RHSA-2024%3A7179 — Vulnetix

RHSA-2024%3A7179 PUBLISHED CVSS 4.300000190734863 MEDIUM

A vulnerability was found in Jose due to improper handling of highly compressed data. This issue could allow an attacker to send a JWE containing compressed data that uses large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti.

Risk Scores

CVSS 3.1

4.300000190734863

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected Products

…and 1308 more

Timeline

Oct 2, 2024 CVE Published
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
May 15, 2026 CVE Updated

References

https://access.redhat.com/errata/RHSA-2024:7179 advisory
https://access.redhat.com/security/updates/classification/#moderate advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2268854 issue
https://issues.redhat.com/browse/OCPBUGS-35820 advisory
https://issues.redhat.com/browse/OCPBUGS-38003 advisory
https://issues.redhat.com/browse/OCPBUGS-38059 advisory
https://issues.redhat.com/browse/OCPBUGS-38537 advisory
https://issues.redhat.com/browse/OCPBUGS-39288 advisory
https://issues.redhat.com/browse/OCPBUGS-41245 advisory
https://issues.redhat.com/browse/OCPBUGS-41373 advisory
https://issues.redhat.com/browse/OCPBUGS-41913 advisory
https://issues.redhat.com/browse/OCPBUGS-42011 advisory
https://issues.redhat.com/browse/OCPBUGS-42020 advisory
https://issues.redhat.com/browse/OCPBUGS-42144 advisory
https://issues.redhat.com/browse/OCPBUGS-42171 advisory
https://issues.redhat.com/browse/OCPBUGS-42214 advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7179.json advisory
https://access.redhat.com/security/cve/CVE-2024-28180 advisory
https://www.cve.org/CVERecord?id=CVE-2024-28180 advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-28180 advisory

…and 1 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	openshift4/ose-insights-rhel9-operator@sha256:1cc22a2cbd2be4d6623a71e524995ea329388899ff793f81643d33fdefc84143_s390x as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-insights-rhel9-operator@sha256:1cc22a2cbd2be4d6623a71e524995ea329388899ff793f81643d33fdefc84143_s390x, *
Red Hat	openshift4/ose-console@sha256:aeb67a1eb7911993131300e0885f0c33678d5572ee7e31a4a894051d549a3d6f_arm64 as a component of Red Hat OpenShift Container Platform 4.15	,
Red Hat	openshift4/ose-cluster-olm-operator-rhel8@sha256:3b4a28ec743e5a5d382fcb82ab664260355b136c28efee1ffd43c6fe7ed4cb28_arm64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-cluster-olm-operator-rhel8@sha256:3b4a28ec743e5a5d382fcb82ab664260355b136c28efee1ffd43c6fe7ed4cb28_arm64, *
Red Hat	openshift4/ose-prometheus-rhel9-operator@sha256:636ba78fd007e39604a038ac27e4a63342311ce1c73e053791bc8f464b7add75_amd64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-prometheus-rhel9-operator@sha256:636ba78fd007e39604a038ac27e4a63342311ce1c73e053791bc8f464b7add75_amd64, openshift4/ose-prometheus-rhel9-operator@sha256:636ba78fd007e39604a038ac27e4a63342311ce1c73e053791bc8f464b7add75_amd64
Red Hat	openshift4/ose-hyperkube-rhel9@sha256:5aa7b5e183f6f181e80b0ad5cb855174abf3e959fe3cd80f58a989f5d36c5a93_s390x as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-hyperkube-rhel9@sha256:5aa7b5e183f6f181e80b0ad5cb855174abf3e959fe3cd80f58a989f5d36c5a93_s390x, openshift4/ose-hyperkube-rhel9@sha256:5aa7b5e183f6f181e80b0ad5cb855174abf3e959fe3cd80f58a989f5d36c5a93_s390x
Red Hat	openshift4/ose-openstack-cinder-csi-driver-rhel8-operator@sha256:23b59b63f2a550672b2ecf59d24b00822c4cea4a18fd0c175d71c20f54df3e8e_s390x as a component of Red Hat OpenShift Container Platform 4.15	,
Red Hat	openshift4/ose-configmap-reloader-rhel9@sha256:d77358c166915216c9e63a4f0ebe713cefa7ce58dd1c8a9f77ca636cb27487a4_arm64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-configmap-reloader-rhel9@sha256:d77358c166915216c9e63a4f0ebe713cefa7ce58dd1c8a9f77ca636cb27487a4_arm64, *
Red Hat	openshift4/ose-csi-node-driver-registrar@sha256:14d5fdf12549594adca55608426193902b439ed2f98624e371f3072b460a91af_s390x as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-csi-node-driver-registrar@sha256:14d5fdf12549594adca55608426193902b439ed2f98624e371f3072b460a91af_s390x, *
Red Hat	openshift4/ose-must-gather@sha256:9f3843a45fd86fa1288feeb50ec2b7cfaf07e21f1c18b27858dd574b4089ea22_amd64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-must-gather@sha256:9f3843a45fd86fa1288feeb50ec2b7cfaf07e21f1c18b27858dd574b4089ea22_amd64, *
Red Hat	openshift4/ose-csi-driver-manila-rhel9@sha256:f9e398d618e4fb278bce32cda5605000e1a284a1d71d94c679b8648a8d907791_amd64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-csi-driver-manila-rhel9@sha256:f9e398d618e4fb278bce32cda5605000e1a284a1d71d94c679b8648a8d907791_amd64, *
Red Hat	openshift4/ose-cluster-platform-operators-manager-rhel9@sha256:dcfc351ee11923858f24e80231f25dccca72b8fc449da3e2cc879fe4b9018cbc_amd64 as a component of Red Hat OpenShift Container Platform 4.15	*, openshift4/ose-cluster-platform-operators-manager-rhel9@sha256:dcfc351ee11923858f24e80231f25dccca72b8fc449da3e2cc879fe4b9018cbc_amd64
Red Hat	openshift4/ose-oauth-server-rhel9@sha256:b0482d68e49efdfb3a8debe228b41a3b39622fce7aaf5458300c979c27c86a63_ppc64le as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-oauth-server-rhel9@sha256:b0482d68e49efdfb3a8debe228b41a3b39622fce7aaf5458300c979c27c86a63_ppc64le, openshift4/ose-oauth-server-rhel9@sha256:b0482d68e49efdfb3a8debe228b41a3b39622fce7aaf5458300c979c27c86a63_ppc64le
Red Hat	openshift4/ose-csi-node-driver-registrar@sha256:8442adca523249d50c125f98bc24b6081e106123de116c291598800450004865_ppc64le as a component of Red Hat OpenShift Container Platform 4.15	,
Red Hat	openshift4/ose-sdn-rhel9@sha256:6b2df4d91d9a28e1078783742a762423def4b777385b8d0bda93814d37bf5f13_arm64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-sdn-rhel9@sha256:6b2df4d91d9a28e1078783742a762423def4b777385b8d0bda93814d37bf5f13_arm64, openshift4/ose-sdn-rhel9@sha256:6b2df4d91d9a28e1078783742a762423def4b777385b8d0bda93814d37bf5f13_arm64
Red Hat	openshift4/ose-agent-installer-node-agent-rhel9@sha256:3090214d7b4ee786d18d68b41cc105f6587a1995639861e4da5caf8a65614cab_ppc64le as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-agent-installer-node-agent-rhel9@sha256:3090214d7b4ee786d18d68b41cc105f6587a1995639861e4da5caf8a65614cab_ppc64le, openshift4/ose-agent-installer-node-agent-rhel9@sha256:3090214d7b4ee786d18d68b41cc105f6587a1995639861e4da5caf8a65614cab_ppc64le
Red Hat	openshift4/ose-cluster-openshift-apiserver-rhel9-operator@sha256:e0b15a9da8dbdc22847f5b4da752da9ce56076051a491c9333c8fbb149f661ad_amd64 as a component of Red Hat OpenShift Container Platform 4.15	,
Red Hat	openshift4/ose-agent-installer-utils-rhel9@sha256:39923ec8f49a4e0e4e92b369c7289e1de37345a1fd4f70eb83469cc58ff9979b_amd64 as a component of Red Hat OpenShift Container Platform 4.15	,
Red Hat	openshift4/ose-multus-cni@sha256:46b619da3e6be4781de348b9841700f6a06b8aeefa2d8b59f9d7532ac997362e_s390x as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-multus-cni@sha256:46b619da3e6be4781de348b9841700f6a06b8aeefa2d8b59f9d7532ac997362e_s390x, openshift4/ose-multus-cni@sha256:46b619da3e6be4781de348b9841700f6a06b8aeefa2d8b59f9d7532ac997362e_s390x
Red Hat	openshift4/ose-installer@sha256:3917fa7c648a7cdc8ddd0c9c0ebea4febdecb2e54fcd1b76c9aca841b368c5c7_ppc64le as a component of Red Hat OpenShift Container Platform 4.15	*, openshift4/ose-installer@sha256:3917fa7c648a7cdc8ddd0c9c0ebea4febdecb2e54fcd1b76c9aca841b368c5c7_ppc64le
Red Hat	openshift4/ose-kube-state-metrics-rhel9@sha256:de715b5f1c489897adf3426070d67c5fdba096007755ff3e0ecebbf4c303675f_arm64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-kube-state-metrics-rhel9@sha256:de715b5f1c489897adf3426070d67c5fdba096007755ff3e0ecebbf4c303675f_arm64, *