VDB
RHSA-2024%3A8546
RHSA-2024%3A8546
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in the NodeJS Elliptic package. When creating EDDSA signatures, the Elliptic package doesn't properly check the signature length, allowing zeros to be added or removed from the signature without invalidating it, which may result in confidentiality issues.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhacm2/cluster-backup-rhel8-operator@sha256:84df8f7bbfe6889cc34722d52f7d112fcadc2e4368480976a22ea03afdb6f505_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/cluster-backup-rhel8-operator@sha256:84df8f7bbfe6889cc34722d52f7d112fcadc2e4368480976a22ea03afdb6f505_arm64, rhacm2/cluster-backup-rhel8-operator@sha256:84df8f7bbfe6889cc34722d52f7d112fcadc2e4368480976a22ea03afdb6f505_arm64, rhacm2/cluster-backup-rhel8-operator@sha256:84df8f7bbfe6889cc34722d52f7d112fcadc2e4368480976a22ea03afdb6f505_arm64 |
| Red Hat | rhacm2/config-policy-controller-rhel8@sha256:55f85b107d2021d7ea7ede24c0ca91add962ad43472470a30f06f0d230d6add3_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/config-policy-controller-rhel8@sha256:55f85b107d2021d7ea7ede24c0ca91add962ad43472470a30f06f0d230d6add3_amd64, rhacm2/config-policy-controller-rhel8@sha256:55f85b107d2021d7ea7ede24c0ca91add962ad43472470a30f06f0d230d6add3_amd64, rhacm2/config-policy-controller-rhel8@sha256:55f85b107d2021d7ea7ede24c0ca91add962ad43472470a30f06f0d230d6add3_amd64 |
| Red Hat | rhacm2/insights-metrics-rhel8@sha256:62a8dc5762c7a738db542cf4cccad919ca863da7e9fbe9530fb724e0fffd2960_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/insights-metrics-rhel8@sha256:62a8dc5762c7a738db542cf4cccad919ca863da7e9fbe9530fb724e0fffd2960_arm64, rhacm2/insights-metrics-rhel8@sha256:62a8dc5762c7a738db542cf4cccad919ca863da7e9fbe9530fb724e0fffd2960_arm64, rhacm2/insights-metrics-rhel8@sha256:62a8dc5762c7a738db542cf4cccad919ca863da7e9fbe9530fb724e0fffd2960_arm64 |
| Red Hat | rhacm2/config-policy-controller-rhel8@sha256:21f8c6e8e5578e6b40ba422f5aa2abe7f19a47294b958241ac139e2881a494b4_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/config-policy-controller-rhel8@sha256:21f8c6e8e5578e6b40ba422f5aa2abe7f19a47294b958241ac139e2881a494b4_arm64, rhacm2/config-policy-controller-rhel8@sha256:21f8c6e8e5578e6b40ba422f5aa2abe7f19a47294b958241ac139e2881a494b4_arm64, rhacm2/config-policy-controller-rhel8@sha256:21f8c6e8e5578e6b40ba422f5aa2abe7f19a47294b958241ac139e2881a494b4_arm64 |
| Red Hat | rhacm2/memcached-exporter-rhel8@sha256:a26ab4de7c52eb600d5eb07ef33fbc714503b8b5afcefe6a294e09af4f78fd3a_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/memcached-exporter-rhel8@sha256:a26ab4de7c52eb600d5eb07ef33fbc714503b8b5afcefe6a294e09af4f78fd3a_ppc64le, rhacm2/memcached-exporter-rhel8@sha256:a26ab4de7c52eb600d5eb07ef33fbc714503b8b5afcefe6a294e09af4f78fd3a_ppc64le, rhacm2/memcached-exporter-rhel8@sha256:a26ab4de7c52eb600d5eb07ef33fbc714503b8b5afcefe6a294e09af4f78fd3a_ppc64le |
| Red Hat | rhacm2/klusterlet-addon-controller-rhel8@sha256:9dfe58ac239cbdd55ed4bfcac8e713327e0251ea62f726ab92baea7c3d1b9e22_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | *, *, rhacm2/klusterlet-addon-controller-rhel8@sha256:9dfe58ac239cbdd55ed4bfcac8e713327e0251ea62f726ab92baea7c3d1b9e22_amd64 |
| Red Hat | rhacm2/acm-prometheus-config-reloader-rhel8@sha256:f0003a4ce59af9427c02f0648149296bc4f28807072cf399decbb0d39eb911ca_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/acm-prometheus-config-reloader-rhel8@sha256:f0003a4ce59af9427c02f0648149296bc4f28807072cf399decbb0d39eb911ca_s390x, rhacm2/acm-prometheus-config-reloader-rhel8@sha256:f0003a4ce59af9427c02f0648149296bc4f28807072cf399decbb0d39eb911ca_s390x, * |
| Red Hat | rhacm2/multiclusterhub-rhel8@sha256:bb79fa7c865f501f406a759826334ce82216804473c0623a29176502305e54bf_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | *, rhacm2/multiclusterhub-rhel8@sha256:bb79fa7c865f501f406a759826334ce82216804473c0623a29176502305e54bf_s390x, rhacm2/multiclusterhub-rhel8@sha256:bb79fa7c865f501f406a759826334ce82216804473c0623a29176502305e54bf_s390x |
| Red Hat | rhacm2/metrics-collector-rhel8@sha256:c1ac14d74f362def874cb3bb64f94eb4dc345aba77b4ae1a13cf37db608093ef_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/metrics-collector-rhel8@sha256:c1ac14d74f362def874cb3bb64f94eb4dc345aba77b4ae1a13cf37db608093ef_amd64, rhacm2/metrics-collector-rhel8@sha256:c1ac14d74f362def874cb3bb64f94eb4dc345aba77b4ae1a13cf37db608093ef_amd64, rhacm2/metrics-collector-rhel8@sha256:c1ac14d74f362def874cb3bb64f94eb4dc345aba77b4ae1a13cf37db608093ef_amd64 |
| Red Hat | rhacm2/node-exporter-rhel8@sha256:df8eb0e90dd2d290a7f886f2b8712ca51a36d0593a0625781408fecdaeddf556_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | *, rhacm2/node-exporter-rhel8@sha256:df8eb0e90dd2d290a7f886f2b8712ca51a36d0593a0625781408fecdaeddf556_amd64, rhacm2/node-exporter-rhel8@sha256:df8eb0e90dd2d290a7f886f2b8712ca51a36d0593a0625781408fecdaeddf556_amd64 |
| Red Hat | rhacm2/memcached-exporter-rhel8@sha256:b699c481c31fe0238352a090e0258f80212e37339d489f6ffd7e0080b8f1cabc_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/memcached-exporter-rhel8@sha256:b699c481c31fe0238352a090e0258f80212e37339d489f6ffd7e0080b8f1cabc_s390x, *, rhacm2/memcached-exporter-rhel8@sha256:b699c481c31fe0238352a090e0258f80212e37339d489f6ffd7e0080b8f1cabc_s390x |
| Red Hat | rhacm2/endpoint-monitoring-rhel8-operator@sha256:e649998dd8a1a2b2e6a9e4756c93b055a080d7aae57cdfb0c31e5c3a3f8350f7_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/endpoint-monitoring-rhel8-operator@sha256:e649998dd8a1a2b2e6a9e4756c93b055a080d7aae57cdfb0c31e5c3a3f8350f7_s390x, rhacm2/endpoint-monitoring-rhel8-operator@sha256:e649998dd8a1a2b2e6a9e4756c93b055a080d7aae57cdfb0c31e5c3a3f8350f7_s390x, rhacm2/endpoint-monitoring-rhel8-operator@sha256:e649998dd8a1a2b2e6a9e4756c93b055a080d7aae57cdfb0c31e5c3a3f8350f7_s390x |
| Red Hat | rhacm2/multicluster-operators-channel-rhel8@sha256:64f9a95a1e938f1bbb2b4eacbe732e6bf5da3d5aa46ef6fa75b64c3425dd929b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | *, *, rhacm2/multicluster-operators-channel-rhel8@sha256:64f9a95a1e938f1bbb2b4eacbe732e6bf5da3d5aa46ef6fa75b64c3425dd929b_amd64 |
| Red Hat | rhacm2/cluster-backup-rhel8-operator@sha256:36f47ed44f1c829cf2101f433bdef366a02d8e6cd5e457fe5b03822fbaffc638_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/cluster-backup-rhel8-operator@sha256:36f47ed44f1c829cf2101f433bdef366a02d8e6cd5e457fe5b03822fbaffc638_s390x, rhacm2/cluster-backup-rhel8-operator@sha256:36f47ed44f1c829cf2101f433bdef366a02d8e6cd5e457fe5b03822fbaffc638_s390x, rhacm2/cluster-backup-rhel8-operator@sha256:36f47ed44f1c829cf2101f433bdef366a02d8e6cd5e457fe5b03822fbaffc638_s390x |
| Red Hat | rhacm2/acm-prometheus-config-reloader-rhel8@sha256:833842764ca7579a7b2877382f8f28ef28750865ed9dcf74d2106eb288109f88_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | *, *, rhacm2/acm-prometheus-config-reloader-rhel8@sha256:833842764ca7579a7b2877382f8f28ef28750865ed9dcf74d2106eb288109f88_arm64 |
| Red Hat | rhacm2/acm-governance-policy-framework-addon-rhel8@sha256:ccf61b0dad54ea979eda40cc6564c2c4d8c1e0184f03fe9c9d41b82d999c6f00_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/acm-governance-policy-framework-addon-rhel8@sha256:ccf61b0dad54ea979eda40cc6564c2c4d8c1e0184f03fe9c9d41b82d999c6f00_arm64, rhacm2/acm-governance-policy-framework-addon-rhel8@sha256:ccf61b0dad54ea979eda40cc6564c2c4d8c1e0184f03fe9c9d41b82d999c6f00_arm64, * |
| Red Hat | rhacm2/acm-search-indexer-rhel8@sha256:50e4b8ccf441670a3e2497c65e66d188858874bf859cf9c6d4d7ea13c08f40eb_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/acm-search-indexer-rhel8@sha256:50e4b8ccf441670a3e2497c65e66d188858874bf859cf9c6d4d7ea13c08f40eb_amd64, rhacm2/acm-search-indexer-rhel8@sha256:50e4b8ccf441670a3e2497c65e66d188858874bf859cf9c6d4d7ea13c08f40eb_amd64, rhacm2/acm-search-indexer-rhel8@sha256:50e4b8ccf441670a3e2497c65e66d188858874bf859cf9c6d4d7ea13c08f40eb_amd64 |
| Red Hat | rhacm2/grafana-dashboard-loader-rhel8@sha256:257f85cad19117134c9337ae9b7220cbf59e2a246623613bdb3f63bcfeed7deb_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/grafana-dashboard-loader-rhel8@sha256:257f85cad19117134c9337ae9b7220cbf59e2a246623613bdb3f63bcfeed7deb_amd64, *, rhacm2/grafana-dashboard-loader-rhel8@sha256:257f85cad19117134c9337ae9b7220cbf59e2a246623613bdb3f63bcfeed7deb_amd64 |
| Red Hat | rhacm2/multicluster-operators-channel-rhel8@sha256:593cfc03ba919ac582c2eb3d68ef313ae26015e634cf6ed0e8540725dbc37905_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | *, *, rhacm2/multicluster-operators-channel-rhel8@sha256:593cfc03ba919ac582c2eb3d68ef313ae26015e634cf6ed0e8540725dbc37905_ppc64le |
| Red Hat | rhacm2/metrics-collector-rhel8@sha256:3f898a297c57c5f04662c25c38459878ced678d66e389b4731146240f046d50c_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8 | rhacm2/metrics-collector-rhel8@sha256:3f898a297c57c5f04662c25c38459878ced678d66e389b4731146240f046d50c_s390x, rhacm2/metrics-collector-rhel8@sha256:3f898a297c57c5f04662c25c38459878ced678d66e389b4731146240f046d50c_s390x, rhacm2/metrics-collector-rhel8@sha256:3f898a297c57c5f04662c25c38459878ced678d66e389b4731146240f046d50c_s390x |
…and 155 more
Timeline
- Oct 28, 2024 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 29, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:8546 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.9/html/release_notes/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8546.json advisory
- https://access.redhat.com/security/cve/CVE-2024-42459 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2302458 issue
- https://www.cve.org/CVERecord?id=CVE-2024-42459 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42459 advisory
- https://github.com/indutny/elliptic/pull/317 advisory
- https://access.redhat.com/security/cve/CVE-2024-42460 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2302459 issue
- https://www.cve.org/CVERecord?id=CVE-2024-42460 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42460 advisory
- https://access.redhat.com/security/cve/CVE-2024-42461 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2302460 issue
- https://www.cve.org/CVERecord?id=CVE-2024-42461 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42461 advisory
- https://github.com/advisories/GHSA-49q7-c7j4-3p7m advisory
- https://access.redhat.com/security/cve/CVE-2024-48949 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2317724 issue
…and 4 more