Описание
Memory-safety vulnerability in github.com/jackc/pgx/v5.
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Custom Metric Autoscaler operator for Red Hat Openshift | redhat-user-workloads/custom-metrics-autoscaler-operator | Not affected | ||
| Custom Metric Autoscaler operator for Red Hat Openshift | redhat-user-workloads/keda-adapter | Not affected | ||
| Custom Metric Autoscaler operator for Red Hat Openshift | redhat-user-workloads/keda-webhooks | Not affected | ||
| Multicluster Engine for Kubernetes | multicluster-engine/assisted-service-9-rhel9 | Affected | ||
| Multicluster Engine for Kubernetes | redhat-user-workloads/azure-service-operator-mce-211 | Affected | ||
| Multicluster Global Hub | multicluster-globalhub/multicluster-globalhub-agent-rhel8 | Affected | ||
| Multicluster Global Hub | multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9 | Affected | ||
| Multicluster Global Hub | multicluster-globalhub/multicluster-globalhub-manager-rhel8 | Affected | ||
| Multicluster Global Hub | multicluster-globalhub/multicluster-globalhub-operator-bundle | Not affected | ||
| Multicluster Global Hub | multicluster-globalhub/multicluster-globalhub-rhel8-operator | Affected |
Показывать по
10
Дополнительная информация
Статус:
Important
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=2455972github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability
8.3 High
CVSS3
8.3 High
CVSS3