Threats Tagged 'cve-2024-11407'

Red Hat Ansible Automation Platform 2. 5 has multiple security vulnerabilities including a denial-of-service through data corruption in gRPC-C++ (CVE-2024-11407), potential SQL injection on Oracle (CVE-2024-53908), denial-of-service in Django's strip_tags function (CVE-2024-53907), request smuggling in aiohttp (CVE-2024-52304), and mishandling of non-integer values in nanoid (CVE-2024-55565). Red Hat has released an important security advisory with updates and fixes addressing these issues in version 2. 5. The advisory includes various bug fixes and enhancements across the platform components. The vulnerabilities affect multiple architectures and versions of Red Hat Ansible Automation Platform 2. 5 for RHEL 8 and 9. The vendor advisory confirms that updates are available to remediate these vulnerabilities.

A denial of service vulnerability (CVE-2024-11407) exists in the python-grpcio component used by Red Hat Satellite 6. 16 for RHEL 8 and 9. This issue involves data corruption in gRPC-C++ that can cause service disruption. Red Hat has released updated packages in Red Hat Satellite 6. 16. 2 to address this vulnerability. Users are advised to apply these updates after ensuring all prior errata are applied. The vulnerability is rated as moderate severity by Red Hat Product Security.