What is the severity of RHSA-2023:1079?

The severity of RHSA-2023:1079 is considered high due to potential unbounded memory consumption vulnerabilities.

How do I fix RHSA-2023:1079?

To fix RHSA-2023:1079, apply the latest security updates provided by Red Hat for your affected software.

What vulnerabilities are addressed in RHSA-2023:1079?

RHSA-2023:1079 addresses two vulnerabilities: CVE-2022-2879 related to unbounded memory consumption in archive/tar and CVE-2022-41715 concerning regex parsing.

Who is affected by RHSA-2023:1079?

Any users running the affected versions of Red Hat software with the specified vulnerabilities are at risk from RHSA-2023:1079.

What are the potential impacts of not addressing RHSA-2023:1079?

Failing to address RHSA-2023:1079 may lead to excessive memory consumption and potential denial of service due to exploitation of the vulnerabilities.

Vulnerability/
RHSA-2023:1079

6/3/2023

RHSA-2023:1079: Moderate: Red Hat OpenStack Platform 16.2 (osp-director-downloader-container, osp-director-agent-container and osp-director-operator-container) security update

First published: Mon Mar 06 2023(Updated: )

Security Fix(es): <li> archive/tar: unbounded memory consumption when reading headers</li> (CVE-2022-2879) <li> regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)</li> <li> net/<a href="http:" target="_blank">http:</a> An attacker can cause excessive memory growth in a Go server</li> accepting HTTP/2 requests (CVE-2022-41717) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Affected Software	Affected Version	How to fix

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of RHSA-2023:1079?
The severity of RHSA-2023:1079 is considered high due to potential unbounded memory consumption vulnerabilities.
How do I fix RHSA-2023:1079?
To fix RHSA-2023:1079, apply the latest security updates provided by Red Hat for your affected software.
What vulnerabilities are addressed in RHSA-2023:1079?
RHSA-2023:1079 addresses two vulnerabilities: CVE-2022-2879 related to unbounded memory consumption in archive/tar and CVE-2022-41715 concerning regex parsing.
Who is affected by RHSA-2023:1079?
Any users running the affected versions of Red Hat software with the specified vulnerabilities are at risk from RHSA-2023:1079.
What are the potential impacts of not addressing RHSA-2023:1079?
Failing to address RHSA-2023:1079 may lead to excessive memory consumption and potential denial of service due to exploitation of the vulnerabilities.

collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2023:1079
agent/description
agent/event
agent/first-publish-date
agent/last-modified-date
agent/references
agent/remedy
agent/severity
agent/softwarecombine
agent/tags
agent/title
agent/type

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of RHSA-2023:1079?
The severity of RHSA-2023:1079 is considered high due to potential unbounded memory consumption vulnerabilities.
How do I fix RHSA-2023:1079?
To fix RHSA-2023:1079, apply the latest security updates provided by Red Hat for your affected software.
What vulnerabilities are addressed in RHSA-2023:1079?
RHSA-2023:1079 addresses two vulnerabilities: CVE-2022-2879 related to unbounded memory consumption in archive/tar and CVE-2022-41715 concerning regex parsing.
Who is affected by RHSA-2023:1079?
Any users running the affected versions of Red Hat software with the specified vulnerabilities are at risk from RHSA-2023:1079.
What are the potential impacts of not addressing RHSA-2023:1079?
Failing to address RHSA-2023:1079 may lead to excessive memory consumption and potential denial of service due to exploitation of the vulnerabilities.