RHSA-2024%3A7759 — Vulnetix

RHSA-2024%3A7759 PUBLISHED CVSS 5.300000190734863 MEDIUM

A flaw was found in the NodeJS Elliptic package. When creating EDDSA signatures, the Elliptic package doesn't properly check the signature length, allowing zeros to be added or removed from the signature without invalidating it, which may result in confidentiality issues.

Risk Scores

CVSS 3.1

5.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Products

…and 135 more

Timeline

Oct 10, 2024 CVE Published
Apr 24, 2026 Distribution Patch
Apr 24, 2026 Distribution Patch
Apr 24, 2026 Security Advisory
Apr 24, 2026 Security Advisory
Apr 24, 2026 Security Advisory
Apr 24, 2026 Security Advisory
Apr 29, 2026 CVE Updated

References

https://access.redhat.com/errata/RHSA-2024:7759 advisory
https://access.redhat.com/security/updates/classification/#moderate advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2302458 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2302459 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2302460 issue
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7759.json advisory
https://access.redhat.com/security/cve/CVE-2024-42459 advisory
https://www.cve.org/CVERecord?id=CVE-2024-42459 advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-42459 advisory
https://github.com/indutny/elliptic/pull/317 advisory
https://access.redhat.com/security/cve/CVE-2024-42460 advisory
https://www.cve.org/CVERecord?id=CVE-2024-42460 advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-42460 advisory
https://access.redhat.com/security/cve/CVE-2024-42461 advisory
https://www.cve.org/CVERecord?id=CVE-2024-42461 advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-42461 advisory
https://github.com/advisories/GHSA-49q7-c7j4-3p7m advisory

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	multicluster-engine/assisted-installer-rhel8@sha256:874754b6d8a777a394ee1ecdf8906cb959e12ffac47a6268d590204687633052_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 8	multicluster-engine/assisted-installer-rhel8@sha256:874754b6d8a777a394ee1ecdf8906cb959e12ffac47a6268d590204687633052_ppc64le, multicluster-engine/assisted-installer-rhel8@sha256:874754b6d8a777a394ee1ecdf8906cb959e12ffac47a6268d590204687633052_ppc64le, multicluster-engine/assisted-installer-rhel8@sha256:874754b6d8a777a394ee1ecdf8906cb959e12ffac47a6268d590204687633052_ppc64le
Red Hat	multicluster-engine/console-mce-rhel9@sha256:c8a809a64a6b7729f5f9cb66ef131966a501efc4e0d4aff7a765bcdd07b73042_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	, multicluster-engine/console-mce-rhel9@sha256:c8a809a64a6b7729f5f9cb66ef131966a501efc4e0d4aff7a765bcdd07b73042_s390x,
Red Hat	multicluster-engine/managedcluster-import-controller-rhel9@sha256:6d7ab0550b59ccf6eacaaa655eee03b0036fec7b7d8ea2108497fe30015fdad7_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	multicluster-engine/managedcluster-import-controller-rhel9@sha256:6d7ab0550b59ccf6eacaaa655eee03b0036fec7b7d8ea2108497fe30015fdad7_arm64, *, multicluster-engine/managedcluster-import-controller-rhel9@sha256:6d7ab0550b59ccf6eacaaa655eee03b0036fec7b7d8ea2108497fe30015fdad7_arm64
Red Hat	multicluster-engine/multicluster-engine-console-mce-rhel9@sha256:1294332831bcd88dc4bdd026f4c287bd8284894ecff906a34aef32e2c329dd06_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	*, multicluster-engine/multicluster-engine-console-mce-rhel9@sha256:1294332831bcd88dc4bdd026f4c287bd8284894ecff906a34aef32e2c329dd06_amd64, multicluster-engine/multicluster-engine-console-mce-rhel9@sha256:1294332831bcd88dc4bdd026f4c287bd8284894ecff906a34aef32e2c329dd06_amd64
Red Hat	multicluster-engine/clusterclaims-controller-rhel9@sha256:add1f1ee642ea7adc4b3187c883d296b0543b4bef8a5ade96a335bbea5dfa52b_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	multicluster-engine/clusterclaims-controller-rhel9@sha256:add1f1ee642ea7adc4b3187c883d296b0543b4bef8a5ade96a335bbea5dfa52b_arm64, multicluster-engine/clusterclaims-controller-rhel9@sha256:add1f1ee642ea7adc4b3187c883d296b0543b4bef8a5ade96a335bbea5dfa52b_arm64, multicluster-engine/clusterclaims-controller-rhel9@sha256:add1f1ee642ea7adc4b3187c883d296b0543b4bef8a5ade96a335bbea5dfa52b_arm64
Red Hat	multicluster-engine/registration-rhel9@sha256:714eb09d9124c5c3b33b5f7d8c2b07ca299634a3f603f477c07d7c7298ead9af_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	*, multicluster-engine/registration-rhel9@sha256:714eb09d9124c5c3b33b5f7d8c2b07ca299634a3f603f477c07d7c7298ead9af_arm64, multicluster-engine/registration-rhel9@sha256:714eb09d9124c5c3b33b5f7d8c2b07ca299634a3f603f477c07d7c7298ead9af_arm64
Red Hat	multicluster-engine/hive-rhel9@sha256:e7682c0c26d6cf6dd791d2c24dc2255b17df8dca04b9720d7e0ccccfae07b7fb_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	multicluster-engine/hive-rhel9@sha256:e7682c0c26d6cf6dd791d2c24dc2255b17df8dca04b9720d7e0ccccfae07b7fb_ppc64le, multicluster-engine/hive-rhel9@sha256:e7682c0c26d6cf6dd791d2c24dc2255b17df8dca04b9720d7e0ccccfae07b7fb_ppc64le, multicluster-engine/hive-rhel9@sha256:e7682c0c26d6cf6dd791d2c24dc2255b17df8dca04b9720d7e0ccccfae07b7fb_ppc64le
Red Hat	multicluster-engine/assisted-image-service-rhel8@sha256:48b0bf06baa6c2a286c1dfd1413f928763a2968acfbb635549dbd33af1c5e8de_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 8	*, multicluster-engine/assisted-image-service-rhel8@sha256:48b0bf06baa6c2a286c1dfd1413f928763a2968acfbb635549dbd33af1c5e8de_s390x, multicluster-engine/assisted-image-service-rhel8@sha256:48b0bf06baa6c2a286c1dfd1413f928763a2968acfbb635549dbd33af1c5e8de_s390x
Red Hat	multicluster-engine/managed-serviceaccount-rhel9@sha256:8a8289c7c7a9f2438d1018294cab346e5517c6d99023c5e2079c7fff39767109_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	multicluster-engine/managed-serviceaccount-rhel9@sha256:8a8289c7c7a9f2438d1018294cab346e5517c6d99023c5e2079c7fff39767109_s390x, multicluster-engine/managed-serviceaccount-rhel9@sha256:8a8289c7c7a9f2438d1018294cab346e5517c6d99023c5e2079c7fff39767109_s390x, multicluster-engine/managed-serviceaccount-rhel9@sha256:8a8289c7c7a9f2438d1018294cab346e5517c6d99023c5e2079c7fff39767109_s390x
Red Hat	multicluster-engine/hive-rhel9@sha256:2eb3e55199da777b9ebd228c85f0bd240b5fc090b34a86d823f7bbe1389e30ee_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	multicluster-engine/hive-rhel9@sha256:2eb3e55199da777b9ebd228c85f0bd240b5fc090b34a86d823f7bbe1389e30ee_s390x, multicluster-engine/hive-rhel9@sha256:2eb3e55199da777b9ebd228c85f0bd240b5fc090b34a86d823f7bbe1389e30ee_s390x, multicluster-engine/hive-rhel9@sha256:2eb3e55199da777b9ebd228c85f0bd240b5fc090b34a86d823f7bbe1389e30ee_s390x
Red Hat	multicluster-engine/multicluster-engine-managed-serviceaccount-rhel9@sha256:8126c221a8b40f75eadf617533752052022bccd8f6ce6e8b94b1858370143b99_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	multicluster-engine/multicluster-engine-managed-serviceaccount-rhel9@sha256:8126c221a8b40f75eadf617533752052022bccd8f6ce6e8b94b1858370143b99_arm64, *, multicluster-engine/multicluster-engine-managed-serviceaccount-rhel9@sha256:8126c221a8b40f75eadf617533752052022bccd8f6ce6e8b94b1858370143b99_arm64
Red Hat	multicluster-engine/hypershift-rhel9-operator@sha256:71eca36de04cd1346c01740e2bbc7e8baed284118095d40339c254204e7f4850_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	multicluster-engine/hypershift-rhel9-operator@sha256:71eca36de04cd1346c01740e2bbc7e8baed284118095d40339c254204e7f4850_s390x, *, multicluster-engine/hypershift-rhel9-operator@sha256:71eca36de04cd1346c01740e2bbc7e8baed284118095d40339c254204e7f4850_s390x
Red Hat	multicluster-engine/clusterclaims-controller-rhel9@sha256:73e1134bd6e992888fbf1d2a178a17634e7e284174b767e75448c78674ff1b14_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	, , multicluster-engine/clusterclaims-controller-rhel9@sha256:73e1134bd6e992888fbf1d2a178a17634e7e284174b767e75448c78674ff1b14_ppc64le
Red Hat	multicluster-engine/assisted-installer-rhel8@sha256:e6fb4b60f57345e346844c065db60e23b70ab3ac3d7af27efef8f70213d6efaa_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8	*, multicluster-engine/assisted-installer-rhel8@sha256:e6fb4b60f57345e346844c065db60e23b70ab3ac3d7af27efef8f70213d6efaa_arm64, multicluster-engine/assisted-installer-rhel8@sha256:e6fb4b60f57345e346844c065db60e23b70ab3ac3d7af27efef8f70213d6efaa_arm64
Red Hat	multicluster-engine/image-based-install-rhel9@sha256:c2c81cb5e35206a6d4a63f68dd21875a3ae65017d21b7ef1d20793dff38274ac_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	*, multicluster-engine/image-based-install-rhel9@sha256:c2c81cb5e35206a6d4a63f68dd21875a3ae65017d21b7ef1d20793dff38274ac_arm64, multicluster-engine/image-based-install-rhel9@sha256:c2c81cb5e35206a6d4a63f68dd21875a3ae65017d21b7ef1d20793dff38274ac_arm64
Red Hat	multicluster-engine/multicluster-engine-hypershift-addon-rhel9-operator@sha256:ad9bd702d8a2be7c436c35661384bceb3c39e2e5f2e07dea166090c7a742b3c1_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	multicluster-engine/multicluster-engine-hypershift-addon-rhel9-operator@sha256:ad9bd702d8a2be7c436c35661384bceb3c39e2e5f2e07dea166090c7a742b3c1_arm64, multicluster-engine/multicluster-engine-hypershift-addon-rhel9-operator@sha256:ad9bd702d8a2be7c436c35661384bceb3c39e2e5f2e07dea166090c7a742b3c1_arm64, *
Red Hat	multicluster-engine/placement-rhel9@sha256:a3d4aacb99416adb8b5c61b0160b378d779c879300fe89b8db6d2c3ed7c64e86_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	multicluster-engine/placement-rhel9@sha256:a3d4aacb99416adb8b5c61b0160b378d779c879300fe89b8db6d2c3ed7c64e86_ppc64le, multicluster-engine/placement-rhel9@sha256:a3d4aacb99416adb8b5c61b0160b378d779c879300fe89b8db6d2c3ed7c64e86_ppc64le, multicluster-engine/placement-rhel9@sha256:a3d4aacb99416adb8b5c61b0160b378d779c879300fe89b8db6d2c3ed7c64e86_ppc64le
Red Hat	multicluster-engine/assisted-installer-rhel8@sha256:3d2c756f64282bc61c56385fd50933d4605722a53302169b8e31e906e0d6422e_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 8	multicluster-engine/assisted-installer-rhel8@sha256:3d2c756f64282bc61c56385fd50933d4605722a53302169b8e31e906e0d6422e_s390x, multicluster-engine/assisted-installer-rhel8@sha256:3d2c756f64282bc61c56385fd50933d4605722a53302169b8e31e906e0d6422e_s390x, multicluster-engine/assisted-installer-rhel8@sha256:3d2c756f64282bc61c56385fd50933d4605722a53302169b8e31e906e0d6422e_s390x
Red Hat	multicluster-engine/addon-manager-rhel9@sha256:31802bbc87aba992c2f346a890183dc47d827f112e7d075fd94a80a0dc7f7db5_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	multicluster-engine/addon-manager-rhel9@sha256:31802bbc87aba992c2f346a890183dc47d827f112e7d075fd94a80a0dc7f7db5_amd64, *, multicluster-engine/addon-manager-rhel9@sha256:31802bbc87aba992c2f346a890183dc47d827f112e7d075fd94a80a0dc7f7db5_amd64
Red Hat	multicluster-engine/multicluster-engine-managed-serviceaccount-rhel9@sha256:8a8289c7c7a9f2438d1018294cab346e5517c6d99023c5e2079c7fff39767109_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 9	*, multicluster-engine/multicluster-engine-managed-serviceaccount-rhel9@sha256:8a8289c7c7a9f2438d1018294cab346e5517c6d99023c5e2079c7fff39767109_s390x, multicluster-engine/multicluster-engine-managed-serviceaccount-rhel9@sha256:8a8289c7c7a9f2438d1018294cab346e5517c6d99023c5e2079c7fff39767109_s390x