Threats Tagged 'cve-2024-49768'

Red Hat OpenShift Container Platform 4.15.39 includes security updates addressing two vulnerabilities in the python-waitress package. These vulnerabilities involve a request processing race condition in HTTP pipelining with an invalid first request (CVE-2024-49768) and a denial of service condition causing high CPU usage and resource exhaustion (CVE-2024-49769). Users of OpenShift Container Platform 4.15 are advised to upgrade to the updated packages and container images to mitigate these issues.

Red Hat OpenShift Container Platform 4.12.70 includes security updates addressing two vulnerabilities in the python-waitress component. The first is a race condition in HTTP pipelining with an invalid first request (CVE-2024-49768). The second is a denial of service vulnerability causing high CPU usage and resource exhaustion (CVE-2024-49769). These issues affect OpenShift Container Platform 4.12 deployments on various architectures and require updating to the fixed packages and images provided by Red Hat.

Red Hat OpenShift Container Platform 4.13.54 includes security updates addressing two vulnerabilities in the python-waitress HTTP server component. The first vulnerability (CVE-2024-49768) involves a race condition during HTTP pipelining with an invalid first request. The second vulnerability (CVE-2024-49769) is a denial of service leading to high CPU usage and resource exhaustion. These issues have been fixed in the updated packages and container images for OpenShift 4.13. Users are advised to upgrade to these updated versions to mitigate the risks.

Red Hat OpenShift Container Platform 4.16.23 includes security updates addressing two vulnerabilities in the python-waitress HTTP server. The first is a race condition in HTTP pipelining with an invalid first request (CVE-2024-49768), and the second is a denial of service vulnerability causing high CPU usage and resource exhaustion (CVE-2024-49769). These issues could impact the stability and availability of the platform. Red Hat has released updated RPM packages and container images to fix these vulnerabilities. Users of OpenShift Container Platform 4.16 are advised to upgrade to the updated packages and images via the appropriate release channels.

Red Hat OpenShift Container Platform 4.17.5 includes security updates addressing two vulnerabilities in the python-waitress HTTP server. These vulnerabilities involve a race condition in HTTP pipelining with invalid first requests (CVE-2024-49768) and a denial of service condition causing high CPU usage and resource exhaustion (CVE-2024-49769). The update is rated as having an important security impact. Users of OpenShift Container Platform 4.17 are advised to upgrade to the updated packages and container images to mitigate these issues.

Red Hat OpenShift Container Platform 4.14.41 includes security updates addressing two vulnerabilities in the python-waitress component. These vulnerabilities involve a request processing race condition in HTTP pipelining with an invalid first request (CVE-2024-49768) and a denial of service condition causing high CPU usage and resource exhaustion (CVE-2024-49769). Users of OpenShift Container Platform 4.14 are advised to upgrade to the updated packages and container images to mitigate these issues.

Two security vulnerabilities have been identified in the python-waitress WSGI server used in Red Hat OpenStack Platform 16.2. The first is a race condition in HTTP pipelining request processing with an invalid first request (CVE-2024-49768). The second is a denial of service vulnerability causing high CPU usage and resource exhaustion (CVE-2024-49769). Red Hat has issued a security update addressing these issues for Red Hat OpenStack Platform 16.2 on RHEL 8.4. The vulnerabilities are rated with an important security impact by Red Hat. No CVSS scores are provided in the advisory. Users should apply the available updates to remediate these vulnerabilities.

Two security vulnerabilities have been identified in the python-waitress WSGI server used in Red Hat OpenStack Platform 17.1. The first is a race condition in HTTP pipelining with an invalid first request (CVE-2024-49768). The second is a denial of service vulnerability that can cause high CPU usage and resource exhaustion (CVE-2024-49769). Red Hat has released an important security update addressing these issues for Red Hat OpenStack Platform 17.1 on RHEL 9. Users should apply the update as per Red Hat's guidance.

Two security vulnerabilities were identified in python-waitress, a pure-Python WSGI server used in Red Hat OpenStack Platform 17.1. The first vulnerability (CVE-2024-49768) involves a race condition in HTTP pipelining when processing an invalid first request. The second vulnerability (CVE-2024-49769) is a denial of service issue that can cause high CPU usage and resource exhaustion. Red Hat has released an important security update addressing these issues for Red Hat OpenStack Platform 17.1 on RHEL 8 x86_64.