RHBA-2024:1246HighCVSS 8.7

Red Hat Bug Fix Advisory: Multicluster Engine for Kubernetes 2.4.4 bug fixes

Published
March 11, 2024
Last Modified
October 15, 2026

🔗 CVE IDs covered (3)

CVE-2023-28842 →CVE-2023-28840 →CVE-2023-28841 →

📋 Description

CVE-2023-28840 — moby: Encrypted overlay network may be unauthenticated CVE-2023-28841 — moby: Encrypted overlay network traffic may be unencrypted CVE-2023-28842 — moby: Encrypted overlay network with a single endpoint is unauthenticated

🎯 Affected products165

  • multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/addon-manager-rhel8@sha256:40d3711c6ff4339e3d204a4844b33a811c65acdc91def97e33e4af86aa989912_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/addon-manager-rhel8@sha256:b87af8eaca79747f375ab8c43731cb058a7f0a9ec7d0375441c23c20be313336_amd64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/addon-manager-rhel8@sha256:ba0158716e20f72cf32db2bd94f6fb90d8cabca3a397d28b193e6b683f0ff28b_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/addon-manager-rhel8@sha256:dfa9bd4985f298a0dad9b54aa89de1c3a3682854deb003d40d21d83553df676f_arm64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:08ed3fc1b1a0b1480ee19691665c9430ce09b71a298bbf9ce723f59b91ec6cdc_amd64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:653e08355de89b9801b16beacdc376528c76a1c632b8173333d02a13dae21f34_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:b77555f4cb29d22bce45c1f87db943101f65bb494ef4c6c40122f6037ffc0697_arm64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/agent-service-rhel8@sha256:d0f872558d2ac8dca6a9ba292671dcd53834756e39043eb847a96c8bfa706677_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:66fca73be2187312ed07c1a873788b6c9dce4d7344cf2487a184ef1fd6430a4e_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:72e2916d8198e173d03b3b77593c95e5dbc385cada0a6549620e02251c905a3d_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:8eb1845a2f9904e5a12728bcaa2eea113f3a3b4b2e5e84f3f96a7a7ad7d59e84_amd64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/apiserver-network-proxy-rhel8@sha256:9220b4c5e3489da9ce1ab3e07e35016a1aacc4a5c7fc6de9c634b6c8c39d49b5_arm64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:4f14845f4e481ecb24ae857d82c2d12f2a3541cc011a9001d48a76a172aeaa9d_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:969ef7d81b1b1f408e97ae7bf42bedcec86c153e3c4e1be38730541bd96628db_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:e061f4fec4e4eee1668e11c473c31809bb9e0fb657ec6109ff0de08b64741f19_amd64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-image-service-rhel8@sha256:f09dd8d7835b2ccd276be0961f7e88f99ba320b9561b5c3378fca3000a05d9c4_arm64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:19578389becf299ed4102db2c069182b40a631c79e841b6f7d2e94392124c5c1_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:9290806a9c497eae1dfccd4922e613bbf9605c44ad879f3693f6283d1d73933f_amd64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:ca8d86079cd97908146284f1da90964c78cae7b9e45b7f44fb4c3c5e44c0cfb2_arm64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-installer-agent-rhel8@sha256:f31ba22082439fdf1f6a438d3b837c13e8031c1742286c508364581193fd7cf7_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:69581e8295001fedcdad382c4c09520e4642cff9b4ab166db65927b650285d53_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:b1bfba85d2c6067229707b1a46a010420c0a34e895efc92ed25c90ecb0430b64_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:b60541fe6e5019ac2b1b70196c7fb6bae25f8ce1dc935231b025911f348b8591_amd64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-installer-reporter-rhel8@sha256:ed81406ef743c04d911e2c7f8263703543349c40a8bc736b4f24bda671ddd6b1_arm64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:add3690609ff85c12aceb6f38bf694b7e78b8f0adcf7f59a4b0ff1489689af5b_amd64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:e6b55fe38c36a10ce8ff0ebd0b6dc21ae5a06e7cb6770f8d7e45d1f637d19e43_s390x as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:ef96548bf355206bae018d326f1bd645f260f80081a7a1b3f48c2970ecd02b3e_arm64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/assisted-installer-rhel8@sha256:fe881cadc0c5aa0fcbc70f9517e3f8058d275e6dbab289e9a96f7bb49c015024_ppc64le as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • multicluster-engine/aws-encryption-provider-rhel8@sha256:68e8e07d3fdd8d294d0bb4c3a1e99e90570d940eaaa044a248cea84d786a4515_arm64 as a component of multicluster engine for Kubernetes 2.4 for RHEL 8
  • +135 more not shown

✅ Remediation

For multicluster engine for Kubernetes, see the following documentation for details on how to install the images: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.9/html/clusters/cluster_mce_overview#installing-while-connected-online-mce

🔗 References (4)