VDB
RHSA-2024%3A7994
RHSA-2024%3A7994
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in the NodeJS Elliptic package. When creating EDDSA signatures, the Elliptic package doesn't properly check the signature length, allowing zeros to be added or removed from the signature without invalidating it, which may result in confidentiality issues.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhacm2/console-rhel9@sha256:eb6f89fca622e967556b73c99a9c4d1b565a5df3c29743d187c0e28f53ae2b50_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | rhacm2/console-rhel9@sha256:eb6f89fca622e967556b73c99a9c4d1b565a5df3c29743d187c0e28f53ae2b50_arm64, rhacm2/console-rhel9@sha256:eb6f89fca622e967556b73c99a9c4d1b565a5df3c29743d187c0e28f53ae2b50_arm64, rhacm2/console-rhel9@sha256:eb6f89fca622e967556b73c99a9c4d1b565a5df3c29743d187c0e28f53ae2b50_arm64 |
| Red Hat | rhacm2/metrics-collector-rhel9@sha256:19b3331ff9d5cc62cb05deff6a321db61cc659b36baf9f0bbe4a34a45a83dc65_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | rhacm2/metrics-collector-rhel9@sha256:19b3331ff9d5cc62cb05deff6a321db61cc659b36baf9f0bbe4a34a45a83dc65_arm64, rhacm2/metrics-collector-rhel9@sha256:19b3331ff9d5cc62cb05deff6a321db61cc659b36baf9f0bbe4a34a45a83dc65_arm64, * |
| Red Hat | rhacm2/thanos-receive-controller-rhel9@sha256:f408307df7bc0161a734f9dabfb0b77d902db4f1e6e17ae83ca178b15c5f362a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | rhacm2/thanos-receive-controller-rhel9@sha256:f408307df7bc0161a734f9dabfb0b77d902db4f1e6e17ae83ca178b15c5f362a_amd64, rhacm2/thanos-receive-controller-rhel9@sha256:f408307df7bc0161a734f9dabfb0b77d902db4f1e6e17ae83ca178b15c5f362a_amd64, rhacm2/thanos-receive-controller-rhel9@sha256:f408307df7bc0161a734f9dabfb0b77d902db4f1e6e17ae83ca178b15c5f362a_amd64 |
| Red Hat | rhacm2/rbac-query-proxy-rhel9@sha256:2690d34e51510d1524e854dc13c9823a1a26e0d507815723b9639f4b172ed73b_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | rhacm2/rbac-query-proxy-rhel9@sha256:2690d34e51510d1524e854dc13c9823a1a26e0d507815723b9639f4b172ed73b_arm64, rhacm2/rbac-query-proxy-rhel9@sha256:2690d34e51510d1524e854dc13c9823a1a26e0d507815723b9639f4b172ed73b_arm64, * |
| Red Hat | rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:30f0a68394f2c302781ac8bc62cab32e4565395106a515d44b8ef2c13a7a4304_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:30f0a68394f2c302781ac8bc62cab32e4565395106a515d44b8ef2c13a7a4304_arm64, rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:30f0a68394f2c302781ac8bc62cab32e4565395106a515d44b8ef2c13a7a4304_arm64, rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:30f0a68394f2c302781ac8bc62cab32e4565395106a515d44b8ef2c13a7a4304_arm64 |
| Red Hat | rhacm2/observatorium-rhel9@sha256:6cc238e15909b99de4f4db8bc3868162fc95f8f26c00d3da3ef4e50ab1cc5f66_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | *, *, rhacm2/observatorium-rhel9@sha256:6cc238e15909b99de4f4db8bc3868162fc95f8f26c00d3da3ef4e50ab1cc5f66_amd64 |
| Red Hat | rhacm2/memcached-exporter-rhel9@sha256:9f4554baaf7b7bf68cfa60bca0e72a1883c7b195e9678a5147eb57611285e233_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | rhacm2/memcached-exporter-rhel9@sha256:9f4554baaf7b7bf68cfa60bca0e72a1883c7b195e9678a5147eb57611285e233_arm64, rhacm2/memcached-exporter-rhel9@sha256:9f4554baaf7b7bf68cfa60bca0e72a1883c7b195e9678a5147eb57611285e233_arm64, rhacm2/memcached-exporter-rhel9@sha256:9f4554baaf7b7bf68cfa60bca0e72a1883c7b195e9678a5147eb57611285e233_arm64 |
| Red Hat | rhacm2/multicluster-operators-channel-rhel9@sha256:31a6ac9d9bf570d6f6704b981d22e858fc9d15a54fe6fe8a9690efaa7a9157f3_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | *, rhacm2/multicluster-operators-channel-rhel9@sha256:31a6ac9d9bf570d6f6704b981d22e858fc9d15a54fe6fe8a9690efaa7a9157f3_arm64, rhacm2/multicluster-operators-channel-rhel9@sha256:31a6ac9d9bf570d6f6704b981d22e858fc9d15a54fe6fe8a9690efaa7a9157f3_arm64 |
| Red Hat | rhacm2/kube-state-metrics-rhel9@sha256:61e56277858c7667b977df9da09080aa6ab471c83b6328106213cdb5f12fcbd0_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | rhacm2/kube-state-metrics-rhel9@sha256:61e56277858c7667b977df9da09080aa6ab471c83b6328106213cdb5f12fcbd0_s390x, rhacm2/kube-state-metrics-rhel9@sha256:61e56277858c7667b977df9da09080aa6ab471c83b6328106213cdb5f12fcbd0_s390x, rhacm2/kube-state-metrics-rhel9@sha256:61e56277858c7667b977df9da09080aa6ab471c83b6328106213cdb5f12fcbd0_s390x |
| Red Hat | rhacm2/memcached-rhel9@sha256:3bd4cbd8e709011e163309b98ad7eeae4398a91a5da6029d3414dbda1949e7af_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | rhacm2/memcached-rhel9@sha256:3bd4cbd8e709011e163309b98ad7eeae4398a91a5da6029d3414dbda1949e7af_ppc64le, rhacm2/memcached-rhel9@sha256:3bd4cbd8e709011e163309b98ad7eeae4398a91a5da6029d3414dbda1949e7af_ppc64le, rhacm2/memcached-rhel9@sha256:3bd4cbd8e709011e163309b98ad7eeae4398a91a5da6029d3414dbda1949e7af_ppc64le |
| Red Hat | rhacm2/multicluster-operators-application-rhel9@sha256:c83f55c0579578d77ee3639d8a86804c089b891377d590e798fc138fefcf13a8_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | rhacm2/multicluster-operators-application-rhel9@sha256:c83f55c0579578d77ee3639d8a86804c089b891377d590e798fc138fefcf13a8_s390x, rhacm2/multicluster-operators-application-rhel9@sha256:c83f55c0579578d77ee3639d8a86804c089b891377d590e798fc138fefcf13a8_s390x, rhacm2/multicluster-operators-application-rhel9@sha256:c83f55c0579578d77ee3639d8a86804c089b891377d590e798fc138fefcf13a8_s390x |
| Red Hat | rhacm2/cluster-backup-rhel9-operator@sha256:60aa5ffb2c7d4c476f4e332f222c1d16669b293fdc232f9b0aa9b3bb86917a91_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | rhacm2/cluster-backup-rhel9-operator@sha256:60aa5ffb2c7d4c476f4e332f222c1d16669b293fdc232f9b0aa9b3bb86917a91_amd64, rhacm2/cluster-backup-rhel9-operator@sha256:60aa5ffb2c7d4c476f4e332f222c1d16669b293fdc232f9b0aa9b3bb86917a91_amd64, rhacm2/cluster-backup-rhel9-operator@sha256:60aa5ffb2c7d4c476f4e332f222c1d16669b293fdc232f9b0aa9b3bb86917a91_amd64 |
| Red Hat | rhacm2/cert-policy-controller-rhel9@sha256:833c893073f6ba633228c97445f1ca15ba14106c73ba99940d1733fae2e7d44e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | rhacm2/cert-policy-controller-rhel9@sha256:833c893073f6ba633228c97445f1ca15ba14106c73ba99940d1733fae2e7d44e_s390x, rhacm2/cert-policy-controller-rhel9@sha256:833c893073f6ba633228c97445f1ca15ba14106c73ba99940d1733fae2e7d44e_s390x, rhacm2/cert-policy-controller-rhel9@sha256:833c893073f6ba633228c97445f1ca15ba14106c73ba99940d1733fae2e7d44e_s390x |
| Red Hat | rhacm2/thanos-rhel9@sha256:835a41e163159abf0ec25e2cce1eada0d1730be816d335ea7418b64011619768_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | *, rhacm2/thanos-rhel9@sha256:835a41e163159abf0ec25e2cce1eada0d1730be816d335ea7418b64011619768_s390x, * |
| Red Hat | rhacm2/config-policy-controller-rhel9@sha256:15b7b9475677d9ef56d62bfad7c9f38a6d40e9f4c8a2fdb6eff95916d3cd6375_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | rhacm2/config-policy-controller-rhel9@sha256:15b7b9475677d9ef56d62bfad7c9f38a6d40e9f4c8a2fdb6eff95916d3cd6375_amd64, *, rhacm2/config-policy-controller-rhel9@sha256:15b7b9475677d9ef56d62bfad7c9f38a6d40e9f4c8a2fdb6eff95916d3cd6375_amd64 |
| Red Hat | rhacm2/config-policy-controller-rhel9@sha256:a8337a314c295620ae17adbaf9ea553ad4907b63cccc28b27980e7ad18de4a04_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | *, rhacm2/config-policy-controller-rhel9@sha256:a8337a314c295620ae17adbaf9ea553ad4907b63cccc28b27980e7ad18de4a04_ppc64le, rhacm2/config-policy-controller-rhel9@sha256:a8337a314c295620ae17adbaf9ea553ad4907b63cccc28b27980e7ad18de4a04_ppc64le |
| Red Hat | rhacm2/acm-search-v2-rhel9@sha256:0da1a57e032ccc407b6b13ef1729383401f0bfadb3d6b9044f39cd9508de234e_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | *, rhacm2/acm-search-v2-rhel9@sha256:0da1a57e032ccc407b6b13ef1729383401f0bfadb3d6b9044f39cd9508de234e_ppc64le, rhacm2/acm-search-v2-rhel9@sha256:0da1a57e032ccc407b6b13ef1729383401f0bfadb3d6b9044f39cd9508de234e_ppc64le |
| Red Hat | rhacm2/submariner-addon-rhel9@sha256:2e5f0c6b050baba6233dc7384711f306759dcdcd98c25c817405ca20bf96ef58_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | rhacm2/submariner-addon-rhel9@sha256:2e5f0c6b050baba6233dc7384711f306759dcdcd98c25c817405ca20bf96ef58_arm64, rhacm2/submariner-addon-rhel9@sha256:2e5f0c6b050baba6233dc7384711f306759dcdcd98c25c817405ca20bf96ef58_arm64, * |
| Red Hat | rhacm2/acm-search-v2-rhel9@sha256:5419b0bc6c982d97da56a28b4e52eb8cdef0ba144e764d00e79442d32287e8c0_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | rhacm2/acm-search-v2-rhel9@sha256:5419b0bc6c982d97da56a28b4e52eb8cdef0ba144e764d00e79442d32287e8c0_amd64, *, * |
| Red Hat | rhacm2/acm-prometheus-config-reloader-rhel9@sha256:8d669e410887791765bf617fd920674a2fb5f9f9354db6f637e14f3df28693d9_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 | *, rhacm2/acm-prometheus-config-reloader-rhel9@sha256:8d669e410887791765bf617fd920674a2fb5f9f9354db6f637e14f3df28693d9_s390x, rhacm2/acm-prometheus-config-reloader-rhel9@sha256:8d669e410887791765bf617fd920674a2fb5f9f9354db6f637e14f3df28693d9_s390x |
…and 151 more
Timeline
- Oct 11, 2024 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 29, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:7994 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html/release_notes/ advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2302458 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2302459 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2302460 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7994.json advisory
- https://access.redhat.com/security/cve/CVE-2024-42459 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-42459 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42459 advisory
- https://github.com/indutny/elliptic/pull/317 advisory
- https://access.redhat.com/security/cve/CVE-2024-42460 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-42460 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42460 advisory
- https://access.redhat.com/security/cve/CVE-2024-42461 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-42461 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42461 advisory
- https://github.com/advisories/GHSA-49q7-c7j4-3p7m advisory
- https://access.redhat.com/security/cve/CVE-2024-48949 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2317724 issue
…and 4 more