6.5

CVE-2023-0056

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Haproxy ≫ Haproxy Version -
Redhat ≫ Ceph Storage Version 5.0
Redhat ≫ Openshift Container Platform Version 4.12
   Redhat ≫ Enterprise Linux Version 9.0
Redhat ≫ Openshift Container Platform For Power Version 4.12
   Redhat ≫ Enterprise Linux Version 9.0
Redhat ≫ Openshift Container Platform Version 4.10 HwPlatform arm64
Redhat ≫ Openshift Container Platform Version 4.11 HwPlatform arm64
Redhat ≫ Openshift Container Platform Version 4.12 HwPlatform arm64
Redhat ≫ Openshift Container Platform Version 4.10
   Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Openshift Container Platform For Power Version 4.10
   Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Openshift Container Platform Version 4.11
   Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Openshift Container Platform For Power Version 4.11
   Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Openshift Container Platform Version 4.12
   Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Openshift Container Platform For Power Version 4.12
   Redhat ≫ Enterprise Linux Version 8.0
Fedoraproject ≫ Fedora Version 36
Fedoraproject ≫ Fedora Version 37
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.83% 0.761
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA-ADP 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://access.redhat.com/security/cve/CVE-2023-0056
Vendor Advisory