca0beab3fece1c49328a_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:84574ef689ba5108e5c5cd1788346929d28d1b7a8fe1ca0beab3fece1c49328a_s390x |
| Red Hat | openshift4/ose-cluster-monitoring-rhel9-operator@sha256:9a410cbf4e7a633802fea0be9b3ef3002b4bd084b2759221baf9830d888a22ef_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-monitoring-rhel9-operator@sha256:9a410cbf4e7a633802fea0be9b3ef3002b4bd084b2759221baf9830d888a22ef_s390x |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:dbd7a9ebae4efa2661d6812446e1bfefff2cde3cb2c9338c97ce7eb8a60be690_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/driver-toolkit-rhel9@sha256:dbd7a9ebae4efa2661d6812446e1bfefff2cde3cb2c9338c97ce7eb8a60be690_s390x |
| Red Hat | openshift4/ose-cluster-version-rhel9-operator@sha256:9c92922ab7392ac2e3c011d33c788ca92d1c33a14ba6bca3987cadbeec1a18e3_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-version-rhel9-operator@sha256:9c92922ab7392ac2e3c011d33c788ca92d1c33a14ba6bca3987cadbeec1a18e3_s390x |
…and 128 more
Timeline
- Jul 25, 2024 CVE Published
- Apr 25, 2026 CVE Updated
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:4699 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2262921 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2268273 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2274520 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2294000 issue
- https://issues.redhat.com/browse/OCPBUGS-30139 advisory
- https://issues.redhat.com/browse/OCPBUGS-34477 advisory
- https://issues.redhat.com/browse/OCPBUGS-34809 advisory
- https://issues.redhat.com/browse/OCPBUGS-35756 advisory
- https://issues.redhat.com/browse/OCPBUGS-35758 advisory
- https://issues.redhat.com/browse/OCPBUGS-35888 advisory
- https://issues.redhat.com/browse/OCPBUGS-36208 advisory
- https://issues.redhat.com/browse/OCPBUGS-36329 advisory
- https://issues.redhat.com/browse/OCPBUGS-36451 advisory
- https://issues.redhat.com/browse/OCPBUGS-36466 advisory
- https://issues.redhat.com/browse/OCPBUGS-36606 advisory
- https://issues.redhat.com/browse/OCPBUGS-36702 advisory
- https://issues.redhat.com/browse/OCPBUGS-36813 advisory
- https://issues.redhat.com/browse/OCPBUGS-36842 advisory
…and 26 more