Security Alerts: Critical Vulnerabilities in HAProxy and ffmpeg, and Update for Red Hat OpenShift
Several critical vulnerabilities in HAProxy and ffmpeg allow attackers to manipulate files and conduct Denial of Service attacks. An update for Red Hat OpenShift also addresses a Denial of Service vulnerability.
Security Alerts
HAProxy: Multiple Vulnerabilities
According to a recent alert from CERT-Bund, several critical vulnerabilities have been identified in HAProxy. A remote, anonymous attacker can exploit these vulnerabilities to:
- Manipulate files
- Cause a Denial of Service (DoS)
For more information, please visit here.
ffmpeg: Vulnerability Allows Code Execution
Similarly, a critical vulnerability has been discovered in ffmpeg that allows a remote, anonymous attacker to execute arbitrary code and conduct a Denial of Service attack.
Details are available here.
Red Hat OpenShift: Update for Denial of Service
An update for the Red Hat OpenShift Container Platform addresses a medium vulnerability in kubelet, cri-o, and kube-apiserver that can be exploited by a remote, authenticated attacker to conduct a Denial of Service attack.
For more information, please visit here.