VDB
RHSA-2024:4699
RHSA-2024:4699
PUBLISHED
CVSS 5.900000095367432 MEDIUM
The dnspython stub resolver is vulnerable to a denial of service (DoS) risk if an attacker sends a malicious response forged with the correct address and port before a legitimate one arrives on the UDP port used by dnspython for the query. In such cases, dnspython could either switch to another resolver or abandon the query altogether, potentially leading to service denial for that resolution.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:ecaccfd0a4d3f77ef99f773f3eb2871e88c4475cd21f88c3b08de65d981a5415_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/driver-toolkit-rhel9@sha256:ecaccfd0a4d3f77ef99f773f3eb2871e88c4475cd21f88c3b08de65d981a5415_arm64 |
| Red Hat | openshift4/ose-ibm-vpc-block-csi-driver-rhel9@sha256:c63a68eb09d9e1ded1903c233326a1460ae953b6d8852e8bb847ec9153db0b9f_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-openshift-apiserver-rhel9@sha256:bebb0cd840636d5842f25d072e53cb8d035c7e365ec180ce1dd886ec671b8605_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-openshift-apiserver-rhel9@sha256:bebb0cd840636d5842f25d072e53cb8d035c7e365ec180ce1dd886ec671b8605_amd64 |
| Red Hat | openshift4/ose-network-metrics-daemon-rhel9@sha256:8a57f22dc7a4dd355bfd1a3de125d8084c932053b6398f0a69a19a604fdcd3f8_s390x as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-tests@sha256:eb7ad16f148fb65aeb21e3e456a2cd73c599bda90466d4f27abe2e055e1720e7_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel9@sha256:bbbb8eb3dd778ff6810285183a67269433ab438a2f1c04fe4e3769e107273fb6_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-agent-installer-node-agent-rhel9@sha256:bbbb8eb3dd778ff6810285183a67269433ab438a2f1c04fe4e3769e107273fb6_amd64 |
| Red Hat | openshift4/ose-console@sha256:63f79a96d5ba388ad733d807add1e0ac34ba444c67d3b77fbadce11e555b8046_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:3d1ddf83d574fad19230cb3106aca6cf53ed96d2984cd6c125de2ee67f069ee1_s390x as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-installer@sha256:3ccfdbc027800bf23d92071a7f00db98cda969b125ec9d996af0e67478eceb14_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-ironic-agent-rhel9@sha256:b80433434ba71e1a95e2cdd122afddfee9a166ea2cbbfc2562d080b09ef695a3_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-hypershift-rhel9@sha256:ad435a593b4ba94db75d26031fc87c8172f2c9161be1d136774ae884c728b8d5_s390x as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-tests@sha256:6bb999803ae0303f272c8a1e7d613319d382e831a28409ba9e86daaa0a77a6bc_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-tests@sha256:6bb999803ae0303f272c8a1e7d613319d382e831a28409ba9e86daaa0a77a6bc_ppc64le |
| Red Hat | openshift4/ose-ibm-vpc-block-csi-driver-rhel9@sha256:ca2d7f1c708b1e558cbaf5952d26b62e6dc4d932d27949f493820865fc871543_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-ibm-vpc-block-csi-driver-rhel9@sha256:ca2d7f1c708b1e558cbaf5952d26b62e6dc4d932d27949f493820865fc871543_s390x |
| Red Hat | rhcos@sha256:911e7b1c956e2b6528b104495b032c322c15745ed1453e94bb60fdaab968efbd_s390x as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-cluster-network-rhel9-operator@sha256:1ba64cadf3739625377a07265cd708ce17d816da151fdf9a9a9b162d340bf1e6_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-sdn-rhel9@sha256:3150a42c81df09c386dc1a455d6819f8aafd91d6fdbe1beb2099d84333065afa_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-sdn-rhel9@sha256:3150a42c81df09c386dc1a455d6819f8aafd91d6fdbe1beb2099d84333065afa_s390x |
| Red Hat | openshift4/ose-tools-rhel8@sha256:3865ce7f61685ca7933c685ba3ecb955f6a97293b6ecaa582bb8edd51e967a4d_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel9@sha256:255936cb31c1aeb1cb7b1f93b5aa43ce5b7023f0a38d808a24972344a2c7b19f_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-agent-installer-node-agent-rhel9@sha256:255936cb31c1aeb1cb7b1f93b5aa43ce5b7023f0a38d808a24972344a2c7b19f_arm64 |
| Red Hat | openshift4/ose-cluster-version-rhel9-operator@sha256:471655a30636961cbca7b74f8fb3758d3a9f42a47f994dd193359ca834b04977_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-deployer@sha256:45938b2b24c1a13f56498847aee35e6cc95e5901f0a8febcb6446e993b456342_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-deployer@sha256:45938b2b24c1a13f56498847aee35e6cc95e5901f0a8febcb6446e993b456342_arm64 |
…and 276 more
Timeline
- Jul 25, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Aug 4, 2026 CVE Updated
- Aug 4, 2026 Distribution Patch
- Aug 4, 2026 Security Advisory
- Aug 4, 2026 Security Advisory
- Aug 4, 2026 Security Advisory
- Aug 4, 2026 Security Advisory
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2294000 issue
- https://issues.redhat.com/browse/OCPBUGS-30139 advisory
- https://issues.redhat.com/browse/OCPBUGS-34809 advisory
- https://issues.redhat.com/browse/OCPBUGS-35758 advisory
- https://issues.redhat.com/browse/OCPBUGS-35888 advisory
- https://issues.redhat.com/browse/OCPBUGS-36208 advisory
- https://issues.redhat.com/browse/OCPBUGS-36451 advisory
- https://issues.redhat.com/browse/OCPBUGS-36466 advisory
- https://issues.redhat.com/browse/OCPBUGS-36842 advisory
- https://issues.redhat.com/browse/OCPBUGS-36971 advisory
- https://issues.redhat.com/browse/OCPBUGS-37067 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4699.json advisory
- https://access.redhat.com/security/cve/CVE-2023-29483 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-45288 advisory
- https://nowotarski.info/http2-continuation-flood/ advisory
- https://pkg.go.dev/vuln/GO-2024-2687 advisory
- https://www.kb.cert.org/vuls/id/421644 advisory
- https://access.redhat.com/security/cve/CVE-2024-1394 advisory
- https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6 advisory
- https://vuln.go.dev/ID/GO-2024-2660.json advisory
…and 26 more