Red Hat Linux Security Advisories & CVEs
6321 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2022-1462] out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem
An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory. Red Hat severity: Moderate — CVSS 6.3 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H). Weakness: CWE-125. Affected Red Hat products: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Enterprise Linux 9; Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat lists Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7 as not affected. Red Hat fixing advisory: RHSA-2023:2736, RHSA-2023:2951, RHSA-2024:0724, RHSA-2023:2458, RHSA-2023:2148. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2022-1015] flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem
A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue. There was no shipped kernel version that was seen affected by this problem. Red Hat severity: Important — CVSS 6.6 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H). Weakness: CWE-787. Red Hat lists Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Virtualization 4 as not affected.
Medium [CVE-2021-3733] python: There's a flaw in urllib's AbstractBasicAuthHandler class
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability. Applications that use AbstractBasicAuthHandler, HTTPBasicAuthHandler and ProxyBasicAuthHandler may be affected by this flaw. Other classes may use the vulnerable method http_error_auth_reqed in AbstractBasicAuthHandler as well. This flaw is out of support scope for versions of Python shipped in Red Hat Enterprise Linux 7 base OS and Red Hat Enterprise Linux 6. For more information about support life cycles, please see Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). Weakness: CWE-400. Affected Red Hat products: Red Hat Enterprise Linux 8; Red Hat Software Collections for Red Hat Enterprise Linux 7; Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7. Will not fix / out of support: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7. Red Hat fixing advisory: RHSA-2021:4057, RHSA-2021:4160, RHSA-2022:1764, RHSA-2022:1821, RHSA-2021:3254, RHSA-2022:1663.
Medium [CVE-2021-3737] flaw was found in python
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability. Given the flaw is in the client side and it requires automatically connecting to a compromised but trusted server or manually connecting to a malicious server, the Impact of this flaw has been set to Low. It requires indeed unlikely circumstances to be exploited and when it is it is enough to stop the client or restart it. This issue did not affect the versions of rh-python38-python as shipped with Red Hat Software Collections 3 as they already contain the patch. Red Hat severity: Low — CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). Weakness: CWE-835. Affected Red Hat products: Red Hat Enterprise Linux 8; Red Hat Software Collections for Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7. Will not fix / out of support: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7. Red Hat fixing advisory: RHSA-2021:4160, RHSA-2022:1764, RHSA-2022:1821, RHSA-2022:1986, RHSA-2022:1663. Affected products named by the advisory: Red Hat package: python3.
Medium [CVE-2021-20320] flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel
A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw, a local attacker with special user privilege can circumvent the verifier and may lead to a confidentiality problem. The default Red Hat Enterprise Linux kernel prevents unprivileged users from being able to use eBPF by the kernel.unprivileged_bpf_disabled sysctl. This would require a privileged user with CAP_SYS_ADMIN or root to be able to abuse this flaw reducing its attack space. A kernel update will be required to mitigate the flaw for the root or users with CAP_SYS_ADMIN capabilities. Red Hat severity: Low — CVSS 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N). Weakness: CWE-200. Affected Red Hat products: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9. Will not fix / out of support: Red Hat Enterprise Linux 7. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2022-0264] vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures
A vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel. This flaws affects kernel versions < v5.16-rc6 Red Hat severity: Low — CVSS 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N). Weakness: CWE-755. Affected Red Hat products: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8. Will not fix / out of support: Red Hat Enterprise Linux 6. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2021-4001] race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a missing lock in kernel/bpf/syscall.c
A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special privilege (cap_sys_admin or cap_bpf) can modify the frozen mapped address space. This flaw affects kernel versions prior to 5.16 rc2. The default Red Hat Enterprise Linux kernel prevents unprivileged users from being able to use eBPF by the kernel.unprivileged_bpf_disabled sysctl. This would require a privileged user with CAP_SYS_ADMIN or root to be able to abuse this flaw reducing its attack space. A kernel update will be required to mitigate the flaw for the root or users with CAP_SYS_ADMIN capabilities. Red Hat severity: Moderate — CVSS 6.7 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). Weakness: CWE-367. Affected Red Hat products: Red Hat Enterprise Linux 8. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2021-3572] flaw was found in python-pip in the way it handled Unicode separators in git references
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This flaw has been rated as having a security impact of Low. To exploit this flaw, the attacker needs access to the repository to create a specially crafted tag and force a different revision to be installed. Red Hat severity: Low — CVSS 4.5 (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N). Weakness: CWE-20. Affected Red Hat products: Red Hat Enterprise Linux 8; Red Hat Software Collections for Red Hat Enterprise Linux 7; Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9. Will not fix / out of support: Red Hat Enterprise Linux 7. Red Hat fixing advisory: RHSA-2021:4160, RHSA-2021:4162, RHSA-2021:4455, RHSA-2021:3254. Affected products named by the advisory: Red Hat package: python-pip; Red Hat package: python-virtualenv.
Medium [CVE-2021-3426] There's a flaw in Python 3's pydoc
There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0a7. Red Hat Quay from version 3.4 uses Python from Red Hat Enterprise Linux RPM repositories and therefore may receive an update for this issue in a future release. Earlier versions of Red Hat Quay will not receive a patch for this issue. Python 2.x.x as shipped in any Red Hat product is not affected. This flaw is out of support scope for python3 as shipped with Red Hat Enterprise Linux 7. Red Hat severity: Moderate — CVSS 5.7 (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Weakness: CWE-200. Affected Red Hat products: Red Hat Enterprise Linux 8; Red Hat Software Collections for Red Hat Enterprise Linux 7; Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS; Red Hat Enterprise Linux 7; Red Hat Quay 3. Will not fix / out of support: Red Hat Enterprise Linux 7; Red Hat Quay 3. Red Hat fixing advisory: RHSA-2021:4160, RHSA-2021:4162, RHSA-2021:4399, RHSA-2021:3254.
Medium [CVE-2020-25639] NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC
A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system. Red Hat severity: Low — CVSS 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-476. Affected Red Hat products: Red Hat Enterprise Linux 8. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: kernel-rt.
Medium [CVE-2020-14390] flaw was found in the Linux kernel in versions before 5.9-rc6
A flaw was found in the Linux kernel in versions before 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation cannot be fully ruled out. Due to this flaw requiring a local user to trigger by using frame buffer fbcon, the impact has been rated as Low. Red Hat severity: Low — CVSS 5.7 (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N). Weakness: CWE-787. Affected Red Hat products: Red Hat Enterprise Linux 5; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise MRG 2. Will not fix / out of support: Red Hat Enterprise Linux 5; Red Hat Enterprise Linux 6; Red Hat Enterprise MRG 2. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: kernel-alt; Red Hat package: kernel-rt.
Medium [CVE-2020-10781] flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory
A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable. This flaw is rated as having Low impact, because it is a denial of service only and requires the ZRAM kernel module to be loaded, which it is not the default, and oading kernel modules is a privileged operation. Red Hat severity: Low — CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-732. Affected Red Hat products: Red Hat Enterprise Linux 5; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise MRG 2. Will not fix / out of support: Red Hat Enterprise Linux 5; Red Hat Enterprise Linux 6; Red Hat Enterprise MRG 2. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: kernel-alt; Red Hat package: kernel-rt.
Medium [CVE-2020-14304] memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device
A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to confidentiality. This issue is rated as having Low impact because of being limited to only reading some of the values from the memory of some particular drivers and very limited kernel stack exposure. Red Hat severity: Low — CVSS 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N). Weakness: CWE-460. Affected Red Hat products: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise MRG 2. Red Hat lists Red Hat Enterprise Linux 5 as not affected. Will not fix / out of support: Red Hat Enterprise Linux 6; Red Hat Enterprise MRG 2. Red Hat does not currently list a fixing RHSA for this CVE. Affected products named by the advisory: Red Hat package: kernel-alt; Red Hat package: kernel-rt.
Medium [CVE-2020-15778] scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows." A flaw was found in the scp program shipped with the openssh-clients package. An attacker having the ability to scp files to a remote server, could execute arbitrary commands on the remote server by including the command as a part of the filename being copied on the server. This command is run with the permissions of user with which the files were copied on the remote server. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability depending on the default system umask and selinux policy/enforcement. This security flaw lies in the way scp command parses its command line arguments. The SSH protocol or any other applications shipped as a part of openssh-clients packages are not vulnerable. In order to exploit this flaw, the attacker needs to social engineer or manipulate a system administrator (who has root access on the remote server) to run scp with a malicious command line parameter.
Medium [CVE-2018-0734] Timing attack against DSA
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Red Hat severity: Low — CVSS 5.1 (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Weakness: CWE-385. Affected Red Hat products: JBoss Core Services on RHEL 6; JBoss Core Services on RHEL 7; Red Hat Ansible Tower 3.4 for RHEL 7; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat JBoss Core Services; Red Hat Enterprise Linux 6; Red Hat JBoss Enterprise Application Platform 6; Red Hat JBoss Enterprise Web Server 2; Red Hat JBoss Web Server 3. Will not fix / out of support: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat JBoss Enterprise Web Server 2. Red Hat fixing advisory: RHSA-2019:3932, RHSA-2019:3933, RHBA-2020:0547, RHSA-2019:2304, RHSA-2019:3700, RHSA-2019:3935. Affected products named by the advisory: Red Hat package: openssl098e; Red Hat package: ovmf; Red Hat package: compat-openssl10; Red Hat package: mingw-openssl.
Medium [CVE-2018-0735] Timing attack against ECDSA signature generation
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Red Hat severity: Low — CVSS 5.1 (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Weakness: CWE-385. Affected Red Hat products: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 6. Will not fix / out of support: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7. Red Hat fixing advisory: RHSA-2019:0483, RHSA-2019:3700. Affected products named by the advisory: Red Hat package: openssl; Red Hat package: ovmf.
Medium [CVE-2018-14647] Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization
Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming large amounts CPU and RAM. The vulnerability exists in Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15. Red Hat severity: Moderate — CVSS 5.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). Weakness: CWE-909. Affected products named by the advisory: Red Hat Ansible Tower 3.4 for RHEL 7; Red Hat Enterprise Linux 7.4 Advanced Update Support; Red Hat Enterprise Linux 7.4 Telco Extended Update Support; Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions; and 9 more.
Medium [CVE-2018-1061] python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service. Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). Weakness: CWE-20. Affected Red Hat products: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 7.4 Advanced Update Support; Red Hat Enterprise Linux 7.4 Telco Extended Update Support; Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions; Red Hat Enterprise Linux 7.5 Extended Update Support; Red Hat Software Collections for Red Hat Enterprise Linux 6; Red Hat Software Collections for Red Hat Enterprise Linux 7; Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS; Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS; Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUS; Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS; Red Hat Enterprise Linux 5; Red Hat Enterprise Linux 6; Red Hat Software Collections. Will not fix / out of support: Red Hat Enterprise Linux 5; Red Hat Enterprise Linux 6; Red Hat Software Collections. Red Hat fixing advisory: RHSA-2018:3041, RHSA-2020:1346, RHSA-2020:1268, RHSA-2019:1260, RHSA-2019:3725. Affected products named by the advisory: Red Hat package: python.
Medium [CVE-2018-1060] python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop method
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service. Red Hat severity: Low — CVSS 4.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L). Weakness: CWE-20. Affected Red Hat products: Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 7.4 Advanced Update Support; Red Hat Enterprise Linux 7.4 Telco Extended Update Support; Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions; Red Hat Enterprise Linux 7.5 Extended Update Support; Red Hat Software Collections for Red Hat Enterprise Linux 6; Red Hat Software Collections for Red Hat Enterprise Linux 7; Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS; Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS; Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUS; Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS; Red Hat Enterprise Linux 5; Red Hat Enterprise Linux 6; Red Hat Software Collections. Will not fix / out of support: Red Hat Enterprise Linux 5; Red Hat Enterprise Linux 6; Red Hat Software Collections. Red Hat fixing advisory: RHSA-2018:3041, RHSA-2020:1346, RHSA-2020:1268, RHSA-2019:1260, RHSA-2019:3725. Affected products named by the advisory: Red Hat package: python.
Medium [CVE-2018-0732] Client DoS due to large DH parameter
During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Red Hat severity: Moderate — CVSS 4.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L). Weakness: CWE-325. Affected Red Hat products: JBoss Core Services Apache HTTP Server 2.4.29 SP2; JBoss Core Services on RHEL 6; JBoss Core Services on RHEL 7; Red Hat Enterprise Linux 7; Red Hat OpenShift Application Runtimes Node.js 10; Red Hat OpenShift Application Runtimes Node.js 8; Red Hat Enterprise Linux 5; Red Hat Enterprise Linux 6; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Enterprise Application Platform 6; Red Hat JBoss Enterprise Web Server 2; Red Hat JBoss Web Server 3. Red Hat lists Red Hat Enterprise Linux 8 as not affected. Will not fix / out of support: Red Hat Enterprise Linux 5; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Enterprise Application Platform 6; Red Hat JBoss Enterprise Web Server 2.