CVE-2018-14632
JSON-Patch Out-of-bounds Write vulnerability
7.7 HighFix available
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
2.23%Up 0.2 points since Apr 14, 2021
What each source reports
CVE List Score used
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.
- Record
CVE-2018-14632- CVSS 3.0
- 7.7 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
EUVDEUVD-2022-4032
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.
- Record
EUVD-2022-4032- CVSS 3.0
- 7.7 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gxhv-3hwf-wjp9
JSON-Patch Out-of-bounds Write vulnerability
An out of bound write can occur when patching an Openshift object using the oc patch functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.
- Record
GHSA-gxhv-3hwf-wjp9- CVSS 3.0
- 7.7 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
NVD
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.
- Record
CVE-2018-14632- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - CVSS 3.0
- 7.7 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
OSV
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.
- Record
CVE-2018-14632- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVGHSA-gxhv-3hwf-wjp9
JSON-Patch Out-of-bounds Write vulnerability
An out of bound write can occur when patching an Openshift object using the oc patch functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.
- Record
GHSA-gxhv-3hwf-wjp9- CVSS 3.0
- 7.7 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
Show 7 moreShow less
OSVRHBA-2018:2652
Red Hat Bug Fix Advisory: Red Hat OpenShift Container Platform 3.11 RPM Release Advisory
- Record
RHBA-2018:2652- CVSS 3.0
- 7.7 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2018:2654
Red Hat Security Advisory: OpenShift Container Platform 3.6 security and bug fix update
- Record
RHSA-2018:2654- CVSS 3.0
- 7.7 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2018:2709
Red Hat Security Advisory: Red Hat OpenShift Container Platform 3.10 security and bug fix update
- Record
RHSA-2018:2709- CVSS 3.0
- 7.7 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2018:2906
Red Hat Security Advisory: OpenShift Container Platform 3.7 security update
- Record
RHSA-2018:2906- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:2908
Red Hat Security Advisory: OpenShift Container Platform 3.9 security update
- Record
RHSA-2018:2908- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-14632
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.
- Record
UBUNTU-CVE-2018-14632- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - CVSS 3.0
- 7.7 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVGO-2021-0076 No score
Out-of-bounds write in github.com/evanphx/json-patch
A malicious JSON patch can cause a panic due to an out-of-bounds write attempt. This can be used as a denial of service vector if exposed to arbitrary user input.
- Record
GO-2021-0076- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/evanphx/json-patchGo |
before 0.5.2 | 0.5.2 |
github.com/evanphx/json-patchGo |
3.0.0 up to 3.0.1-0.20180525145409-4c9aadca8f89 | 3.0.1-0.20180525145409-4c9aadca8f89 |
github.com/evanphx/json-patchGo |
before 0.5.2, 3.0.0+incompatible up to 3.0.1-0.20180525145409-4c9aadca8f89+incompatible | 0.5.23.0.1-0.20180525145409-4c9aadca8f89+incompatible |
atomic-openshiftRed Hat:openshift:3.11::el7 |
before 0:3.11.16-1.git.0.b48b8f8.el7 | 0:3.11.16-1.git.0.b48b8f8.el7 |
atomic-openshift-clientsRed Hat:openshift:3.11::el7 |
before 0:3.11.16-1.git.0.b48b8f8.el7 | 0:3.11.16-1.git.0.b48b8f8.el7 |
atomic-openshift-clients-redistributableRed Hat:openshift:3.11::el7 |
before 0:3.11.16-1.git.0.b48b8f8.el7 | 0:3.11.16-1.git.0.b48b8f8.el7 |
atomic-openshift-docker-excluderRed Hat:openshift:3.11::el7 |
before 0:3.11.16-1.git.0.b48b8f8.el7 | 0:3.11.16-1.git.0.b48b8f8.el7 |
atomic-openshift-excluderRed Hat:openshift:3.11::el7 |
before 0:3.11.16-1.git.0.b48b8f8.el7 | 0:3.11.16-1.git.0.b48b8f8.el7 |
atomic-openshift-hyperkubeRed Hat:openshift:3.11::el7 |
before 0:3.11.16-1.git.0.b48b8f8.el7 | 0:3.11.16-1.git.0.b48b8f8.el7 |
atomic-openshift-hypershiftRed Hat:openshift:3.11::el7 |
before 0:3.11.16-1.git.0.b48b8f8.el7 | 0:3.11.16-1.git.0.b48b8f8.el7 |
Show 83 moreShow less
| Package | Affected | Fixed |
|---|---|---|
atomic-openshift-masterRed Hat:openshift:3.11::el7 |
before 0:3.11.16-1.git.0.b48b8f8.el7 | 0:3.11.16-1.git.0.b48b8f8.el7 |
atomic-openshift-nodeRed Hat:openshift:3.11::el7 |
before 0:3.11.16-1.git.0.b48b8f8.el7 | 0:3.11.16-1.git.0.b48b8f8.el7 |
atomic-openshift-podRed Hat:openshift:3.11::el7 |
before 0:3.11.16-1.git.0.b48b8f8.el7 | 0:3.11.16-1.git.0.b48b8f8.el7 |
atomic-openshift-sdn-ovsRed Hat:openshift:3.11::el7 |
before 0:3.11.16-1.git.0.b48b8f8.el7 | 0:3.11.16-1.git.0.b48b8f8.el7 |
atomic-openshift-template-service-brokerRed Hat:openshift:3.11::el7 |
before 0:3.11.16-1.git.0.b48b8f8.el7 | 0:3.11.16-1.git.0.b48b8f8.el7 |
atomic-openshift-testsRed Hat:openshift:3.11::el7 |
before 0:3.11.16-1.git.0.b48b8f8.el7 | 0:3.11.16-1.git.0.b48b8f8.el7 |
atomic-openshiftRed Hat:openshift:3.6::el7 |
before 0:3.6.173.0.130-1.git.0.8d78a39.el7 | 0:3.6.173.0.130-1.git.0.8d78a39.el7 |
atomic-openshift-clientsRed Hat:openshift:3.6::el7 |
before 0:3.6.173.0.130-1.git.0.8d78a39.el7 | 0:3.6.173.0.130-1.git.0.8d78a39.el7 |
atomic-openshift-clients-redistributableRed Hat:openshift:3.6::el7 |
before 0:3.6.173.0.130-1.git.0.8d78a39.el7 | 0:3.6.173.0.130-1.git.0.8d78a39.el7 |
atomic-openshift-cluster-capacityRed Hat:openshift:3.6::el7 |
before 0:3.6.173.0.130-1.git.0.8d78a39.el7 | 0:3.6.173.0.130-1.git.0.8d78a39.el7 |
atomic-openshift-docker-excluderRed Hat:openshift:3.6::el7 |
before 0:3.6.173.0.130-1.git.0.8d78a39.el7 | 0:3.6.173.0.130-1.git.0.8d78a39.el7 |
atomic-openshift-dockerregistryRed Hat:openshift:3.6::el7 |
before 0:3.6.173.0.130-1.git.0.8d78a39.el7 | 0:3.6.173.0.130-1.git.0.8d78a39.el7 |
atomic-openshift-excluderRed Hat:openshift:3.6::el7 |
before 0:3.6.173.0.130-1.git.0.8d78a39.el7 | 0:3.6.173.0.130-1.git.0.8d78a39.el7 |
atomic-openshift-federation-servicesRed Hat:openshift:3.6::el7 |
before 0:3.6.173.0.130-1.git.0.8d78a39.el7 | 0:3.6.173.0.130-1.git.0.8d78a39.el7 |
atomic-openshift-masterRed Hat:openshift:3.6::el7 |
before 0:3.6.173.0.130-1.git.0.8d78a39.el7 | 0:3.6.173.0.130-1.git.0.8d78a39.el7 |
atomic-openshift-nodeRed Hat:openshift:3.6::el7 |
before 0:3.6.173.0.130-1.git.0.8d78a39.el7 | 0:3.6.173.0.130-1.git.0.8d78a39.el7 |
atomic-openshift-podRed Hat:openshift:3.6::el7 |
before 0:3.6.173.0.130-1.git.0.8d78a39.el7 | 0:3.6.173.0.130-1.git.0.8d78a39.el7 |
atomic-openshift-sdn-ovsRed Hat:openshift:3.6::el7 |
before 0:3.6.173.0.130-1.git.0.8d78a39.el7 | 0:3.6.173.0.130-1.git.0.8d78a39.el7 |
atomic-openshift-service-catalogRed Hat:openshift:3.6::el7 |
before 0:3.6.173.0.130-1.git.0.8d78a39.el7 | 0:3.6.173.0.130-1.git.0.8d78a39.el7 |
atomic-openshift-testsRed Hat:openshift:3.6::el7 |
before 0:3.6.173.0.130-1.git.0.8d78a39.el7 | 0:3.6.173.0.130-1.git.0.8d78a39.el7 |
tuned-profiles-atomic-openshift-nodeRed Hat:openshift:3.6::el7 |
before 0:3.6.173.0.130-1.git.0.8d78a39.el7 | 0:3.6.173.0.130-1.git.0.8d78a39.el7 |
atomic-openshiftRed Hat:openshift:3.10::el7 |
before 0:3.10.66-1.git.0.91d1e89.el7 | 0:3.10.66-1.git.0.91d1e89.el7 |
atomic-openshift-clientsRed Hat:openshift:3.10::el7 |
before 0:3.10.66-1.git.0.91d1e89.el7 | 0:3.10.66-1.git.0.91d1e89.el7 |
atomic-openshift-clients-redistributableRed Hat:openshift:3.10::el7 |
before 0:3.10.66-1.git.0.91d1e89.el7 | 0:3.10.66-1.git.0.91d1e89.el7 |
atomic-openshift-docker-excluderRed Hat:openshift:3.10::el7 |
before 0:3.10.66-1.git.0.91d1e89.el7 | 0:3.10.66-1.git.0.91d1e89.el7 |
atomic-openshift-excluderRed Hat:openshift:3.10::el7 |
before 0:3.10.66-1.git.0.91d1e89.el7 | 0:3.10.66-1.git.0.91d1e89.el7 |
atomic-openshift-hyperkubeRed Hat:openshift:3.10::el7 |
before 0:3.10.66-1.git.0.91d1e89.el7 | 0:3.10.66-1.git.0.91d1e89.el7 |
atomic-openshift-hypershiftRed Hat:openshift:3.10::el7 |
before 0:3.10.66-1.git.0.91d1e89.el7 | 0:3.10.66-1.git.0.91d1e89.el7 |
atomic-openshift-masterRed Hat:openshift:3.10::el7 |
before 0:3.10.66-1.git.0.91d1e89.el7 | 0:3.10.66-1.git.0.91d1e89.el7 |
atomic-openshift-nodeRed Hat:openshift:3.10::el7 |
before 0:3.10.66-1.git.0.91d1e89.el7 | 0:3.10.66-1.git.0.91d1e89.el7 |
atomic-openshift-podRed Hat:openshift:3.10::el7 |
before 0:3.10.66-1.git.0.91d1e89.el7 | 0:3.10.66-1.git.0.91d1e89.el7 |
atomic-openshift-sdn-ovsRed Hat:openshift:3.10::el7 |
before 0:3.10.66-1.git.0.91d1e89.el7 | 0:3.10.66-1.git.0.91d1e89.el7 |
atomic-openshift-template-service-brokerRed Hat:openshift:3.10::el7 |
before 0:3.10.66-1.git.0.91d1e89.el7 | 0:3.10.66-1.git.0.91d1e89.el7 |
atomic-openshift-testsRed Hat:openshift:3.10::el7 |
before 0:3.10.66-1.git.0.91d1e89.el7 | 0:3.10.66-1.git.0.91d1e89.el7 |
haproxyRed Hat:openshift:3.10::el7 |
before 0:1.8.14-2.el7 | 0:1.8.14-2.el7 |
haproxy-debuginfoRed Hat:openshift:3.10::el7 |
before 0:1.8.14-2.el7 | 0:1.8.14-2.el7 |
haproxy18Red Hat:openshift:3.10::el7 |
before 0:1.8.14-2.el7 | 0:1.8.14-2.el7 |
atomic-openshiftRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
atomic-openshift-clientsRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
atomic-openshift-clients-redistributableRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
atomic-openshift-cluster-capacityRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
atomic-openshift-docker-excluderRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
atomic-openshift-dockerregistryRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
atomic-openshift-excluderRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
atomic-openshift-federation-servicesRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
atomic-openshift-masterRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
atomic-openshift-nodeRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
atomic-openshift-podRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
atomic-openshift-sdn-ovsRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
atomic-openshift-service-catalogRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
atomic-openshift-template-service-brokerRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
atomic-openshift-testsRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
tuned-profiles-atomic-openshift-nodeRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.925b9cd.el7 | 0:3.7.72-1.git.0.925b9cd.el7 |
atomic-openshift-utilsRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.5c45a8a.el7 | 0:3.7.72-1.git.0.5c45a8a.el7 |
openshift-ansibleRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.5c45a8a.el7 | 0:3.7.72-1.git.0.5c45a8a.el7 |
openshift-ansible-callback-pluginsRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.5c45a8a.el7 | 0:3.7.72-1.git.0.5c45a8a.el7 |
openshift-ansible-docsRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.5c45a8a.el7 | 0:3.7.72-1.git.0.5c45a8a.el7 |
openshift-ansible-filter-pluginsRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.5c45a8a.el7 | 0:3.7.72-1.git.0.5c45a8a.el7 |
openshift-ansible-lookup-pluginsRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.5c45a8a.el7 | 0:3.7.72-1.git.0.5c45a8a.el7 |
openshift-ansible-playbooksRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.5c45a8a.el7 | 0:3.7.72-1.git.0.5c45a8a.el7 |
openshift-ansible-rolesRed Hat:openshift:3.7::el7 |
before 0:3.7.72-1.git.0.5c45a8a.el7 | 0:3.7.72-1.git.0.5c45a8a.el7 |
atomic-openshiftRed Hat:openshift:3.9::el7 |
before 0:3.9.51-1.git.0.dc3a40b.el7 | 0:3.9.51-1.git.0.dc3a40b.el7 |
atomic-openshift-clientsRed Hat:openshift:3.9::el7 |
before 0:3.9.51-1.git.0.dc3a40b.el7 | 0:3.9.51-1.git.0.dc3a40b.el7 |
atomic-openshift-clients-redistributableRed Hat:openshift:3.9::el7 |
before 0:3.9.51-1.git.0.dc3a40b.el7 | 0:3.9.51-1.git.0.dc3a40b.el7 |
atomic-openshift-cluster-capacityRed Hat:openshift:3.9::el7 |
before 0:3.9.51-1.git.0.dc3a40b.el7 | 0:3.9.51-1.git.0.dc3a40b.el7 |
atomic-openshift-docker-excluderRed Hat:openshift:3.9::el7 |
before 0:3.9.51-1.git.0.dc3a40b.el7 | 0:3.9.51-1.git.0.dc3a40b.el7 |
atomic-openshift-excluderRed Hat:openshift:3.9::el7 |
before 0:3.9.51-1.git.0.dc3a40b.el7 | 0:3.9.51-1.git.0.dc3a40b.el7 |
atomic-openshift-federation-servicesRed Hat:openshift:3.9::el7 |
before 0:3.9.51-1.git.0.dc3a40b.el7 | 0:3.9.51-1.git.0.dc3a40b.el7 |
atomic-openshift-masterRed Hat:openshift:3.9::el7 |
before 0:3.9.51-1.git.0.dc3a40b.el7 | 0:3.9.51-1.git.0.dc3a40b.el7 |
atomic-openshift-nodeRed Hat:openshift:3.9::el7 |
before 0:3.9.51-1.git.0.dc3a40b.el7 | 0:3.9.51-1.git.0.dc3a40b.el7 |
atomic-openshift-podRed Hat:openshift:3.9::el7 |
before 0:3.9.51-1.git.0.dc3a40b.el7 | 0:3.9.51-1.git.0.dc3a40b.el7 |
atomic-openshift-sdn-ovsRed Hat:openshift:3.9::el7 |
before 0:3.9.51-1.git.0.dc3a40b.el7 | 0:3.9.51-1.git.0.dc3a40b.el7 |
atomic-openshift-service-catalogRed Hat:openshift:3.9::el7 |
before 0:3.9.51-1.git.0.dc3a40b.el7 | 0:3.9.51-1.git.0.dc3a40b.el7 |
atomic-openshift-template-service-brokerRed Hat:openshift:3.9::el7 |
before 0:3.9.51-1.git.0.dc3a40b.el7 | 0:3.9.51-1.git.0.dc3a40b.el7 |
atomic-openshift-testsRed Hat:openshift:3.9::el7 |
before 0:3.9.51-1.git.0.dc3a40b.el7 | 0:3.9.51-1.git.0.dc3a40b.el7 |
golang-github-evanphx-json-patchUbuntu:16.04:LTS |
All versions, plus listed versions 0.0~git20150402.0.766277e-1 |
None known |
golang-github-evanphx-json-patchUbuntu:18.04:LTS |
All versions, plus listed versions 0.0~git20150402.0.766277e-1 |
None known |
golang-github-evanphx-json-patchUbuntu:20.04:LTS |
All versions, plus listed versions 0.0~git20150402.0.766277e-14.1.0-14.5.0-14.6.0-1 |
None known |
golang-github-evanphx-json-patchUbuntu:22.04:LTS |
All versions, plus listed versions 5.2.0-1 |
None known |
golang-github-evanphx-json-patchUbuntu:24.04:LTS |
All versions, plus listed versions 5.2.0-25.7.0-1 |
None known |
golang-github-evanphx-json-patchUbuntu:25.10 |
All versions, plus listed versions 5.7.0-1 |
None known |
golang-github-evanphx-json-patchUbuntu:26.10 |
All versions, plus listed versions 5.7.0-15.7.0-2 |
None known |
golang-github-evanphx-json-patchUbuntu:26.04:LTS |
All versions, plus listed versions 5.7.0-1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-14632 is a high vulnerability (CVSS 7.7) in Redhat Openshift Container Platform, published September 6, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.23%, the 82nd percentile. Fixed in github.com/evanphx/json-patch 0.5.2.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14632
github.com/evanphx/json-patch/commit/4c9aadca8f89e349c999f04e28199e96e81aba03
access.redhat.com/errata/RHBA-2018:2652
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2018-14632
pkg.go.dev/vuln/GO-2021-0076
security.access.redhat.com/data/csaf/v2/advisories/2018/rhba-2018_2652.json
cve.org/CVERecord?id=CVE-2018-14632
mail-archive.com/[email protected]/msg31253.html
docs.openshift.com/container-platform/3.7/release_notes/ocp_3_7_release_notes.html
groups.google.com/forum
ubuntu.com/security/CVE-2018-14632
This page doesn't list everything
Left out here: 144 references. The JSON record has them.