VDB
RHSA-2025%3A0875
RHSA-2025%3A0875
PUBLISHED
CVSS 4.400000095367432 MEDIUM
cross-spawn: regular expression denial of service
Risk Scores
CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-smb-csi-driver-rhel9@sha256:48404695ef72bb33bdc3f167ac42d915beaf445296f5f7d06a4699f91e06d6ed_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, * |
| Red Hat | openshift4/ose-dpu-rhel9-operator@sha256:77b4343f4dc9abdd6f1c1451bcd1c8a6e15c1372a6cd357c959ab5cb6a129aba_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, * |
| Red Hat | openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:e6b9f5c9b6ad44416a8fb8ccc0f9ba56b1afd6ce7fe480f1832f817a0242b1c0_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:e6b9f5c9b6ad44416a8fb8ccc0f9ba56b1afd6ce7fe480f1832f817a0242b1c0_amd64, *, * |
| Red Hat | openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:bdafc919ec339edff688bdf6375e265a0270086f73d957c353f03c3b324ea832_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, * |
| Red Hat | openshift4/kubernetes-nmstate-rhel9-operator@sha256:bf1197d47e48a2355497deba62bdfaab5c43dd284db5bcaec69262329667ba6b_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/kubernetes-nmstate-rhel9-operator@sha256:bf1197d47e48a2355497deba62bdfaab5c43dd284db5bcaec69262329667ba6b_ppc64le, openshift4/kubernetes-nmstate-rhel9-operator@sha256:bf1197d47e48a2355497deba62bdfaab5c43dd284db5bcaec69262329667ba6b_ppc64le, openshift4/kubernetes-nmstate-rhel9-operator@sha256:bf1197d47e48a2355497deba62bdfaab5c43dd284db5bcaec69262329667ba6b_ppc64le |
| Red Hat | openshift4/ose-local-storage-mustgather-rhel9@sha256:72ecf82d885a9cad43952f25e52c85c1f91c0fd382d365e063d4f4bf42694ad7_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-local-storage-mustgather-rhel9@sha256:72ecf82d885a9cad43952f25e52c85c1f91c0fd382d365e063d4f4bf42694ad7_ppc64le, *, openshift4/ose-local-storage-mustgather-rhel9@sha256:72ecf82d885a9cad43952f25e52c85c1f91c0fd382d365e063d4f4bf42694ad7_ppc64le |
| Red Hat | openshift4/ose-sriov-network-webhook-rhel9@sha256:771af028d9485ba39e9d9c604e6e7d0bbf567b8cdb873e0dee2d22d0f496a3c8_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, * |
| Red Hat | openshift4/ose-local-storage-diskmaker-rhel9@sha256:f9264df2afb778b7ed88d2cfe391a154ab21254fe937cab2568a5c9f83c166cd_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-local-storage-diskmaker-rhel9@sha256:f9264df2afb778b7ed88d2cfe391a154ab21254fe937cab2568a5c9f83c166cd_amd64, openshift4/ose-local-storage-diskmaker-rhel9@sha256:f9264df2afb778b7ed88d2cfe391a154ab21254fe937cab2568a5c9f83c166cd_amd64, openshift4/ose-local-storage-diskmaker-rhel9@sha256:f9264df2afb778b7ed88d2cfe391a154ab21254fe937cab2568a5c9f83c166cd_amd64 |
| Red Hat | openshift4/ose-egress-dns-proxy-rhel9@sha256:7212ab08680e3cd9717eae4c1159ea73c2260fce2c4803cf8fe7f6141542a6a4_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, * |
| Red Hat | openshift4/ose-egress-http-proxy-rhel9@sha256:a68452aee45eaa886243f30b4f9bf9212d110a5c0091caa0bf05502901f722aa_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-egress-http-proxy-rhel9@sha256:a68452aee45eaa886243f30b4f9bf9212d110a5c0091caa0bf05502901f722aa_s390x, openshift4/ose-egress-http-proxy-rhel9@sha256:a68452aee45eaa886243f30b4f9bf9212d110a5c0091caa0bf05502901f722aa_s390x, openshift4/ose-egress-http-proxy-rhel9@sha256:a68452aee45eaa886243f30b4f9bf9212d110a5c0091caa0bf05502901f722aa_s390x |
| Red Hat | openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:7a9e613f79e61eae06422999945ab9e641bee490ff3119ba477ab067b4e9a9b6_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, * |
| Red Hat | openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:9426812fbf4807ff1a87825964444266849413c927b162d9894e6fd44e5d270f_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, * |
| Red Hat | openshift4/ose-ptp-rhel9@sha256:ae77152c49a50479263503ca8d3d7e0e509cb5842a9df75914d2cb8be5267009_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, * |
| Red Hat | openshift4/ose-smb-csi-driver-rhel9@sha256:f6916556cd18a46007e52201fbd63bf6970807a91291a2f237167b05a9a6b3e1_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, * |
| Red Hat | openshift4/ose-egress-router-rhel9@sha256:a212ce3c751490be6d58eac825b1dda5617486dd6ff0af5a3f5afca275e16685_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, * |
| Red Hat | openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:78bdba0bc09e170409dfa752cb94db9d466474025bc16937591f4b8e033964cc_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, * |
| Red Hat | openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:fae5d651b0e38d8c0b9ff17580528b60c6b16a97dba6f30ba1e771010c06f9fb_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:fae5d651b0e38d8c0b9ff17580528b60c6b16a97dba6f30ba1e771010c06f9fb_amd64, openshift4/ose-secrets-store-csi-mustgather-rhel9@sha256:fae5d651b0e38d8c0b9ff17580528b60c6b16a97dba6f30ba1e771010c06f9fb_amd64, * |
| Red Hat | openshift4/ose-operator-sdk-rhel9@sha256:4106fbe6b983936f8ca815876f87b196127acfadad42d293a4b177c5c2599d4a_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, * |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5558a53762bfa34f2b4993cc2e220efc6e97e8aaf46a35980478910fcc356aac_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5558a53762bfa34f2b4993cc2e220efc6e97e8aaf46a35980478910fcc356aac_arm64, *, openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:5558a53762bfa34f2b4993cc2e220efc6e97e8aaf46a35980478910fcc356aac_arm64 |
| Red Hat | openshift4/ose-node-feature-discovery-rhel9@sha256:7a0fee5626d33e2437243739de29eec53843e4de5fb8aac7bc3950d57f8dfb5c_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-node-feature-discovery-rhel9@sha256:7a0fee5626d33e2437243739de29eec53843e4de5fb8aac7bc3950d57f8dfb5c_amd64, openshift4/ose-node-feature-discovery-rhel9@sha256:7a0fee5626d33e2437243739de29eec53843e4de5fb8aac7bc3950d57f8dfb5c_amd64, openshift4/ose-node-feature-discovery-rhel9@sha256:7a0fee5626d33e2437243739de29eec53843e4de5fb8aac7bc3950d57f8dfb5c_amd64 |
…and 354 more
Timeline
- Feb 5, 2025 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:0875 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2310908 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2311152 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2311153 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2311154 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2311171 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2322949 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2324550 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2330689 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2331063 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2333122 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2333854 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2333856 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0875.json advisory
- https://access.redhat.com/security/cve/CVE-2024-21538 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-21538 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-21538 advisory
- https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff advisory
- https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f advisory
…and 64 more