CVE-2018-1070
Fixed in a distro release EPSS <1%CVSS 6.5
routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought down. A malicious user can use this vulnerability to cause a Denial of Service attack for other users of the router shard.
Products: redhat openshift_container_platform
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openshift 3.9 | atomic-openshift | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-clients | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-clients-redistributable | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-cluster-capacity | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-descheduler | 0:3.9.13-1.git.267.bb59a3f.el7 |
| Red Hat openshift 3.9 | atomic-openshift-docker-excluder | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-dockerregistry | 0:3.9.31-1.git.351.1bd46ed.el7 |
| Red Hat openshift 3.9 | atomic-openshift-excluder | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-federation-services | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-master | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-node | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-node-problem-detector | 0:3.9.13-1.git.167.5d6b0d4.el7 |
| Red Hat openshift 3.9 | atomic-openshift-pod | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-sdn-ovs | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-service-catalog | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-template-service-broker | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-tests | 0:3.9.31-1.git.0.ef9737b.el7 |
| Red Hat openshift 3.9 | atomic-openshift-utils | 0:3.9.31-1.git.34.154617d.el7 |
| Red Hat openshift 3.9 | atomic-openshift-web-console | 0:3.9.31-1.git.246.bded6a4.el7 |
| Red Hat openshift 3.9 | golang-github-prometheus-node_exporter | 0:3.9.31-1.git.890.a55de06.el7 |
| Red Hat openshift 3.9 | mysql-apb-role | 0:1.1.11-1.el7 |
| Red Hat openshift 3.9 | openshift-ansible | 0:3.9.31-1.git.34.154617d.el7 |
| Red Hat openshift 3.9 | openshift-ansible-docs | 0:3.9.31-1.git.34.154617d.el7 |
| Red Hat openshift 3.9 | openshift-ansible-playbooks | 0:3.9.31-1.git.34.154617d.el7 |
| Red Hat openshift 3.9 | openshift-ansible-roles | 0:3.9.31-1.git.34.154617d.el7 |
| Red Hat openshift 3.9 | prometheus-node-exporter | 0:3.9.31-1.git.890.a55de06.el7 |