VDB
RHSA-2024%3A6779
RHSA-2024%3A6779
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in the NodeJS Elliptic package. When creating EDDSA signatures, the Elliptic package doesn't properly check the signature length, allowing zeros to be added or removed from the signature without invalidating it, which may result in confidentiality issues.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhacm2/config-policy-controller-rhel9@sha256:6d6fdfb38a74364055b292b1525e2c89401a4fae1681c53d5794597f8c3e8fe1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/config-policy-controller-rhel9@sha256:6d6fdfb38a74364055b292b1525e2c89401a4fae1681c53d5794597f8c3e8fe1_s390x, *, rhacm2/config-policy-controller-rhel9@sha256:6d6fdfb38a74364055b292b1525e2c89401a4fae1681c53d5794597f8c3e8fe1_s390x |
| Red Hat | rhacm2/console-rhel9@sha256:3e9395128c57fe949d6db22a375f7280f1029b2006f34756b5cf377d0a13e1c8_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/console-rhel9@sha256:3e9395128c57fe949d6db22a375f7280f1029b2006f34756b5cf377d0a13e1c8_ppc64le, rhacm2/console-rhel9@sha256:3e9395128c57fe949d6db22a375f7280f1029b2006f34756b5cf377d0a13e1c8_ppc64le, rhacm2/console-rhel9@sha256:3e9395128c57fe949d6db22a375f7280f1029b2006f34756b5cf377d0a13e1c8_ppc64le |
| Red Hat | rhacm2/acm-prometheus-rhel9@sha256:5f911ac816a984ec4d9648c6922db2b9c99b20c92c91a39f187ce44f87c3f267_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/acm-prometheus-rhel9@sha256:5f911ac816a984ec4d9648c6922db2b9c99b20c92c91a39f187ce44f87c3f267_ppc64le, rhacm2/acm-prometheus-rhel9@sha256:5f911ac816a984ec4d9648c6922db2b9c99b20c92c91a39f187ce44f87c3f267_ppc64le, rhacm2/acm-prometheus-rhel9@sha256:5f911ac816a984ec4d9648c6922db2b9c99b20c92c91a39f187ce44f87c3f267_ppc64le |
| Red Hat | rhacm2/acm-search-indexer-rhel9@sha256:20da02980fe604dba6698bf01fd5358c38284f35679899b9386566e410f2624f_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/acm-search-indexer-rhel9@sha256:20da02980fe604dba6698bf01fd5358c38284f35679899b9386566e410f2624f_amd64, *, rhacm2/acm-search-indexer-rhel9@sha256:20da02980fe604dba6698bf01fd5358c38284f35679899b9386566e410f2624f_amd64 |
| Red Hat | rhacm2/thanos-receive-controller-rhel9@sha256:1875cc04e984ac2f82d3a176a4845e9e2841e0c1ebbead1dc5e2fa824cb9f45c_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/thanos-receive-controller-rhel9@sha256:1875cc04e984ac2f82d3a176a4845e9e2841e0c1ebbead1dc5e2fa824cb9f45c_ppc64le, rhacm2/thanos-receive-controller-rhel9@sha256:1875cc04e984ac2f82d3a176a4845e9e2841e0c1ebbead1dc5e2fa824cb9f45c_ppc64le, rhacm2/thanos-receive-controller-rhel9@sha256:1875cc04e984ac2f82d3a176a4845e9e2841e0c1ebbead1dc5e2fa824cb9f45c_ppc64le |
| Red Hat | rhacm2/acm-search-v2-api-rhel9@sha256:94d6214e6dbe8fe6d22755d9713795ead06e435884c42bf3b1f2570cccae8bb5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/acm-search-v2-api-rhel9@sha256:94d6214e6dbe8fe6d22755d9713795ead06e435884c42bf3b1f2570cccae8bb5_ppc64le, *, rhacm2/acm-search-v2-api-rhel9@sha256:94d6214e6dbe8fe6d22755d9713795ead06e435884c42bf3b1f2570cccae8bb5_ppc64le |
| Red Hat | rhacm2/thanos-rhel9@sha256:cc479194822cdba100c04b3aa9e2a4af5d0cf1d3f836be7ce4e35a7418c46d1a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/thanos-rhel9@sha256:cc479194822cdba100c04b3aa9e2a4af5d0cf1d3f836be7ce4e35a7418c46d1a_amd64, rhacm2/thanos-rhel9@sha256:cc479194822cdba100c04b3aa9e2a4af5d0cf1d3f836be7ce4e35a7418c46d1a_amd64, rhacm2/thanos-rhel9@sha256:cc479194822cdba100c04b3aa9e2a4af5d0cf1d3f836be7ce4e35a7418c46d1a_amd64 |
| Red Hat | rhacm2/acm-search-v2-rhel9@sha256:ee26a72fbacd5b1229eb1d39534d4b08ea3dc3a8602ede5b9f11fd7224808046_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/acm-search-v2-rhel9@sha256:ee26a72fbacd5b1229eb1d39534d4b08ea3dc3a8602ede5b9f11fd7224808046_ppc64le, *, rhacm2/acm-search-v2-rhel9@sha256:ee26a72fbacd5b1229eb1d39534d4b08ea3dc3a8602ede5b9f11fd7224808046_ppc64le |
| Red Hat | rhacm2/observatorium-rhel9@sha256:fe6638970f3510cac22a44a6654be75538a90a5a18ac6db6565c5d91dd9d8b02_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/observatorium-rhel9@sha256:fe6638970f3510cac22a44a6654be75538a90a5a18ac6db6565c5d91dd9d8b02_amd64, rhacm2/observatorium-rhel9@sha256:fe6638970f3510cac22a44a6654be75538a90a5a18ac6db6565c5d91dd9d8b02_amd64, rhacm2/observatorium-rhel9@sha256:fe6638970f3510cac22a44a6654be75538a90a5a18ac6db6565c5d91dd9d8b02_amd64 |
| Red Hat | rhacm2/acm-prometheus-config-reloader-rhel9@sha256:a9814088c7f0587a24448e7831e633a5a5ba1a2e5a4ed5cc02b2fbb6b9c82ba1_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/acm-prometheus-config-reloader-rhel9@sha256:a9814088c7f0587a24448e7831e633a5a5ba1a2e5a4ed5cc02b2fbb6b9c82ba1_arm64, rhacm2/acm-prometheus-config-reloader-rhel9@sha256:a9814088c7f0587a24448e7831e633a5a5ba1a2e5a4ed5cc02b2fbb6b9c82ba1_arm64, * |
| Red Hat | rhacm2/multicloud-integrations-rhel9@sha256:25242695c20601ffa0281fc5dd7e5038672b60fd6b27537f07e11d08f6c929cb_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/multicloud-integrations-rhel9@sha256:25242695c20601ffa0281fc5dd7e5038672b60fd6b27537f07e11d08f6c929cb_s390x, rhacm2/multicloud-integrations-rhel9@sha256:25242695c20601ffa0281fc5dd7e5038672b60fd6b27537f07e11d08f6c929cb_s390x, * |
| Red Hat | rhacm2/acm-operator-bundle@sha256:4ca847344c88c008fc105eb8c9a3fb8ffed51e9e29d45aa67e110ca8a9efad52_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | *, *, * |
| Red Hat | rhacm2/console-rhel9@sha256:582e61715fc3c5ea8ca7522a55390d9863dc0b5a67e0d8d28a7c574750607100_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/console-rhel9@sha256:582e61715fc3c5ea8ca7522a55390d9863dc0b5a67e0d8d28a7c574750607100_arm64, rhacm2/console-rhel9@sha256:582e61715fc3c5ea8ca7522a55390d9863dc0b5a67e0d8d28a7c574750607100_arm64, rhacm2/console-rhel9@sha256:582e61715fc3c5ea8ca7522a55390d9863dc0b5a67e0d8d28a7c574750607100_arm64 |
| Red Hat | rhacm2/acm-cluster-permission-rhel9@sha256:cc2113e24fae6d8fb6cb541c46281b77bf7e397a835540486d421d4cc3fe6f59_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/acm-cluster-permission-rhel9@sha256:cc2113e24fae6d8fb6cb541c46281b77bf7e397a835540486d421d4cc3fe6f59_amd64, rhacm2/acm-cluster-permission-rhel9@sha256:cc2113e24fae6d8fb6cb541c46281b77bf7e397a835540486d421d4cc3fe6f59_amd64, rhacm2/acm-cluster-permission-rhel9@sha256:cc2113e24fae6d8fb6cb541c46281b77bf7e397a835540486d421d4cc3fe6f59_amd64 |
| Red Hat | rhacm2/multicluster-operators-subscription-rhel9@sha256:4db8aaf48d78a0fc120f1840e78777cb2276c5a9b3369a1efdef1e4171682231_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/multicluster-operators-subscription-rhel9@sha256:4db8aaf48d78a0fc120f1840e78777cb2276c5a9b3369a1efdef1e4171682231_amd64, rhacm2/multicluster-operators-subscription-rhel9@sha256:4db8aaf48d78a0fc120f1840e78777cb2276c5a9b3369a1efdef1e4171682231_amd64, rhacm2/multicluster-operators-subscription-rhel9@sha256:4db8aaf48d78a0fc120f1840e78777cb2276c5a9b3369a1efdef1e4171682231_amd64 |
| Red Hat | rhacm2/iam-policy-controller-rhel9@sha256:210392bde1c66278739163c98d58f5d622512a4b047b6fc5b67e576173ad1cc0_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | *, rhacm2/iam-policy-controller-rhel9@sha256:210392bde1c66278739163c98d58f5d622512a4b047b6fc5b67e576173ad1cc0_ppc64le, rhacm2/iam-policy-controller-rhel9@sha256:210392bde1c66278739163c98d58f5d622512a4b047b6fc5b67e576173ad1cc0_ppc64le |
| Red Hat | rhacm2/node-exporter-rhel9@sha256:1b7e4d0204b2604dc87fab6475ed8981c85ae8f8ebc8ebfd53c5d67163680c93_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | *, rhacm2/node-exporter-rhel9@sha256:1b7e4d0204b2604dc87fab6475ed8981c85ae8f8ebc8ebfd53c5d67163680c93_arm64, * |
| Red Hat | rhacm2/rbac-query-proxy-rhel9@sha256:8fcc1c6a8c9804199c2b447553bf28c926cc3f4d2a0b7585a53f88b0bad964d8_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | *, rhacm2/rbac-query-proxy-rhel9@sha256:8fcc1c6a8c9804199c2b447553bf28c926cc3f4d2a0b7585a53f88b0bad964d8_s390x, rhacm2/rbac-query-proxy-rhel9@sha256:8fcc1c6a8c9804199c2b447553bf28c926cc3f4d2a0b7585a53f88b0bad964d8_s390x |
| Red Hat | rhacm2/acm-grafana-rhel9@sha256:fc3dc12973da9599a9d688f78fff4f64fa870005a090867655cba652564dfe8b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/acm-grafana-rhel9@sha256:fc3dc12973da9599a9d688f78fff4f64fa870005a090867655cba652564dfe8b_s390x, *, rhacm2/acm-grafana-rhel9@sha256:fc3dc12973da9599a9d688f78fff4f64fa870005a090867655cba652564dfe8b_s390x |
| Red Hat | rhacm2/acm-volsync-addon-controller-rhel9@sha256:516f0528a25bda944e5639fb7d65b1bfdef6eb59d1d518269c7cc75e8609cc50_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/acm-volsync-addon-controller-rhel9@sha256:516f0528a25bda944e5639fb7d65b1bfdef6eb59d1d518269c7cc75e8609cc50_amd64, rhacm2/acm-volsync-addon-controller-rhel9@sha256:516f0528a25bda944e5639fb7d65b1bfdef6eb59d1d518269c7cc75e8609cc50_amd64, rhacm2/acm-volsync-addon-controller-rhel9@sha256:516f0528a25bda944e5639fb7d65b1bfdef6eb59d1d518269c7cc75e8609cc50_amd64 |
…and 155 more
Timeline
- Sep 18, 2024 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 29, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:6779 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2302458 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2302459 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2302460 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6779.json advisory
- https://access.redhat.com/security/cve/CVE-2024-42459 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-42459 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42459 advisory
- https://github.com/indutny/elliptic/pull/317 advisory
- https://access.redhat.com/security/cve/CVE-2024-42460 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-42460 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42460 advisory
- https://access.redhat.com/security/cve/CVE-2024-42461 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-42461 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42461 advisory
- https://github.com/advisories/GHSA-49q7-c7j4-3p7m advisory
- https://access.redhat.com/security/cve/CVE-2024-48949 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2317724 issue
- https://www.cve.org/CVERecord?id=CVE-2024-48949 advisory
…and 3 more