Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade openshift-origin-cartridge-postgresqlUpgrade perl-DBIx-ContextualFetchUpgrade libwebpUpgrade perl-DateTime-Format-StrptimeUpgrade ruby193-rubygem-mongoidUpgrade nodejs010-nodejs-bytesUpgrade openshift-origin-brokerUpgrade rubygem-openshift-origin-frontend-apache-vhostUpgrade ruby193-facterUpgrade rubygem-ParseTreeUpgrade ruby193-rubygem-mopedUpgrade libreadline-javaUpgrade rubygem-openshift-origin-consoleUpgrade ruby193-ruby-mysqlUpgrade nodejs010-nodejs-buffer-crc32Upgrade php-pear-MDB2Upgrade json-cUpgrade rubygem-openshift-origin-frontend-nodejs-websocketUpgrade nodejs010-nodejs-freshUpgrade nodejs010-nodejs-tinycolorUpgrade rubygemsUpgrade facterUpgrade openshift-origin-node-utilUpgrade ruby193-rubygem-rest-clientUpgrade perl-DateTime-Format-PgUpgrade projUpgrade rubygem-openshift-origin-commonUpgrade php-pecl-xdebugUpgrade rubygem-test-unitUpgrade postgresql92-postgisUpgrade perl-Class-DBIUpgrade openshift-origin-cartridge-jenkins-clientUpgrade jsUpgrade openshift-origin-cartridge-nodejsUpgrade ruby193-rubygem-net-ldapUpgrade openshift-origin-node-proxyUpgrade rubygem-openshift-origin-controllerUpgrade libgtaUpgrade ruby193-rubygem-xml-simpleUpgrade nodejs010-nodejs-pauseUpgrade ruby193-rubygem-fastthreadUpgrade ghostscriptUpgrade ruby193-rubygem-originUpgrade openshift-origin-logshifterUpgrade jenkins-plugin-openshiftUpgrade nodejs010-nodejs-bsonUpgrade rsyslog7Upgrade python27-python-pipUpgrade nodejs010-nodejs-bignumber.jsUpgrade perl-Class-Factory-UtilUpgrade rubygem-thread-dumpUpgrade openshift-origin-cartridge-mock-pluginUpgrade ruby193-rubygem-hamlUpgrade ruby193-rubygem-ruby2rubyUpgrade hdf5Upgrade ruby193-rubygem-file-tailUpgrade php54-php-pecl-xdebugUpgrade rubygem-openshift-origin-frontend-apachedbUpgrade rubygem-systemuUpgrade postgisUpgrade rubygem-highlineUpgrade nodejs010-nodejs-wsUpgrade ruby193-rubygem-state_machineUpgrade rubygem-httpclientUpgrade python27-mod_wsgiUpgrade ruby193-rubygem-minitestUpgrade perl-App-cpanminusUpgrade perl-Ima-DBIUpgrade rubygem-jsonUpgrade rubygem-bson_extUpgrade rubygem-openshift-origin-admin-consoleUpgrade ruby193-rubygem-pgUpgrade ruby193-rubygem-bsonUpgrade phpUpgrade netcdfUpgrade nodejs010-nodejs-pgUpgrade perl-Class-AccessorUpgrade rubygem-RubyInlineUpgrade libc-clientUpgrade pam_openshiftUpgrade CharLSUpgrade freexlUpgrade perl-Class-Data-InheritableUpgrade ruby193-rubygem-daemonsUpgrade ruby193-rubygem-safe_yamlUpgrade postgresql-ip4rUpgrade openshift-origin-cartridge-jenkinsUpgrade nodejs010-nodejs-sendUpgrade perl-Class-TriggerUpgrade org.apache.maven-mavenUpgrade haproxy15sideUpgrade gpsbabelUpgrade openshift-origin-cartridge-perlUpgrade rubygem-spruzUpgrade libevUpgrade ruby-RMagickUpgrade uuidUpgrade python27-numpyUpgrade rubygem-net-ssh-gatewayUpgrade rubygem-ruby2rubyUpgrade ruby193-rubygem-json_pureUpgrade atlasUpgrade ruby193-rubygem-bson_extUpgrade quartzUpgrade rubygem-rakeUpgrade libmcryptUpgrade rubygem-net-scpUpgrade perl-Class-DBI-PgUpgrade rubygem-thorUpgrade ruby193-rubygem-formtasticUpgrade ruby193-rubygem-systemuUpgrade nodejs010-nodejs-connectUpgrade perl-YAMLUpgrade ruby193-ruby-selinuxUpgrade ruby193-rubygem-jsonUpgrade ruby193-rubygem-sexp_processorUpgrade nodejs010-nodejs-mysqlUpgrade nodejs010-nodejs-optionsUpgrade geosUpgrade openshift-origin-cartridge-dependenciesUpgrade ruby193-rubygem-parseconfigUpgrade nodejs010-nodejs-debugUpgrade openshift-origin-msg-node-mcollectiveUpgrade ruby-mysqlUpgrade gdalUpgrade ruby193-rubygem-daemon_controllerUpgrade ruby193-rubygem-stompUpgrade openshift-enterprise-upgradeUpgrade yum-utilsUpgrade cfitsioUpgrade nodejs010-nodejs-commanderUpgrade rubygem-openshift-origin-frontend-apache-mod-rewriteUpgrade xerces-cUpgrade nodejs010-nodejs-supervisorUpgrade perl-CloneUpgrade ruby193-rubygem-fssmUpgrade rubygem-sexp_processorUpgrade php-extrasUpgrade php-pear-MDB2-Driver-pgsqlUpgrade rubygem-openshift-origin-frontend-haproxy-sni-proxyUpgrade rubygem-reginUpgrade mongodbUpgrade openshift-origin-msg-commonUpgrade ruby193-mcollectiveUpgrade jenkinsUpgrade ruby193-rubygem-commanderUpgrade jasperUpgrade rubygem-ZenTestUpgrade ruby193-rubygem-dnsrubyUpgrade rubygem-openshift-origin-auth-remote-userUpgrade rubygem-ruby_parserUpgrade nodejs010-nodejs-wordwrapUpgrade ruby193-rubygem-compassUpgrade python-virtualenvUpgrade openshift-origin-cartridge-mockUpgrade ta-libUpgrade rubygem-diff-lcsUpgrade openshift-origin-cartridge-pythonUpgrade rubygem-openshift-origin-nodeUpgrade icuUpgrade ruby193-rubygem-passengerUpgrade nodejs010-nodejs-expressUpgrade nodejs010-nodejs-cookieUpgrade ruby193-rubygem-sass-twitter-bootstrapUpgrade rubygem-open4Upgrade rubygem-net-ssh-multiUpgrade rubygem-file-tailUpgrade rubygem-passengerUpgrade openshift-origin-cartridge-jbosseapUpgrade openshift-origin-consoleUpgrade nodejs010-nodejs-mongodbUpgrade ruby193-rubygem-rdiscountUpgrade openshift-origin-cartridge-haproxyUpgrade ruby193-rubygem-reginUpgrade ruby193-rubygem-parallelUpgrade nodejs010-nodejs-generic-poolUpgrade nodejs010-nodejs-optimistUpgrade php-pecl-imagickUpgrade ruby193-rubygem-ruby_parserUpgrade rubygem-openshift-origin-dns-nsupdateUpgrade nodejs010-nodejs-node-staticUpgrade nodejs010-nodejs-cookie-signatureUpgrade lcmsUpgrade jboss-openshift-metrics-moduleUpgrade nodejs010-nodejs-range-parserUpgrade openshift-origin-port-proxyUpgrade rubygem-stompUpgrade ruby193-rubygem-chunky_pngUpgrade libffiUpgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade lapackUpgrade activemqUpgrade socatUpgrade armadilloUpgrade jboss-eap6-modulesUpgrade openshift-origin-cartridge-mysqlUpgrade rubygem-bsonUpgrade rubygem-net-sshUpgrade rubygem-archive-tar-minitarUpgrade ruby193-rubygem-compass-railsUpgrade nodejs010-nodejs-require-allUpgrade rubygem-sqlite3Upgrade rubygem-openshift-origin-container-selinuxUpgrade ruby193-rubygem-jquery-railsUpgrade rubygem-rackUpgrade jythonUpgrade perl-JSONUpgrade shapelibUpgrade ruby193-rubygem-httpclientUpgrade perl-DateTime-Format-BuilderUpgrade openshift-origin-cartridge-rubyUpgrade libspatialiteUpgrade nodejs010-nodejs-colorsUpgrade ruby193-rubygem-open4Upgrade ruby193-rubygem-term-ansicolorUpgrade openshift-origin-util-sclUpgrade v8Upgrade ruby193-ruby-wrapperUpgrade rhcUpgrade perl-IO-stringyUpgrade libcgroupUpgrade openshift-origin-cartridge-jbossewsUpgrade rubygem-openshift-origin-routing-activemqUpgrade nodejs010-nodejs-keypressUpgrade ruby193-jsUpgrade rubygem-bundlerUpgrade rubygem-fastthreadUpgrade ruby193-rubygem-mongoUpgrade gdUpgrade postgresql92-pgRoutingUpgrade rubygem-nokogiriUpgrade perl-UNIVERSAL-monikerUpgrade openshift-origin-cartridge-diyUpgrade nodejs010-nodejs-methodsUpgrade php54-php-pecl-imagickUpgrade libestrUpgrade libdapUpgrade ImageMagickUpgrade ruby193-rubygem-spruzUpgrade haproxyUpgrade openshift-origin-cartridge-cronUpgrade ruby193-rubygem-syslog-loggerUpgrade openshift-origin-cartridge-phpUpgrade ruby193-rubygem-highlineUpgrade nodejs010-nodejs-formidableUpgrade openshift-origin-broker-utilUpgrade rubygem-commanderUpgrade jboss-eap6-indexUpgrade rubygem-parseconfigUpgrade libgeotiff | Oct 8, 2019 | Feb 14, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub