{"id":"CVE-2018-14632","aliases":["EUVD-2022-4032","GHSA-gxhv-3hwf-wjp9","GO-2021-0076","RHBA-2018:2652","RHSA-2018:2654","RHSA-2018:2709","RHSA-2018:2906","RHSA-2018:2908","UBUNTU-CVE-2018-14632"],"status":"published","title":"JSON-Patch Out-of-bounds Write vulnerability","description":"An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.","severity":{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.02229,"percentile":0.82871,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2018-09-06T13:00:00Z","modified":"2026-10-20T10:49:30Z","fixes":[{"ecosystem":"Go","package":"github.com/evanphx/json-patch","fixed_in":["0.5.2","3.0.1-0.20180525145409-4c9aadca8f89","3.0.1-0.20180525145409-4c9aadca8f89+incompatible"],"sources":["ghsa","osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift","fixed_in":["0:3.11.16-1.git.0.b48b8f8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients","fixed_in":["0:3.11.16-1.git.0.b48b8f8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients-redistributable","fixed_in":["0:3.11.16-1.git.0.b48b8f8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-docker-excluder","fixed_in":["0:3.11.16-1.git.0.b48b8f8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-excluder","fixed_in":["0:3.11.16-1.git.0.b48b8f8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hyperkube","fixed_in":["0:3.11.16-1.git.0.b48b8f8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hypershift","fixed_in":["0:3.11.16-1.git.0.b48b8f8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-master","fixed_in":["0:3.11.16-1.git.0.b48b8f8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-node","fixed_in":["0:3.11.16-1.git.0.b48b8f8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-pod","fixed_in":["0:3.11.16-1.git.0.b48b8f8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-sdn-ovs","fixed_in":["0:3.11.16-1.git.0.b48b8f8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-template-service-broker","fixed_in":["0:3.11.16-1.git.0.b48b8f8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-tests","fixed_in":["0:3.11.16-1.git.0.b48b8f8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift","fixed_in":["0:3.6.173.0.130-1.git.0.8d78a39.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-clients","fixed_in":["0:3.6.173.0.130-1.git.0.8d78a39.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-clients-redistributable","fixed_in":["0:3.6.173.0.130-1.git.0.8d78a39.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-cluster-capacity","fixed_in":["0:3.6.173.0.130-1.git.0.8d78a39.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-docker-excluder","fixed_in":["0:3.6.173.0.130-1.git.0.8d78a39.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-dockerregistry","fixed_in":["0:3.6.173.0.130-1.git.0.8d78a39.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-excluder","fixed_in":["0:3.6.173.0.130-1.git.0.8d78a39.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-federation-services","fixed_in":["0:3.6.173.0.130-1.git.0.8d78a39.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-master","fixed_in":["0:3.6.173.0.130-1.git.0.8d78a39.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-node","fixed_in":["0:3.6.173.0.130-1.git.0.8d78a39.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-pod","fixed_in":["0:3.6.173.0.130-1.git.0.8d78a39.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-sdn-ovs","fixed_in":["0:3.6.173.0.130-1.git.0.8d78a39.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-service-catalog","fixed_in":["0:3.6.173.0.130-1.git.0.8d78a39.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-tests","fixed_in":["0:3.6.173.0.130-1.git.0.8d78a39.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.6::el7","package":"tuned-profiles-atomic-openshift-node","fixed_in":["0:3.6.173.0.130-1.git.0.8d78a39.el7"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/evanphx/json-patch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/evanphx/json-patch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.1-0.20180525145409-4c9aadca8f89"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/evanphx/json-patch","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.5.2"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/evanphx/json-patch","ranges":[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.0.1-0.20180525145409-4c9aadca8f89"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/evanphx/json-patch","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.5.2"},{"introduced":"3.0.0+incompatible"},{"fixed":"3.0.1-0.20180525145409-4c9aadca8f89+incompatible"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.git.0.b48b8f8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.git.0.b48b8f8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.git.0.b48b8f8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-docker-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.git.0.b48b8f8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.git.0.b48b8f8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.git.0.b48b8f8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hypershift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.git.0.b48b8f8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-master","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.git.0.b48b8f8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.git.0.b48b8f8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-pod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.git.0.b48b8f8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-sdn-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.git.0.b48b8f8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-template-service-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.git.0.b48b8f8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.16-1.git.0.b48b8f8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.173.0.130-1.git.0.8d78a39.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.173.0.130-1.git.0.8d78a39.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.173.0.130-1.git.0.8d78a39.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-cluster-capacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.173.0.130-1.git.0.8d78a39.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-docker-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.173.0.130-1.git.0.8d78a39.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-dockerregistry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.173.0.130-1.git.0.8d78a39.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.173.0.130-1.git.0.8d78a39.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-federation-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.173.0.130-1.git.0.8d78a39.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-master","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.173.0.130-1.git.0.8d78a39.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.173.0.130-1.git.0.8d78a39.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-pod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.173.0.130-1.git.0.8d78a39.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-sdn-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.173.0.130-1.git.0.8d78a39.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-service-catalog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.173.0.130-1.git.0.8d78a39.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"atomic-openshift-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.173.0.130-1.git.0.8d78a39.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.6::el7","package":"tuned-profiles-atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.173.0.130-1.git.0.8d78a39.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-docker-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-hypershift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-master","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-pod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-sdn-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-template-service-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"atomic-openshift-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.66-1.git.0.91d1e89.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.14-2.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"haproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.14-2.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.10::el7","package":"haproxy18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.14-2.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift-cluster-capacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift-docker-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift-dockerregistry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift-federation-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift-master","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift-pod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift-sdn-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift-service-catalog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift-template-service-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"tuned-profiles-atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.925b9cd.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"atomic-openshift-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.5c45a8a.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"openshift-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.5c45a8a.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"openshift-ansible-callback-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.5c45a8a.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"openshift-ansible-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.5c45a8a.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"openshift-ansible-filter-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.5c45a8a.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"openshift-ansible-lookup-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.5c45a8a.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"openshift-ansible-playbooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.5c45a8a.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.7::el7","package":"openshift-ansible-roles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.72-1.git.0.5c45a8a.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.51-1.git.0.dc3a40b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.51-1.git.0.dc3a40b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.51-1.git.0.dc3a40b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-cluster-capacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.51-1.git.0.dc3a40b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-docker-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.51-1.git.0.dc3a40b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.51-1.git.0.dc3a40b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-federation-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.51-1.git.0.dc3a40b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-master","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.51-1.git.0.dc3a40b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.51-1.git.0.dc3a40b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-pod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.51-1.git.0.dc3a40b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-sdn-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.51-1.git.0.dc3a40b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-service-catalog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.51-1.git.0.dc3a40b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-template-service-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.51-1.git.0.dc3a40b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.9::el7","package":"atomic-openshift-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.51-1.git.0.dc3a40b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"golang-github-evanphx-json-patch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.0~git20150402.0.766277e-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-github-evanphx-json-patch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.0~git20150402.0.766277e-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-github-evanphx-json-patch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.0~git20150402.0.766277e-1","4.1.0-1","4.5.0-1","4.6.0-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-github-evanphx-json-patch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.0-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"golang-github-evanphx-json-patch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.0-2","5.7.0-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"golang-github-evanphx-json-patch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.0-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"golang-github-evanphx-json-patch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.0-1","5.7.0-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"golang-github-evanphx-json-patch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.0-1"]}],"products":[{"vendor":"red hat","product":"atomic-openshift"},{"vendor":"redhat","product":"openshift_container_platform"},{"vendor":"starcounter-jack","product":"json-patch"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14632","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Vendor Advisory","fix","web","report"]},{"url":"https://github.com/evanphx/json-patch/commit/4c9aadca8f89e349c999f04e28199e96e81aba03#diff-65c563bba473be9d94ce4d033f74810e","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://access.redhat.com/errata/RHBA-2018:2652","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2654","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2908","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2906","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2709","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14632","tags":["advisory"]},{"url":"https://github.com/evanphx/json-patch/pull/57","tags":["web","fix"]},{"url":"https://github.com/evanphx/json-patch/commit/4c9aadca8f89e349c999f04e28199e96e81aba03","tags":["web","fix"]},{"url":"https://pkg.go.dev/vuln/GO-2021-0076","tags":["web"]},{"url":"https://github.com/advisories/GHSA-gxhv-3hwf-wjp9"},{"url":"https://github.com/evanphx/json-patch","tags":["package"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1373332","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1505300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1516564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1521087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1533790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1540978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1542235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1542711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1543129","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1550007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1554921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1557851","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1563888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1564542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1567657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1567658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1569137","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1569621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1569631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1571515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1571641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1576157","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577058","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1578725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1578737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1579127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1579194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1580256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1581106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1581183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1583049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1583495","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1583503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1583587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1583685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1583817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1584701","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1584970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1585127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1585951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1586120","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1589137","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1589875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1592936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594201","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595065","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596440","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596726","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1597119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1597334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1599354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1599402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1599428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1599522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601335","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601792","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601832","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602120","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1603079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608112","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608128","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608289","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608410","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609112","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609204","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609716","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609895","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610360","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610987","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611129","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611462","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611818","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611988","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613094","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613238","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613720","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613979","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614025","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614660","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615227","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615229","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615293","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615982","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1616047","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1616169","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1616171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1616278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1616840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619293","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619535","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1620222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1620272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1620367","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1620536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1621291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622491","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625147","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631834","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhba-2018_2652.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625885","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14632","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1507119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1509859","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1550680","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2654.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1578482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1594187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626054","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628405","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1629579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632862","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1638519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1638521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1638525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1638899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1642052","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2709.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1630048","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14645","tags":["advisory"]},{"url":"https://www.mail-archive.com/haproxy@formilux.org/msg31253.html","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://access.redhat.com/security/vulnerabilities/3716411","tags":["article"]},{"url":"https://docs.openshift.com/container-platform/3.7/release_notes/ocp_3_7_release_notes.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1585767","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1616150","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1620817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622336","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1648138","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2906.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1002105","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1002105","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1002105","tags":["advisory"]},{"url":"https://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88","tags":["article"]},{"url":"https://docs.openshift.com/container-platform/3.9/release_notes/ocp_3_9_release_notes.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607150","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626281","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628799","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1629001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633767","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2908.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-14632","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-14632","description":"An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.","status":"published","published":"2018-09-06T13:00:00Z","modified":"2024-08-05T09:38:13.091Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:35:00.589142Z"}],"euvd":[{"id":"EUVD-2022-4032","description":"An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.","status":"published","published":"2018-09-06T13:00:00Z","modified":"2024-08-05T09:38:13Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T02:39:45.703245Z"}],"ghsa":[{"id":"GHSA-gxhv-3hwf-wjp9","title":"JSON-Patch Out-of-bounds Write vulnerability","description":"An out of bound write can occur when patching an Openshift object using the `oc patch` functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.","status":"published","published":"2022-05-13T01:34:31Z","modified":"2023-02-08T00:27:36Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:36:44.093794Z"}],"nvd":[{"id":"CVE-2018-14632","description":"An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.","status":"published","published":"2018-09-06T14:29:00.587Z","modified":"2026-06-17T01:41:20.073Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:04:38.672108Z"}],"osv":[{"id":"CVE-2018-14632","description":"An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.","status":"published","published":"2018-09-06T14:29:00.587Z","modified":"2026-10-20T10:49:30.111092878Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:08.242347Z"},{"id":"GHSA-gxhv-3hwf-wjp9","title":"JSON-Patch Out-of-bounds Write vulnerability","description":"An out of bound write can occur when patching an Openshift object using the `oc patch` functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.","status":"published","published":"2022-05-13T01:34:31Z","modified":"2023-11-08T03:59:55.891603Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:46:48.546324Z"},{"id":"RHBA-2018:2652","title":"Red Hat Bug Fix Advisory: Red Hat OpenShift Container Platform 3.11 RPM Release Advisory","status":"published","published":"2024-09-16T01:45:54Z","modified":"2026-07-01T10:03:14Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHSA-2018:2654","title":"Red Hat Security Advisory: OpenShift Container Platform 3.6 security and bug fix update","status":"published","published":"2024-09-16T01:46:00Z","modified":"2026-07-01T10:04:28Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:2709","title":"Red Hat Security Advisory: Red Hat OpenShift Container Platform 3.10 security and bug fix update","status":"published","published":"2024-09-16T01:46:07Z","modified":"2026-07-01T10:04:29Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:2906","title":"Red Hat Security Advisory: OpenShift Container Platform 3.7 security update","status":"published","published":"2024-09-29T17:23:33Z","modified":"2026-08-15T10:01:21Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:2908","title":"Red Hat Security Advisory: OpenShift Container Platform 3.9 security update","status":"published","published":"2024-09-29T17:23:21Z","modified":"2026-08-15T10:01:22Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-14632","description":"An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.","status":"published","published":"2018-09-06T14:29:00Z","modified":"2026-10-17T12:54:55.108397405Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:17.014176Z"},{"id":"GO-2021-0076","title":"Out-of-bounds write in github.com/evanphx/json-patch","description":"A malicious JSON patch can cause a panic due to an out-of-bounds write attempt. This can be used as a denial of service vector if exposed to arbitrary user input.","status":"published","published":"2021-04-14T20:04:52Z","modified":"2024-05-20T16:03:47Z","updated_at":"2026-11-02T15:47:00.604718Z"}]}}