RHSA-2019:2861HighCVSS 7.5
Red Hat Security Advisory: OpenShift Container Platform 4.1.18 gRPC security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2019-9512 — HTTP/2: flood using PING frames results in unbounded memory growth CVE-2019-9514 — HTTP/2: flood using HEADERS frames results in unbounded memory growth CVE-2019-9515 — HTTP/2: flood using SETTINGS frames results in unbounded memory growth
🎯 Affected products2
- Red Hat OpenShift Container Platform 4.1
- openshift4/ose-sriov-network-device-plugin@sha256:4493f9c75d46ecfcee81bbb0ca9c2579bac4ffb150b2255f8385eac50a885ca6_amd64 as a component of Red Hat OpenShift Container Platform 4.1
✅ Remediation
For OpenShift Container Platform 4.1 see the following documentation, which will be updated shortly for release 4.1.18, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.1/release_notes/ocp-4-1-release-notes.html
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2019:2861
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1735645
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1735744
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1735745
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2861.json