ADVISORIES

• CVE-2014-0084 (NVD)
• GHSA-756m-3qf2-hp58
• Vendor Advisory

GEM

openshift-origin-node

SEVERITY

CVSS v3.x: 5.5 (Medium)

CVSS v2.0: 2.1 (Low)

PATCHED VERSIONS

None.

DESCRIPTION

Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly.

RELATED

• https://nvd.nist.gov/vuln/detail/CVE-2014-0084
• https://github.com/openshift/origin-server/pull/4764
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0084
• https://access.redhat.com/errata/RHBA-2014:0487
• https://access.redhat.com/security/cve/CVE-2014-0084
• https://bugzilla.redhat.com/show_bug.cgi?id=1065198
• https://github.com/advisories/GHSA-756m-3qf2-hp58