Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-12698

Ose-olm-catalogd-container: incomplete fix for rapid reset (cve-2023-39325/cve-2023-44487)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability (CVE-2023-39325/CVE-2023-44487) where only unauthenticated streams were protected, not streams created by authenticated sources.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

catalogd

Default version status: unaffected

  • 0 to < 1.1.0affected

Red Hat Red Hat OpenShift Container Platform 4.18

Default version status: affected

  • v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9 to < *unaffected

References