Threats Tagged 'cve-2024-41946'

Multiple denial-of-service (DoS) vulnerabilities have been identified in the rubygem-rexml library used by the pcs packages, which provide command-line configuration for Pacemaker and Corosync utilities in Red Hat Enterprise Linux 8. These vulnerabilities involve parsing XML with many specific characters, potentially causing resource exhaustion. Red Hat has issued a security advisory with updates to address these issues in the pcs packages for various architectures and extended life cycle versions of RHEL 8.

Multiple denial-of-service (DoS) vulnerabilities have been identified in the rubygem-rexml library used by the pcs packages, which provide command-line configuration for Pacemaker and Corosync utilities in Red Hat Enterprise Linux. These vulnerabilities (CVE-2024-41123, CVE-2024-41946, CVE-2024-43398) involve DoS conditions triggered by parsing XML with specific characters. Red Hat has released security updates for these issues affecting various Red Hat Enterprise Linux 8.8 Extended Update Support variants. The update is rated as having moderate security impact.