Описание
Memory-safety vulnerability in github.com/jackc/pgx/v5.
A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Custom Metric Autoscaler operator for Red Hat Openshift | redhat-user-workloads/custom-metrics-autoscaler-operator | Affected | ||
| Custom Metric Autoscaler operator for Red Hat Openshift | redhat-user-workloads/keda-operator | Affected | ||
| Custom Metric Autoscaler operator for Red Hat Openshift | redhat-user-workloads/keda-webhooks | Affected | ||
| Multicluster Engine for Kubernetes | redhat-user-workloads/azure-service-operator-mce-211 | Affected | ||
| Multicluster Global Hub | multicluster-globalhub/multicluster-globalhub-agent-rhel8 | Affected | ||
| Multicluster Global Hub | multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9 | Affected | ||
| Multicluster Global Hub | multicluster-globalhub/multicluster-globalhub-manager-rhel8 | Affected | ||
| Multicluster Global Hub | multicluster-globalhub/multicluster-globalhub-operator-bundle | Not affected | ||
| Multicluster Global Hub | multicluster-globalhub/multicluster-globalhub-rhel8-operator | Affected | ||
| Multicluster Global Hub | redhat-user-workloads/multicluster-global-hub-agent-globalhub-1-4 | Affected |
Показывать по
10
Дополнительная информация
Статус:
Important
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=2455975github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability
8.3 High
CVSS3
8.3 High
CVSS3