RHSA-2020:0406-01 -- Redhat containernetworking-pluginsID: oval:org.secpod.oval:def:503512 | Date: (C)2020-02-07 (M)2024-04-17 |
Class: PATCH | Family: unix |
The Container Network Interface project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix: * HTTP/2: flood using PING frames results in unbounded memory growth * HTTP/2: flood using HEADERS frames results in unbounded memory growth For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.
Platform: |
Red Hat Enterprise Linux 7 |
Product: |
containernetworking-plugins |