Threats Tagged 'cve-2024-45813'

Red Hat Advanced Cluster Management for Kubernetes 2. 12. 1 includes fixes for multiple bugs, notably addressing two Regular Expression Denial of Service (ReDoS) vulnerabilities identified as CVE-2024-45296 and CVE-2024-45813. These vulnerabilities involve backtracking regular expressions and multiparametric routes that could be exploited to cause denial of service conditions. The update is rated with a moderate security impact by Red Hat Product Security. No known exploits are reported in the wild at this time. The advisory recommends applying this update after ensuring all previous errata have been applied.

Red Hat Advanced Cluster Management for Kubernetes version 2. 11. 4 addresses multiple security vulnerabilities including ReDoS caused by backtracking regular expressions (CVE-2024-45296), ReDoS in multiparametric routes (CVE-2024-45813), and an XSS vulnerability via prototype pollution (CVE-2024-45801). These issues are fixed in updated container images provided by Red Hat. The advisory rates the overall security impact as moderate. The update also includes various bug fixes unrelated to security. Users should ensure all previous errata are applied before updating to this version.