RHSA-2023:5379HighCVSS 7.5

Red Hat Security Advisory: Network Observability 1.4.0 for OpenShift

Published
September 28, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (2)

CVE-2022-25883 →CVE-2023-26115 →

📋 Description

CVE-2022-25883 — nodejs-semver: Regular expression denial of service CVE-2023-26115 — word-wrap: ReDoS

🎯 Affected products21

  • NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-console-plugin-rhel9@sha256:0211283244126419a203cbca952135abd4f44dde06071344dc77400b9a868e61_arm64 as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-console-plugin-rhel9@sha256:5359d3c92203cfa3eeda959c96677526e8b3cefde46f59d0548379840e3e35e6_ppc64le as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-console-plugin-rhel9@sha256:a4b5cfad89aeff1cc0798caa932b59444c39b06f04d41846859476530f669ad9_amd64 as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-console-plugin-rhel9@sha256:adf7cff9e8861773f73e5d30940f25565474233029837c4d55a979a1fa926582_s390x as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-ebpf-agent-rhel9@sha256:301e4df92311d658a96dae2d3ff02a2ada999de89545ef96c4ec651faf54b25f_arm64 as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-ebpf-agent-rhel9@sha256:5353df15da0a204e5672dfee4f95e6ad17cadb033f8ac827904d50ce01e01a5a_s390x as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-ebpf-agent-rhel9@sha256:79ca8ed3d7436c87c5b7bce35da7b9aba47d8ce9367988e5b169fd46c2d816a5_amd64 as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-ebpf-agent-rhel9@sha256:ffb45ad2a13c481c9ce6d29795c3b9182e5fe45d2ae2d48bbcfd8058e2aa3319_ppc64le as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:05e733ec54543d5f675ee1f6f27f644a90c9ab30f9678266921cd1c14a9554c7_arm64 as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:10d863f938182620abf90b0ce533121e78f240166eee1bb62fd8134c126c88fd_s390x as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:6e22bcf4ce8ce50501fb2101205940e072ec2ffb7037f487c8b81a527cfc9d5a_amd64 as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b58f7999d572ec7e5acef3af3d97f1ee8e20e393502df9971b8a0b0bbe886dee_ppc64le as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-operator-bundle@sha256:0932d209dbfe7d611e4d2362f0ffc7c17757670b80b691c3fcd7472859ac8128_arm64 as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-operator-bundle@sha256:25dfc5ecfc1614d67a9768b8cebb58367cac16c5e541646bb2dc13d75c705bdd_amd64 as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-operator-bundle@sha256:78c28048adcd4b2df279ba3bb33dc8082d60430fb121e686d1d2774615c0454f_ppc64le as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-operator-bundle@sha256:e24584ac071694868f26d429505241662c0afd625fdaac6f1b9fabba52060a26_s390x as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-rhel9-operator@sha256:0ba541a7141826d6d6f2755add1fd0487ded4a0db34d74733d590d137dcf0da1_amd64 as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-rhel9-operator@sha256:632512065b6c3261f599a43bb9a52354bade428ddc7047f123866b8c5b09940b_arm64 as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-rhel9-operator@sha256:83a93f8a7ce0baf98dac07bce26e9340be70966fa8d45132c36be38c5338237f_s390x as a component of NETOBSERV 1.4 for RHEL 9
  • network-observability/network-observability-rhel9-operator@sha256:f766d0fd8688450dbddd31a7d761800e59b1ad681bda11e2ed26efe7403e8ec0_ppc64le as a component of NETOBSERV 1.4 for RHEL 9

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (20)