Pen Drive Powered by Red Hat Lightspeed vulnerabilities
4 known vulnerabilities in Pen Drive Powered by Red Hat Lightspeed from Red Hat. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
Red Hat OpenShift Container Platform 4.19: Inclusion of Functionality from Untrusted Control Sphere
A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbi
- 7.1 High severity
Red Hat Enterprise Linux 10: Out-of-bounds Read
A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious
- 7.5 High severity
Pen Drive Powered by Red Hat Lightspeed: Execution with Unnecessary Privileges
A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged debug pods with host filesystem access in the shared default namespace, where any user with the standard edit role can exec into them and obt
- 7.5 High severity
urllib3: Improper Handling of Highly Compressed Data (Data Amplification)
urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1) during the second HTTPResponse.read(amt=N) call when the response was decompressed using the official Bro