RHSA-2024:7726HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.2

Published
October 7, 2024
Last Modified
July 22, 2026

🔗 CVE IDs covered (10)

CVE-2024-7264 →CVE-2024-43788 →CVE-2024-43799 →CVE-2024-45296 →CVE-2024-45806 →CVE-2024-45810 →CVE-2024-43796 →CVE-2024-43800 →CVE-2024-45590 →CVE-2024-45808 →

📋 Description

CVE-2024-7264 — curl: libcurl: ASN.1 date parser overread CVE-2024-43788 — webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule CVE-2024-43796 — express: Improper Input Handling in Express Redirects CVE-2024-43799 — send: Code Execution Vulnerability in Send Library CVE-2024-43800 — serve-static: Improper Sanitization in serve-static CVE-2024-45296 — path-to-regexp: Backtracking regular expressions cause ReDoS CVE-2024-45590 — body-parser: Denial of Service Vulnerability in body-parser CVE-2024-45806 — envoy: Potential to manipulate x-envoy headers from external sources CVE-2024-45808 — envoy: Malicious log injection via access logs CVE-2024-45810 — envoy: Envoy crashes for LocalReply in HTTP async client

🔗 References (16)