CVE-2018-14632

An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.

References

Affected packages

Git / github.com/evanphx/json-patch

Affected ranges

Type: GIT
Repo: https://github.com/evanphx/json-patch
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

4c9aadca8f89e349c999f04e28199e96e81aba03

Type: GIT
Repo: https://github.com/evanphx/json-patch
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

4c9aadca8f89e349c999f04e28199e96e81aba03

Affected versions

v3.*

v3.0.0

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.7"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.9"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.10"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.11"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "3.7"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-14632.json"