CVE-2018-14632

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
Red Hat	atomic-openshift	atomic-openshift-3.7

References

https://access.redhat.com/errata/RHBA-2018:2652Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:2654Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:2709Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:2906Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:2908Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14632Issue Tracking, Patch, Vendor Advisory
https://github.com/evanphx/json-patch/commit/4c9aadca8f89e349c999f04e28199e96e81aba03#diff-65c563bba473be9d94ce4d033f74810ePatch, Third Party Advisory
https://access.redhat.com/errata/RHBA-2018:2652Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:2654Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:2709Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:2906Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:2908Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14632Issue Tracking, Patch, Vendor Advisory
https://github.com/evanphx/json-patch/commit/4c9aadca8f89e349c999f04e28199e96e81aba03#diff-65c563bba473be9d94ce4d033f74810ePatch, Third Party Advisory

Timeline

Published: Sep 6, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-146337.0A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication CVE-2018-146347.8An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or ot CVE-2018-146356.5When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassi CVE-2018-146365.3Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended CVE-2018-146378.1The SAML broker consumer endpoint in Keycloak before version 4.6.0.Final ignores expiration conditions on SAML assertions. An attacker can e CVE-2018-146387.5A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent sear CVE-2018-14646.5IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5,CVE-2018-146415.9A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive,CVE-2018-146425.3An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that han CVE-2018-146439.8An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A malicious attacker can use this flaw to remo CVE-2018-146445.9An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote attacker sending a DNS query for a meta-type lik CVE-2018-146457.5A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_i