Description
A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is not recovered, causing the Clair indexer process to crash, leading to a denial of service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Red Hat Advanced Cluster Security 4
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: affected
Red Hat Red Hat Advanced Cluster Security 4
Default version status: affected
Red Hat Red Hat Quay 3
Default version status: affected
Red Hat Red Hat Quay 3
Default version status: affected