What is RHSA-2023:0471?

RHSA-2023:0471 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: Migration Toolkit for Runtimes security update

Which CVE IDs does RHSA-2023:0471 cover?

RHSA-2023:0471 covers the following CVE IDs: CVE-2022-25914, CVE-2022-37603, CVE-2022-42003, CVE-2022-42004, CVE-2022-42920, CVE-2022-3517. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2023:0471?

RHSA-2023:0471 has a CVSS v3 base score of 9.8, published by Red Hat Product Security.

Which products are affected by RHSA-2023:0471?

RHSA-2023:0471 affects 1 product, including: Migration Toolkit for Runtimes 1 on RHEL 8.

RHSA-2023:0471HighCVSS 9.8

Red Hat Security Advisory: Migration Toolkit for Runtimes security update

Vendor

Red Hat Product Security

Published

January 26, 2023

Last Modified

August 4, 2026

🔗 CVE IDs covered (6)

CVE-2022-25914 →CVE-2022-37603 →CVE-2022-42003 →CVE-2022-42004 →CVE-2022-42920 →CVE-2022-3517 →

📋 Description

CVE-2022-3517 — nodejs-minimatch: ReDoS via the braceExpand function CVE-2022-25914 — jib-core: RCE via the isDockerInstalled CVE-2022-37603 — loader-utils: Regular expression denial of service CVE-2022-42003 — jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS CVE-2022-42004 — jackson-databind: use of deeply nested arrays CVE-2022-42920 — Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing

🎯 Affected products1

Migration Toolkit for Runtimes 1 on RHEL 8

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 CVE IDs covered (6)

📋 Description

🎯 Affected products1

✅ Remediation

🔗 References (10)