[{"CVE":"CVE-2020-9283","severity":"important","public_date":"2020-02-21T00:00:00Z","advisories":["RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:3078","RHSA-2020:2793","RHSA-2020:2790","RHSA-2020:4264","RHSA-2020:2789","RHSA-2020:2878","RHSA-2020:2413","RHSA-2020:3414","RHBA-2020:3179","RHBA-2020:3180","RHSA-2020:3809","RHSA-2020:3372","RHSA-2020:3370"],"bugzilla":"1804533","bugzilla_description":"CVE-2020-9283 golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-130","affected_packages":["openshift4/ose-cluster-policy-controller-rhel7:v4.3.40-202010141211.p0","openshift-clients-0:4.3.31-202007250052.p0.git.3329.59998b9.el8","openshift4/ose-oauth-proxy:v4.3.40-202010141211.p0","servicemesh-grafana-0:6.4.3-13.el8","kiali-0:v1.12.10.redhat2-1.el7","openshift4/ose-vertical-pod-autoscaler-rhel7:v4.5.0-202007012112.p0","openshift4/ose-installer:v4.3.40-202010141211.p0","openshift4/ose-cluster-capacity:v4.5.0-202007012112.p0","openshift4/ose-cloud-credential-operator:v4.4.0-202007060343.p0","servicemesh-cni-0:1.1.6-1.el8","openshift4/ose-cluster-config-operator:v4.3.40-202010141858.p0","openshift4/ose-console-operator:v4.3.40-202010141211.p0","openshift4/ose-operator-marketplace:v4.3.40-202010141211.p0","servicemesh-operator-0:1.1.6-2.el8","openshift-0:4.5.0-202007012112.p0.git.0.582d7fc.el7","openshift4/ose-cluster-autoscaler:v4.3.40-202010141211.p0","openshift4/ose-cluster-network-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.3.40-202010141211.p0","openshift4/ose-cluster-kube-descheduler-operator:v4.5.0-202007131801.p0","distributed-tracing/jaeger-query-rhel7:1.17.6-1","openshift4/ose-service-catalog:v4.3.40-202010141211.p0","distributed-tracing/jaeger-all-in-one-rhel7:1.17.6-1","distributed-tracing/jaeger-rhel7-operator:1.17.6-1","openshift4/ose-installer-artifacts:v4.3.40-202010141211.p0","openshift4/ose-kube-proxy:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.4.0-202006290400.p0","openshift4/ose-cluster-svcat-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-installer-rhel7:v4.3.40-202010141211.p0","openshift4/ose-azure-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-sdn-rhel7:v4.3.40-202010141211.p0","openshift4/ose-libvirt-machine-controllers:v4.3.40-202010141858.p0","openshift4/ose-cluster-svcat-controller-manager-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-machine-controllers:v4.3.40-202010141211.p0","openshift4/ose-cluster-bootstrap:v4.3.40-202010141211.p0","openshift4/ose-service-ca-operator:v4.3.40-202010141211.p0","openshift4/ose-baremetal-rhel7-operator:v4.4.0-202006290400.p0","servicemesh-0:1.1.6-1.el8","servicemesh-prometheus-0:2.14.0-14.el8","openshift-service-mesh/3scale-istio-adapter-rhel8:1.0.0-8","distributed-tracing/jaeger-agent-rhel7:1.17.6-1","openshift4/ose-cluster-logging-operator:v4.5.0-202007012112.p0","openshift4/ose-cluster-authentication-operator:v4.3.40-202010141211.p0","openshift4/ose-pod:v4.3.31-202007272153.p0","openshift4/ose-descheduler:v4.4.0-202006290400.p0","openshift4/ose-local-storage-static-provisioner:v4.3.40-202010141211.p0","openshift4/ose-cluster-machine-approver:v4.4.0-202007171809.p0","openshift4/ose-descheduler:v4.5.0-202007101023.p0","openshift4/ose-cluster-machine-approver:v4.3.40-202010141858.p0","distributed-tracing/jaeger-ingester-rhel7:1.17.6-1","ior-0:1.1.6-1.el8","openshift4/ose-sriov-dp-admission-controller:v4.3.37-202009151447.p0","openshift4/ose-cluster-openshift-apiserver-operator:v4.3.40-202010141211.p0","openshift4/ose-cloud-credential-operator:v4.3.40-202010141211.p0","distributed-tracing/jaeger-collector-rhel7:1.17.6-1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-9283.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2019-11840","severity":"moderate","public_date":"2019-03-20T00:00:00Z","advisories":["RHBA-2020:0063"],"bugzilla":"1691529","bugzilla_description":"CVE-2019-11840 golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-330","affected_packages":["openshift-0:4.3.0-202001131753.git.0.0aee6a8.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11840.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2017-3204","severity":"moderate","public_date":"2017-03-29T00:00:00Z","advisories":[],"bugzilla":"1439748","bugzilla_description":"CVE-2017-3204 golang-googlecode-go-crypto: Go SSH library does not verify host keys by default","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3204.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.8"}]