RHSA-2024%3A8533 — Vulnetix

RHSA-2024%3A8533 PUBLISHED CVSS 5.300000190734863 MEDIUM

A flaw was found in the NodeJS Elliptic package. When creating EDDSA signatures, the Elliptic package doesn't properly check the signature length, allowing zeros to be added or removed from the signature without invalidating it, which may result in confidentiality issues.

Risk Scores

CVSS 3.1

5.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Products

…and 140 more

Timeline

Oct 28, 2024 CVE Published
Apr 24, 2026 Distribution Patch
Apr 24, 2026 Distribution Patch
Apr 24, 2026 Security Advisory
Apr 24, 2026 Security Advisory
Apr 24, 2026 Security Advisory
Apr 24, 2026 Security Advisory
Apr 24, 2026 Security Advisory
Apr 29, 2026 CVE Updated

References

https://access.redhat.com/errata/RHSA-2024:8533 advisory
https://access.redhat.com/security/updates/classification/#important advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8533.json advisory
https://access.redhat.com/security/cve/CVE-2024-42459 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2302458 issue
https://www.cve.org/CVERecord?id=CVE-2024-42459 advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-42459 advisory
https://github.com/indutny/elliptic/pull/317 advisory
https://access.redhat.com/security/cve/CVE-2024-42460 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2302459 issue
https://www.cve.org/CVERecord?id=CVE-2024-42460 advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-42460 advisory
https://access.redhat.com/security/cve/CVE-2024-42461 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2302460 issue
https://www.cve.org/CVERecord?id=CVE-2024-42461 advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-42461 advisory
https://github.com/advisories/GHSA-49q7-c7j4-3p7m advisory
https://access.redhat.com/security/cve/CVE-2024-48949 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2317724 issue
https://www.cve.org/CVERecord?id=CVE-2024-48949 advisory

…and 3 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	multicluster-engine/mce-operator-bundle@sha256:cbba517b78c5b46ae632b453bd3f985038f62eb21a89d3de21e82f7cfcec9b4d_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	multicluster-engine/mce-operator-bundle@sha256:cbba517b78c5b46ae632b453bd3f985038f62eb21a89d3de21e82f7cfcec9b4d_s390x, multicluster-engine/mce-operator-bundle@sha256:cbba517b78c5b46ae632b453bd3f985038f62eb21a89d3de21e82f7cfcec9b4d_s390x, multicluster-engine/mce-operator-bundle@sha256:cbba517b78c5b46ae632b453bd3f985038f62eb21a89d3de21e82f7cfcec9b4d_s390x
Red Hat	multicluster-engine/managed-serviceaccount-rhel8@sha256:853d53ac6761f0aca1993f78a3a4e5e149b6a09f90749337e5d578f30f26fc96_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	multicluster-engine/managed-serviceaccount-rhel8@sha256:853d53ac6761f0aca1993f78a3a4e5e149b6a09f90749337e5d578f30f26fc96_s390x, multicluster-engine/managed-serviceaccount-rhel8@sha256:853d53ac6761f0aca1993f78a3a4e5e149b6a09f90749337e5d578f30f26fc96_s390x, *
Red Hat	multicluster-engine/addon-manager-rhel8@sha256:a539122dbbf0fe488ff31f962dccdd93e3057a6c41ed840f1b11a25c09f5ab05_amd64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	multicluster-engine/addon-manager-rhel8@sha256:a539122dbbf0fe488ff31f962dccdd93e3057a6c41ed840f1b11a25c09f5ab05_amd64, multicluster-engine/addon-manager-rhel8@sha256:a539122dbbf0fe488ff31f962dccdd93e3057a6c41ed840f1b11a25c09f5ab05_amd64, multicluster-engine/addon-manager-rhel8@sha256:a539122dbbf0fe488ff31f962dccdd93e3057a6c41ed840f1b11a25c09f5ab05_amd64
Red Hat	multicluster-engine/assisted-image-service-rhel8@sha256:d3023c6557f01e032d9390ff7491706d5c8e14c727d95c7e3f84539e0095c7e8_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	, , multicluster-engine/assisted-image-service-rhel8@sha256:d3023c6557f01e032d9390ff7491706d5c8e14c727d95c7e3f84539e0095c7e8_ppc64le
Red Hat	multicluster-engine/cluster-api-provider-aws-rhel8@sha256:800fa3604e1e0eb4303e897ff5e9dbb47a328a14e979153fa131fef87ee9ceb4_arm64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	multicluster-engine/cluster-api-provider-aws-rhel8@sha256:800fa3604e1e0eb4303e897ff5e9dbb47a328a14e979153fa131fef87ee9ceb4_arm64, multicluster-engine/cluster-api-provider-aws-rhel8@sha256:800fa3604e1e0eb4303e897ff5e9dbb47a328a14e979153fa131fef87ee9ceb4_arm64, multicluster-engine/cluster-api-provider-aws-rhel8@sha256:800fa3604e1e0eb4303e897ff5e9dbb47a328a14e979153fa131fef87ee9ceb4_arm64
Red Hat	multicluster-engine/hypershift-addon-rhel8-operator@sha256:929bedfea4bfbb1a5b150ee1990f87599bb746053ce4dc6baeea5d8fb247f516_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	*, multicluster-engine/hypershift-addon-rhel8-operator@sha256:929bedfea4bfbb1a5b150ee1990f87599bb746053ce4dc6baeea5d8fb247f516_ppc64le, multicluster-engine/hypershift-addon-rhel8-operator@sha256:929bedfea4bfbb1a5b150ee1990f87599bb746053ce4dc6baeea5d8fb247f516_ppc64le
Red Hat	multicluster-engine/clusterclaims-controller-rhel8@sha256:220f64df0532b30472937113bc29d5923fd6e99009ce166b09abe75430a0ab17_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	multicluster-engine/clusterclaims-controller-rhel8@sha256:220f64df0532b30472937113bc29d5923fd6e99009ce166b09abe75430a0ab17_s390x, multicluster-engine/clusterclaims-controller-rhel8@sha256:220f64df0532b30472937113bc29d5923fd6e99009ce166b09abe75430a0ab17_s390x, multicluster-engine/clusterclaims-controller-rhel8@sha256:220f64df0532b30472937113bc29d5923fd6e99009ce166b09abe75430a0ab17_s390x
Red Hat	multicluster-engine/clusterlifecycle-state-metrics-rhel8@sha256:e8cbb66ff410eea71ad51db5cdedd9900de0eae038c19dd5cdb9c7ac6974baa4_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	multicluster-engine/clusterlifecycle-state-metrics-rhel8@sha256:e8cbb66ff410eea71ad51db5cdedd9900de0eae038c19dd5cdb9c7ac6974baa4_s390x, ,
Red Hat	multicluster-engine/work-rhel8@sha256:f280dc80979ab3e067281bd06b5e6e2ac2d1a95bd7d2637e993b4768ba74c74a_arm64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	, , multicluster-engine/work-rhel8@sha256:f280dc80979ab3e067281bd06b5e6e2ac2d1a95bd7d2637e993b4768ba74c74a_arm64
Red Hat	multicluster-engine/hypershift-addon-rhel8-operator@sha256:04419a2b5b27149673b39eaaaafa5013c48169aefb38079c6952ead6309094ec_arm64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	multicluster-engine/hypershift-addon-rhel8-operator@sha256:04419a2b5b27149673b39eaaaafa5013c48169aefb38079c6952ead6309094ec_arm64, multicluster-engine/hypershift-addon-rhel8-operator@sha256:04419a2b5b27149673b39eaaaafa5013c48169aefb38079c6952ead6309094ec_arm64, multicluster-engine/hypershift-addon-rhel8-operator@sha256:04419a2b5b27149673b39eaaaafa5013c48169aefb38079c6952ead6309094ec_arm64
Red Hat	multicluster-engine/multicluster-engine-managed-serviceaccount-rhel8@sha256:9d38964490b53459525f4c85a6a2df32ba380cb31133079ae3e31f09eae2e30e_arm64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	multicluster-engine/multicluster-engine-managed-serviceaccount-rhel8@sha256:9d38964490b53459525f4c85a6a2df32ba380cb31133079ae3e31f09eae2e30e_arm64, *, multicluster-engine/multicluster-engine-managed-serviceaccount-rhel8@sha256:9d38964490b53459525f4c85a6a2df32ba380cb31133079ae3e31f09eae2e30e_arm64
Red Hat	multicluster-engine/hypershift-cli-rhel8@sha256:481968e52f8dfa89dd2a3da865f53f0dd1b2b5f9fd53dfd9598d45005c4fca1e_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	*, multicluster-engine/hypershift-cli-rhel8@sha256:481968e52f8dfa89dd2a3da865f53f0dd1b2b5f9fd53dfd9598d45005c4fca1e_ppc64le, multicluster-engine/hypershift-cli-rhel8@sha256:481968e52f8dfa89dd2a3da865f53f0dd1b2b5f9fd53dfd9598d45005c4fca1e_ppc64le
Red Hat	multicluster-engine/hive-rhel8@sha256:984144b40326f7c2690cb26973ab6ccc24ea80664e32bef1892607504222e8ef_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	multicluster-engine/hive-rhel8@sha256:984144b40326f7c2690cb26973ab6ccc24ea80664e32bef1892607504222e8ef_s390x, multicluster-engine/hive-rhel8@sha256:984144b40326f7c2690cb26973ab6ccc24ea80664e32bef1892607504222e8ef_s390x, *
Red Hat	multicluster-engine/placement-rhel8@sha256:fb80a9e3b9aa48bb175ac797375fc31dd2a2e815d53cdb07bc360fc65bc1304c_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	multicluster-engine/placement-rhel8@sha256:fb80a9e3b9aa48bb175ac797375fc31dd2a2e815d53cdb07bc360fc65bc1304c_s390x, multicluster-engine/placement-rhel8@sha256:fb80a9e3b9aa48bb175ac797375fc31dd2a2e815d53cdb07bc360fc65bc1304c_s390x, multicluster-engine/placement-rhel8@sha256:fb80a9e3b9aa48bb175ac797375fc31dd2a2e815d53cdb07bc360fc65bc1304c_s390x
Red Hat	multicluster-engine/hypershift-addon-rhel8-operator@sha256:7398b688ec091df5dcfc1133d2109548e6e74e1e9a82a6c1cb2357549c7483fc_amd64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	multicluster-engine/hypershift-addon-rhel8-operator@sha256:7398b688ec091df5dcfc1133d2109548e6e74e1e9a82a6c1cb2357549c7483fc_amd64, multicluster-engine/hypershift-addon-rhel8-operator@sha256:7398b688ec091df5dcfc1133d2109548e6e74e1e9a82a6c1cb2357549c7483fc_amd64, multicluster-engine/hypershift-addon-rhel8-operator@sha256:7398b688ec091df5dcfc1133d2109548e6e74e1e9a82a6c1cb2357549c7483fc_amd64
Red Hat	multicluster-engine/clusterclaims-controller-rhel8@sha256:35eec7adb8ba432d4b3a813cbea3cff280854ce962a66220089f0ef002937621_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	multicluster-engine/clusterclaims-controller-rhel8@sha256:35eec7adb8ba432d4b3a813cbea3cff280854ce962a66220089f0ef002937621_ppc64le, multicluster-engine/clusterclaims-controller-rhel8@sha256:35eec7adb8ba432d4b3a813cbea3cff280854ce962a66220089f0ef002937621_ppc64le, multicluster-engine/clusterclaims-controller-rhel8@sha256:35eec7adb8ba432d4b3a813cbea3cff280854ce962a66220089f0ef002937621_ppc64le
Red Hat	multicluster-engine/hive-rhel8@sha256:fcd6a9ac405cf76090c6e8d518eef857bf0d44ad6c96fb2f96776da644a3f0a1_amd64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	multicluster-engine/hive-rhel8@sha256:fcd6a9ac405cf76090c6e8d518eef857bf0d44ad6c96fb2f96776da644a3f0a1_amd64, *, multicluster-engine/hive-rhel8@sha256:fcd6a9ac405cf76090c6e8d518eef857bf0d44ad6c96fb2f96776da644a3f0a1_amd64
Red Hat	multicluster-engine/cluster-proxy-addon-rhel8@sha256:d4d7adf4c7a6ad4fc51427cf15a023484a4be4eea15bf7f3b6dee50b78b61e6d_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	multicluster-engine/cluster-proxy-addon-rhel8@sha256:d4d7adf4c7a6ad4fc51427cf15a023484a4be4eea15bf7f3b6dee50b78b61e6d_s390x, multicluster-engine/cluster-proxy-addon-rhel8@sha256:d4d7adf4c7a6ad4fc51427cf15a023484a4be4eea15bf7f3b6dee50b78b61e6d_s390x, multicluster-engine/cluster-proxy-addon-rhel8@sha256:d4d7adf4c7a6ad4fc51427cf15a023484a4be4eea15bf7f3b6dee50b78b61e6d_s390x
Red Hat	multicluster-engine/cluster-api-provider-agent-rhel8@sha256:cd16b28c183271c256383be4ff5acc70082425302ce7460df031bdf91f7ef2cd_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	*, multicluster-engine/cluster-api-provider-agent-rhel8@sha256:cd16b28c183271c256383be4ff5acc70082425302ce7460df031bdf91f7ef2cd_s390x, multicluster-engine/cluster-api-provider-agent-rhel8@sha256:cd16b28c183271c256383be4ff5acc70082425302ce7460df031bdf91f7ef2cd_s390x
Red Hat	multicluster-engine/cluster-image-set-controller-rhel8@sha256:76fadc9b34f240dcb354274e6a77af34e0cbd21d83201e5be027b9c8dedccd08_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8	multicluster-engine/cluster-image-set-controller-rhel8@sha256:76fadc9b34f240dcb354274e6a77af34e0cbd21d83201e5be027b9c8dedccd08_ppc64le, multicluster-engine/cluster-image-set-controller-rhel8@sha256:76fadc9b34f240dcb354274e6a77af34e0cbd21d83201e5be027b9c8dedccd08_ppc64le, multicluster-engine/cluster-image-set-controller-rhel8@sha256:76fadc9b34f240dcb354274e6a77af34e0cbd21d83201e5be027b9c8dedccd08_ppc64le