Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade ruby193-rubygem-spruzUpgrade openshift-origin-cartridge-jbosseapUpgrade php-pear-MDB2Upgrade uuidUpgrade perl-DBIx-ContextualFetchUpgrade libffiUpgrade ruby193-rubygem-syslog-loggerUpgrade ruby193-ruby-mysqlUpgrade perl-YAMLUpgrade ruby193-rubygem-originUpgrade atlasUpgrade postgisUpgrade nodejs010-nodejs-methodsUpgrade ruby193-rubygem-mongoUpgrade ruby193-rubygem-json_pureUpgrade nodejs010-nodejs-tinycolorUpgrade rubygem-reginUpgrade rsyslog7Upgrade libwebpUpgrade openshift-origin-cartridge-rubyUpgrade rubygem-thorUpgrade openshift-origin-cartridge-jbossewsUpgrade facterUpgrade nodejs010-nodejs-pauseUpgrade nodejs010-nodejs-pgUpgrade rubygem-bsonUpgrade rubygem-openshift-origin-frontend-apache-vhostUpgrade php-pear-MDB2-Driver-pgsqlUpgrade rubygem-openshift-origin-frontend-haproxy-sni-proxyUpgrade icuUpgrade perl-CloneUpgrade libcgroupUpgrade perl-Class-Factory-UtilUpgrade python-virtualenvUpgrade rubygem-openshift-origin-admin-consoleUpgrade ruby193-rubygem-xml-simpleUpgrade openshift-origin-cartridge-perlUpgrade perl-Ima-DBIUpgrade netcdfUpgrade openshift-origin-cartridge-postgresqlUpgrade nodejs010-nodejs-connectUpgrade perl-Class-AccessorUpgrade rubygem-openshift-origin-consoleUpgrade openshift-origin-cartridge-jenkinsUpgrade openshift-origin-logshifterUpgrade ruby193-rubygem-fastthreadUpgrade lcmsUpgrade nodejs010-nodejs-bytesUpgrade libgtaUpgrade rubygem-ruby_parserUpgrade activemqUpgrade ruby193-rubygem-minitestUpgrade ruby193-rubygem-highlineUpgrade rubygem-test-unitUpgrade ruby193-rubygem-commanderUpgrade jenkins-plugin-openshiftUpgrade libevUpgrade rubygem-openshift-origin-dns-nsupdateUpgrade rubygem-commanderUpgrade freexlUpgrade rubygem-rakeUpgrade ruby193-rubygem-chunky_pngUpgrade rubygem-thread-dumpUpgrade rubygem-RubyInlineUpgrade rubygem-bundlerUpgrade perl-App-cpanminusUpgrade perl-DateTime-Format-BuilderUpgrade rubygem-openshift-origin-frontend-nodejs-websocketUpgrade nodejs010-nodejs-freshUpgrade nodejs010-nodejs-bsonUpgrade python27-mod_wsgiUpgrade rubygem-diff-lcsUpgrade rubygem-httpclientUpgrade openshift-origin-cartridge-haproxyUpgrade python27-python-pipUpgrade ruby193-rubygem-safe_yamlUpgrade ruby193-rubygem-hamlUpgrade ruby193-rubygem-mongoidUpgrade rubygem-passengerUpgrade haproxy15sideUpgrade perl-Class-TriggerUpgrade jenkinsUpgrade openshift-origin-node-proxyUpgrade geosUpgrade nodejs010-nodejs-supervisorUpgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade shapelibUpgrade json-cUpgrade ruby193-rubygem-rest-clientUpgrade projUpgrade ruby193-rubygem-pgUpgrade nodejs010-nodejs-cookieUpgrade ruby193-rubygem-ruby2rubyUpgrade hdf5Upgrade jboss-eap6-modulesUpgrade rubygem-ParseTreeUpgrade cfitsioUpgrade ruby-RMagickUpgrade CharLSUpgrade rubygem-bson_extUpgrade ruby193-rubygem-rdiscountUpgrade libdapUpgrade ruby193-ruby-selinuxUpgrade php-pecl-xdebugUpgrade ruby193-rubygem-dnsrubyUpgrade python27-numpyUpgrade openshift-origin-broker-utilUpgrade quartzUpgrade ruby193-rubygem-sexp_processorUpgrade nodejs010-nodejs-colorsUpgrade rubygem-openshift-origin-frontend-apachedbUpgrade phpUpgrade ruby193-rubygem-bson_extUpgrade ruby193-rubygem-stompUpgrade yum-utilsUpgrade rubygemsUpgrade v8Upgrade perl-DateTime-Format-PgUpgrade rubygem-openshift-origin-auth-remote-userUpgrade libmcryptUpgrade ruby193-rubygem-net-ldapUpgrade perl-IO-stringyUpgrade ruby193-rubygem-file-tailUpgrade nodejs010-nodejs-bignumber.jsUpgrade rubygem-net-ssh-gatewayUpgrade openshift-origin-cartridge-mockUpgrade ruby193-rubygem-compass-railsUpgrade perl-UNIVERSAL-monikerUpgrade rubygem-openshift-origin-controllerUpgrade ruby193-rubygem-compassUpgrade openshift-origin-cartridge-nodejsUpgrade perl-JSONUpgrade perl-DateTime-Format-StrptimeUpgrade ruby193-rubygem-jquery-railsUpgrade libgeotiffUpgrade nodejs010-nodejs-optimistUpgrade rubygem-net-sshUpgrade php-extrasUpgrade rubygem-openshift-origin-frontend-apache-mod-rewriteUpgrade jasperUpgrade haproxyUpgrade rubygem-net-scpUpgrade ruby193-jsUpgrade php54-php-pecl-imagickUpgrade perl-Class-Data-InheritableUpgrade ta-libUpgrade openshift-origin-node-utilUpgrade rubygem-open4Upgrade nodejs010-nodejs-debugUpgrade ImageMagickUpgrade ruby193-rubygem-ruby_parserUpgrade ruby193-rubygem-mopedUpgrade ruby193-ruby-wrapperUpgrade nodejs010-nodejs-wsUpgrade gdalUpgrade ruby193-rubygem-sass-twitter-bootstrapUpgrade ruby193-rubygem-parallelUpgrade rubygem-stompUpgrade ruby193-rubygem-term-ansicolorUpgrade openshift-origin-port-proxyUpgrade rubygem-net-ssh-multiUpgrade libspatialiteUpgrade ruby193-rubygem-parseconfigUpgrade ruby193-rubygem-reginUpgrade nodejs010-nodejs-commanderUpgrade jythonUpgrade ruby193-rubygem-daemonsUpgrade ruby193-rubygem-jsonUpgrade openshift-origin-cartridge-diyUpgrade openshift-origin-consoleUpgrade nodejs010-nodejs-buffer-crc32Upgrade ruby193-mcollectiveUpgrade rubygem-openshift-origin-nodeUpgrade ruby193-rubygem-daemon_controllerUpgrade gdUpgrade nodejs010-nodejs-cookie-signatureUpgrade libreadline-javaUpgrade postgresql92-pgRoutingUpgrade nodejs010-nodejs-generic-poolUpgrade openshift-origin-msg-commonUpgrade nodejs010-nodejs-require-allUpgrade rubygem-openshift-origin-commonUpgrade openshift-enterprise-upgradeUpgrade nodejs010-nodejs-range-parserUpgrade nodejs010-nodejs-wordwrapUpgrade php-pecl-imagickUpgrade perl-Class-DBIUpgrade rubygem-openshift-origin-routing-activemqUpgrade libc-clientUpgrade rubygem-fastthreadUpgrade rubygem-sqlite3Upgrade openshift-origin-cartridge-dependenciesUpgrade openshift-origin-cartridge-mock-pluginUpgrade openshift-origin-util-sclUpgrade socatUpgrade rubygem-archive-tar-minitarUpgrade gpsbabelUpgrade postgresql-ip4rUpgrade armadilloUpgrade openshift-origin-cartridge-pythonUpgrade org.apache.maven-mavenUpgrade rubygem-systemuUpgrade ruby193-rubygem-systemuUpgrade pam_openshiftUpgrade xerces-cUpgrade lapackUpgrade rubygem-rackUpgrade rubygem-highlineUpgrade rubygem-nokogiriUpgrade rubygem-ruby2rubyUpgrade jsUpgrade jboss-openshift-metrics-moduleUpgrade ruby193-rubygem-formtasticUpgrade nodejs010-nodejs-formidableUpgrade nodejs010-nodejs-sendUpgrade ruby193-rubygem-passengerUpgrade nodejs010-nodejs-node-staticUpgrade php54-php-pecl-xdebugUpgrade rubygem-ZenTestUpgrade nodejs010-nodejs-keypressUpgrade ruby193-rubygem-open4Upgrade nodejs010-nodejs-mysqlUpgrade rubygem-file-tailUpgrade openshift-origin-msg-node-mcollectiveUpgrade libestrUpgrade postgresql92-postgisUpgrade jboss-eap6-indexUpgrade ruby-mysqlUpgrade rubygem-openshift-origin-container-selinuxUpgrade mongodbUpgrade ruby193-rubygem-fssmUpgrade openshift-origin-cartridge-jenkins-clientUpgrade ruby193-rubygem-httpclientUpgrade perl-Class-DBI-PgUpgrade openshift-origin-cartridge-cronUpgrade nodejs010-nodejs-expressUpgrade ruby193-rubygem-bsonUpgrade rubygem-spruzUpgrade ruby193-facterUpgrade openshift-origin-cartridge-mysqlUpgrade openshift-origin-brokerUpgrade openshift-origin-cartridge-phpUpgrade ruby193-rubygem-state_machineUpgrade rhcUpgrade nodejs010-nodejs-mongodbUpgrade rubygem-jsonUpgrade rubygem-parseconfigUpgrade rubygem-sexp_processorUpgrade nodejs010-nodejs-optionsUpgrade ghostscript | Oct 8, 2019 | Feb 14, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub