CVE-2023-5625
Medium
Description
A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Redhat Openshift Container Platform For
PublishedNov 1, 2023
First seenNov 1, 2023
Weakness typeCWE-770Allocation of resources without limits
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat openshift_container_platform_for_arm64 | 4.12 | — |
| redhat openshift_container_platform_for_linuxone | 4.12 | — |
| redhat openshift_container_platform_for_power | 4.12 | — |
| redhat openshift_container_platform_ibm_z_systems | 4.12 | — |
| redhat openstack_platform | 17.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.