CVE-2018-14632
- State
- Published
- Severity
- 7.7 High
- Published
- Sep 6, 2018
- Updated
- Aug 5, 2024
- Reserved
- Jul 27, 2018
Description
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 7.7 High | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H | redhat |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
atomic-openshiftRed Hat |
|
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14632
- https://github.com/evanphx/json-patch/commit/4c9aadca8f89e349c999f04e28199e96e81aba03#diff-65c563bba473be9d94ce4d033f74810e
- RHBA-2018:2652vendor-advisory
- RHSA-2018:2654vendor-advisory
- RHSA-2018:2908vendor-advisory
- RHSA-2018:2906vendor-advisory
- RHSA-2018:2709vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.