CVE & CISA-KEV Catalog

CVE-2024-6508

HIGH
8.0
CVSS v3
NVD

Description

An insufficient entropy vulnerability was found in the Openshift Console. In the authorization code type and implicit grant type, the OAuth2 protocol is vulnerable to a Cross-Site Request Forgery (CSRF) attack if the state parameter is used inefficiently. This flaw allows logging into the victim’s current application account using a third-party account without any restrictions.

CWE-331

How to fix

Remediation Available
openshift4/aws-kms-encryptionRed Hat / RHEL
Fixed in:provider-rhel9@sha256:1bcdd2ed3c97e255550f852cca85e256640dddc495a1160ac0b7d9e4abffe262_arm64RHSA-2024:7922
Fixed in:provider-rhel9@sha256:72c9ec6965ceb5590cb504ca9374ad44a61547566a4f7ce0b84a40dbd26966c7_ppc64leRHSA-2024:7922
Fixed in:provider-rhel9@sha256:24f4788e924ee1f48053267587d369f0d6a4a7e190f699439533dae6e56cac5d_s390xRHSA-2024:7922
Fixed in:provider-rhel9@sha256:1f7fe2f732e8a986ce941f255022cff97093386e1a2060c14ea9c5d36f0f8a26_amd64RHSA-2024:7922
openshift4/aws-kms-encryptionRocky
Fixed in:provider-rhel9@sha256:1f7fe2f732e8a986ce941f255022cff97093386e1a2060c14ea9c5d36f0f8a26_amd64RHSA-2024:7922
Fixed in:provider-rhel9@sha256:24f4788e924ee1f48053267587d369f0d6a4a7e190f699439533dae6e56cac5d_s390xRHSA-2024:7922
Fixed in:provider-rhel9@sha256:72c9ec6965ceb5590cb504ca9374ad44a61547566a4f7ce0b84a40dbd26966c7_ppc64leRHSA-2024:7922
Fixed in:provider-rhel9@sha256:1bcdd2ed3c97e255550f852cca85e256640dddc495a1160ac0b7d9e4abffe262_arm64RHSA-2024:7922
openshift4/azure-kms-encryptionRocky
Fixed in:provider-rhel9@sha256:e587119d7c08cd70c7754111df5cf0dab35a8ab6734d8323fe6c5a434982811a_s390xRHSA-2024:7922
Fixed in:provider-rhel9@sha256:0c674c6cfb3981faf177280e34940cd080f02a89cefe7bbb0ab1fce797dc4a37_arm64RHSA-2024:7922
Fixed in:provider-rhel9@sha256:e92c1ddecfbb1cea9949c6c9180ea74073fa3276c963e376a1807fc1266af605_amd64RHSA-2024:7922
Fixed in:provider-rhel9@sha256:ebb0f2c7e56256a1424357e0240e3a21850c24130efb4377c8b6f78a04f62f93_ppc64leRHSA-2024:7922
openshift4/azure-kms-encryptionRed Hat / RHEL
Fixed in:provider-rhel9@sha256:e92c1ddecfbb1cea9949c6c9180ea74073fa3276c963e376a1807fc1266af605_amd64RHSA-2024:7922
Fixed in:provider-rhel9@sha256:0c674c6cfb3981faf177280e34940cd080f02a89cefe7bbb0ab1fce797dc4a37_arm64RHSA-2024:7922
Fixed in:provider-rhel9@sha256:ebb0f2c7e56256a1424357e0240e3a21850c24130efb4377c8b6f78a04f62f93_ppc64leRHSA-2024:7922
Fixed in:provider-rhel9@sha256:e587119d7c08cd70c7754111df5cf0dab35a8ab6734d8323fe6c5a434982811a_s390xRHSA-2024:7922
openshift4/cloud-network-configRocky
Fixed in:controller-rhel8@sha256:8f1bef7169ff498d6d0686b1c38aa6556298087275e396406649f28d95508811_amd64RHSA-2025:0014
Fixed in:controller-rhel8@sha256:9fa6742ee51a96b8cf0ff306eecb5c0e6870ecfaf9d2899d6c7bd383b8051db3_ppc64leRHSA-2024:8991
Fixed in:controller-rhel9@sha256:c04b64037ba3e1e16670fd92198a4148710d7feed91a4dfe40869a0c6ca1a4d9_s390xRHSA-2024:7922
Fixed in:controller-rhel8@sha256:df5267606dc4a04ef36dd1941eb66703f21e2ee3fff16a597fb9fefe50b96cfc_arm64RHSA-2024:9620
Fixed in:controller-rhel9@sha256:5fde735867972703e6d902ee7a244f5065c62f984001a890002a8c11bad0f20f_amd64RHSA-2024:7922
Fixed in:controller-rhel8@sha256:9a09de4a6d3a5cd08961ac6f2fcbcdfe2cbb2c37fe50711e4b49bd78c7406c96_arm64RHSA-2024:8991
Fixed in:controller-rhel8@sha256:2f18aacc4b0e50ce4b3168eb96062838be4b8b9a54172208d093bebce6239deb_amd64RHSA-2024:8991
Fixed in:controller-rhel8@sha256:9b592fb9db68065510a636f18b60cb75880cca8395968fc05f2ad241942fde67_s390xRHSA-2024:9620
openshift4/cloud-network-configRed Hat / RHEL
Fixed in:controller-rhel8@sha256:df5267606dc4a04ef36dd1941eb66703f21e2ee3fff16a597fb9fefe50b96cfc_arm64RHSA-2024:9620
Fixed in:controller-rhel8@sha256:9a09de4a6d3a5cd08961ac6f2fcbcdfe2cbb2c37fe50711e4b49bd78c7406c96_arm64RHSA-2024:8991
Fixed in:controller-rhel8@sha256:4a1a849ea40d38ce87bad3c3852c16fddce550bff1fd6a7589b74eef0c4cbc81_amd64RHSA-2024:9620
Fixed in:controller-rhel8@sha256:0640a436fc67c6aa75b253bcf8afc5b4e428348684e6e5e823ec344537a46f7f_amd64RHSA-2024:10813
Fixed in:controller-rhel8@sha256:54e2239813520eea167c9a6b973c9f5c0fcad2cc59f8e0148af25ec9b14f6ecc_ppc64leRHSA-2024:9620
Fixed in:controller-rhel8@sha256:9b592fb9db68065510a636f18b60cb75880cca8395968fc05f2ad241942fde67_s390xRHSA-2024:9620
Fixed in:controller-rhel8@sha256:2f18aacc4b0e50ce4b3168eb96062838be4b8b9a54172208d093bebce6239deb_amd64RHSA-2024:8991
Fixed in:controller-rhel9@sha256:c04b64037ba3e1e16670fd92198a4148710d7feed91a4dfe40869a0c6ca1a4d9_s390xRHSA-2024:7922
openshift4/container-networking-pluginsRocky
Fixed in:microshift-rhel9@sha256:8d294263e411fc0269c0e1f9ff2b1399f7ba0966ab394c85ddc5590bc8d95564_amd64RHSA-2024:7922
Fixed in:microshift-rhel9@sha256:3b4f1b385de3d196c88978017a8d2033ccc9a23fbef6021b44d376179562d165_arm64RHSA-2024:7922
Fixed in:microshift-rhel9@sha256:abd8a7135673758866f2e37179b29c00a2fd5eebaae164a7a812d6ab4eea17ed_s390xRHSA-2024:7922
Fixed in:microshift-rhel9@sha256:2fa364eba2aac8db5e277bf5b54eea490fa479ac6766cfa2c1d87d94c7030e7f_ppc64leRHSA-2024:7922
openshift4/container-networking-pluginsRed Hat / RHEL
Fixed in:microshift-rhel9@sha256:abd8a7135673758866f2e37179b29c00a2fd5eebaae164a7a812d6ab4eea17ed_s390xRHSA-2024:7922
Fixed in:microshift-rhel9@sha256:2fa364eba2aac8db5e277bf5b54eea490fa479ac6766cfa2c1d87d94c7030e7f_ppc64leRHSA-2024:7922
Fixed in:microshift-rhel9@sha256:3b4f1b385de3d196c88978017a8d2033ccc9a23fbef6021b44d376179562d165_arm64RHSA-2024:7922
Fixed in:microshift-rhel9@sha256:8d294263e411fc0269c0e1f9ff2b1399f7ba0966ab394c85ddc5590bc8d95564_amd64RHSA-2024:7922
openshift4/driverRed Hat / RHEL
Fixed in:toolkit-rhel9@sha256:cf21c61440da418e85b4de73aaccdcb639b37322d048a27dc1705b65c37ef71d_s390xRHSA-2024:7922
Fixed in:toolkit-rhel9@sha256:1aec77ce5af7ead269492d94955582ce551b65316ce4df533914e55fa9bf8683_amd64RHSA-2024:7922
Fixed in:toolkit-rhel9@sha256:3b42ac72cd7407cd9c05d27b1daa91c3fbd2272275beaae921b65227a23d0ea6_ppc64leRHSA-2024:9620
Fixed in:toolkit-rhel9@sha256:533a8d232a4916ed2b168970a34ee3a96e08289bc6d53185e163c20df3517e37_arm64RHSA-2024:8415
Fixed in:toolkit-rhel9@sha256:9accf7f7c6f51d406499c9a1e3192fd2b4f3726a10ed0f56af7e08d6e9e518db_s390xRHSA-2024:8991
Fixed in:toolkit-rhel9@sha256:74cf380f5a610383296e4b2e3f72c84ff608d175adee452b91f5f4840d9937dd_amd64RHSA-2024:8415
Fixed in:toolkit-rhel9@sha256:b6efaad946fdb8f37c875435e416f0061523de6d82153a11654aeb60c162c60a_arm64RHSA-2024:7922
Fixed in:toolkit-rhel9@sha256:3ea4f547d09661792698c845408d1f6facfa35bbb202cffa5c63b6f62a912b19_amd64RHSA-2024:9620
openshift4/driverRocky
Fixed in:toolkit-rhel9@sha256:c9a8989efd8801eb07b68d27f8a9aa0c143b1f4aef6f80e8a30b65b80900be4a_amd64RHSA-2024:8991
Fixed in:toolkit-rhel9@sha256:9accf7f7c6f51d406499c9a1e3192fd2b4f3726a10ed0f56af7e08d6e9e518db_s390xRHSA-2024:8991
Fixed in:toolkit-rhel9@sha256:e06eb3993fb60266cc143ae77c9176b5aa01a0fc3d9904d80bbc45bde97caa94_s390xRHSA-2024:9620
Fixed in:toolkit-rhel9@sha256:3b42ac72cd7407cd9c05d27b1daa91c3fbd2272275beaae921b65227a23d0ea6_ppc64leRHSA-2024:9620
Fixed in:toolkit-rhel9@sha256:b6efaad946fdb8f37c875435e416f0061523de6d82153a11654aeb60c162c60a_arm64RHSA-2024:7922
Fixed in:toolkit-rhel9@sha256:1aec77ce5af7ead269492d94955582ce551b65316ce4df533914e55fa9bf8683_amd64RHSA-2024:7922
Fixed in:toolkit-rhel9@sha256:5ad504e54f7eb23228c77faf74af0b2fe95ba3978c35c5c6f3694097deaf2801_amd64RHSA-2024:10813
Fixed in:toolkit-rhel9@sha256:632361566980091343a3fcf000999a722c6ac491075a906d944ce018e100575b_arm64RHSA-2024:9620
openshift4/egress-routerRocky
Fixed in:cni-rhel8@sha256:1df32cf7d0948eaee2944b55d6c5c1d12bb06949f6d16482a63e034b07109456_arm64RHSA-2024:8991
Fixed in:cni-rhel8@sha256:b89d7517bc283ff936998b199502c13395c16af14caa5ec39f22058c1e768685_amd64RHSA-2025:0014
Fixed in:cni-rhel8@sha256:bae4f4c8f1884b4933df294c9243b2cea722fbdae660dad5b107fc5dfecc40a2_amd64RHSA-2024:8991
Fixed in:cni-rhel8@sha256:610a0d8a6a44050786d5168839fb72ca7ba402022d816a489a1a6d51ff7947c3_s390xRHSA-2024:8991
Fixed in:cni-rhel9@sha256:b88152afdae36385b3a0c77cd74b000b83aded51650f9780db3ec5b0879ade41_amd64RHSA-2024:7922
Fixed in:cni-rhel8@sha256:d275f29f4fe1b27ede12b4507d7e3dcf58383ad719716e5b2c162da920259a96_amd64RHSA-2024:10813
Fixed in:cni-rhel8@sha256:487ff5c9bab994956790a74805be1e4ebd88588765f3bba443a1fac5ece3d2d2_ppc64leRHSA-2024:8991
Fixed in:cni-rhel8@sha256:6f08c16d6b9d3f9553b29fec72e8d522161391351951368ec31466b4d58e998d_ppc64leRHSA-2024:9620
openshift4/egress-routerRed Hat / RHEL
Fixed in:cni-rhel9@sha256:b98b0b8c5f5d3d15dfa6ba1863c51d08a9c09facf4cb0e8c76c133cf1542cb0d_s390xRHSA-2024:7922
Fixed in:cni-rhel8@sha256:bae4f4c8f1884b4933df294c9243b2cea722fbdae660dad5b107fc5dfecc40a2_amd64RHSA-2024:8991
Fixed in:cni-rhel8@sha256:1df32cf7d0948eaee2944b55d6c5c1d12bb06949f6d16482a63e034b07109456_arm64RHSA-2024:8991
Fixed in:cni-rhel8@sha256:b89d7517bc283ff936998b199502c13395c16af14caa5ec39f22058c1e768685_amd64RHSA-2025:0014
Fixed in:cni-rhel9@sha256:971ce45d8d0167b97dc415197ac98f849a46cec6267c140de07853cfac3d86f6_ppc64leRHSA-2024:7922
Fixed in:cni-rhel8@sha256:d275f29f4fe1b27ede12b4507d7e3dcf58383ad719716e5b2c162da920259a96_amd64RHSA-2024:10813
Fixed in:cni-rhel8@sha256:610a0d8a6a44050786d5168839fb72ca7ba402022d816a489a1a6d51ff7947c3_s390xRHSA-2024:8991
Fixed in:cni-rhel8@sha256:bb4de2de6269881ef3264fac563d12e6d534a206e862721207ed72fe023a61f7_arm64RHSA-2024:9620
openshift4/frrRocky
Fixed in:rhel9@sha256:af89d97f426f67916866df0fd661e5ebb5e5e288130c24c2b768886d5b51f1b9_ppc64leRHSA-2024:7922
Fixed in:rhel9@sha256:7a5c3ef236c568960ca4d2ed77e94bda68bb207341693221a0dbdc9141d2a2f4_arm64RHSA-2024:7922
Fixed in:rhel9@sha256:eaea20567b19e6f0a1738aa08c8a47c3875e87e2b200529bcf607b1a68476107_amd64RHSA-2024:7922
Fixed in:rhel9@sha256:850370aba1024e7205991dc59fa81003b14d69448d823e891f31b385c09f73c8_s390xRHSA-2024:7922
openshift4/frrRed Hat / RHEL
Fixed in:rhel9@sha256:af89d97f426f67916866df0fd661e5ebb5e5e288130c24c2b768886d5b51f1b9_ppc64leRHSA-2024:7922
Fixed in:rhel9@sha256:eaea20567b19e6f0a1738aa08c8a47c3875e87e2b200529bcf607b1a68476107_amd64RHSA-2024:7922
Fixed in:rhel9@sha256:7a5c3ef236c568960ca4d2ed77e94bda68bb207341693221a0dbdc9141d2a2f4_arm64RHSA-2024:7922
Fixed in:rhel9@sha256:850370aba1024e7205991dc59fa81003b14d69448d823e891f31b385c09f73c8_s390xRHSA-2024:7922
openshift4/kube-metricsRed Hat / RHEL
Fixed in:server-rhel8@sha256:10f1b0cd39f8dfbf2ec91841214a4fe567fedb311dd62ac7378b0099d43af7c0_amd64RHSA-2024:8991
Fixed in:server-rhel8@sha256:29609e1d2e612624e7885cb77d0eaa9c75ae5a1f13986bfdf6e5839163fb7a54_arm64RHSA-2024:8991
Fixed in:server-rhel8@sha256:9c82b938f68f6d53dc5922735c5c92374c65c3763872f06bc0f870bf960e77e4_s390xRHSA-2024:8991
Fixed in:server-rhel8@sha256:990162eaeb4c1c2a57d6a0b5d8e924f3bebeceb3382895da3e9a6510067994a9_ppc64leRHSA-2024:8991
Fixed in:server-rhel9@sha256:1bb30cb0abc725a5fdd19b9a719510f5ece9fd702f61d547bca5e12ff6b4c339_s390xRHSA-2024:7922
Fixed in:server-rhel9@sha256:b8fec200d177eb4c82180b4e23af3b3103a1ba2d5e68da40911bb28848612488_arm64RHSA-2024:7922
Fixed in:server-rhel9@sha256:7cdb10506f1dc79c5e79bdf3f8d3da406aae19ab1acafc48668a9e9390131658_amd64RHSA-2024:7922
Fixed in:server-rhel9@sha256:2db154c29fa955ce3865c28df9b8adc2e250d13a3b432dcaacb8f3b7510857bc_ppc64leRHSA-2024:7922
openshift4/kube-metricsRocky
Fixed in:server-rhel8@sha256:990162eaeb4c1c2a57d6a0b5d8e924f3bebeceb3382895da3e9a6510067994a9_ppc64leRHSA-2024:8991
Fixed in:server-rhel9@sha256:7cdb10506f1dc79c5e79bdf3f8d3da406aae19ab1acafc48668a9e9390131658_amd64RHSA-2024:7922
Fixed in:server-rhel8@sha256:10f1b0cd39f8dfbf2ec91841214a4fe567fedb311dd62ac7378b0099d43af7c0_amd64RHSA-2024:8991
Fixed in:server-rhel9@sha256:2db154c29fa955ce3865c28df9b8adc2e250d13a3b432dcaacb8f3b7510857bc_ppc64leRHSA-2024:7922
Fixed in:server-rhel9@sha256:b8fec200d177eb4c82180b4e23af3b3103a1ba2d5e68da40911bb28848612488_arm64RHSA-2024:7922
Fixed in:server-rhel8@sha256:9c82b938f68f6d53dc5922735c5c92374c65c3763872f06bc0f870bf960e77e4_s390xRHSA-2024:8991
Fixed in:server-rhel9@sha256:1bb30cb0abc725a5fdd19b9a719510f5ece9fd702f61d547bca5e12ff6b4c339_s390xRHSA-2024:7922
Fixed in:server-rhel8@sha256:29609e1d2e612624e7885cb77d0eaa9c75ae5a1f13986bfdf6e5839163fb7a54_arm64RHSA-2024:8991
openshift4/kubevirt-csiRocky
Fixed in:driver-rhel8@sha256:d5c82472acbe338d1a27dc853eaf47979ffec3622366a48487cc8b696c2d0088_arm64RHSA-2024:8991
Fixed in:driver-rhel8@sha256:d743b4e858a57681b3feb3a69ec2c18b32969e87b02316ebece97ebcbf5fd0d6_amd64RHSA-2024:10813
Fixed in:driver-rhel8@sha256:57997446b37c6492b5f91c34c0f293a9afdf04647817ecef0d89092f9d874a44_amd64RHSA-2025:0014
Fixed in:driver-rhel9@sha256:0af168935678f1b62c4cbabfae1edfeabaef71f620b88f57533c0fff8e05142b_ppc64leRHSA-2024:7922
Fixed in:driver-rhel8@sha256:141dd48630d66e116b97f300274de15cb0edf86c04ff249e608d35c2af4462b1_arm64RHSA-2024:9620
Fixed in:driver-rhel8@sha256:cc8710b75ce0a24cedaea2588de1da014b73c41b89051f2b7245ea678b9fe4ff_ppc64leRHSA-2024:8991
Fixed in:driver-rhel9@sha256:bf903a35b1e8d50681d4657af5811127bc8ff33c107973ef5fcc16b30b9f7d6f_s390xRHSA-2024:7922
Fixed in:driver-rhel9@sha256:4347ea00a3aa485b359ec3de86d70daee0514a8ea7c9d884f6934f1396b7e8c4_arm64RHSA-2024:7922
openshift4/kubevirt-csiRed Hat / RHEL
Fixed in:driver-rhel8@sha256:141dd48630d66e116b97f300274de15cb0edf86c04ff249e608d35c2af4462b1_arm64RHSA-2024:9620
Fixed in:driver-rhel9@sha256:4347ea00a3aa485b359ec3de86d70daee0514a8ea7c9d884f6934f1396b7e8c4_arm64RHSA-2024:7922
Fixed in:driver-rhel9@sha256:5f52ad744cf6551d42686870fedbea64121ac7bb5f8b62f6d3ab74fb3465e185_amd64RHSA-2024:7922
Fixed in:driver-rhel8@sha256:cc8710b75ce0a24cedaea2588de1da014b73c41b89051f2b7245ea678b9fe4ff_ppc64leRHSA-2024:8991
Fixed in:driver-rhel8@sha256:c773be4cec4b1f65c548b000a05bafe34c9fe6f39d98af0e9e135a8a06c73f14_s390xRHSA-2024:9620
Fixed in:driver-rhel9@sha256:bf903a35b1e8d50681d4657af5811127bc8ff33c107973ef5fcc16b30b9f7d6f_s390xRHSA-2024:7922
Fixed in:driver-rhel9@sha256:0af168935678f1b62c4cbabfae1edfeabaef71f620b88f57533c0fff8e05142b_ppc64leRHSA-2024:7922
Fixed in:driver-rhel8@sha256:57997446b37c6492b5f91c34c0f293a9afdf04647817ecef0d89092f9d874a44_amd64RHSA-2025:0014
openshift4/networkRed Hat / RHEL
Fixed in:tools-rhel8@sha256:64530c7da8eee94c90a7c28515f965142e2bbc558b1505acfd4d4fd3e0a9d705_ppc64leRHSA-2024:9620
Fixed in:tools-rhel8@sha256:00fd5b927d93d85783ef32c98916cf4f27804b2f524fa5e48f8f5be84dfd50a6_amd64RHSA-2024:8991
Fixed in:tools-rhel8@sha256:bd8af5141affa1c21561fa920a54448e7e28e517713c98e0c968e90d12e8b987_amd64RHSA-2025:0014
Fixed in:tools-rhel8@sha256:0da06fe3e3d89dad6a3f68b2ccd6665b0dd5befe6e73d7adfe619ed5524cd135_s390xRHSA-2024:8991
Fixed in:tools-rhel8@sha256:301c59fcdf3acf0d894cd99d73059c97efbaac6729f15ce9e351744a3ac8c90b_arm64RHSA-2024:8991
Fixed in:tools-rhel8@sha256:64048ffeda8c1f1f279f12e6ac90e44e71b4ad36c157ac9251766cabf4d23784_amd64RHSA-2024:9620
Fixed in:tools-rhel9@sha256:9a928a440ca02ecd6a68e7729b462841cb7853edb2a382d9827ffcd4788558fe_amd64RHSA-2024:7922
Fixed in:tools-rhel8@sha256:a32fffd5ad6130d8e098646c59004926c045b23046ed9c540a477fa4a7d3c7ba_arm64RHSA-2024:9620
openshift4/networkRocky
Fixed in:tools-rhel9@sha256:9a928a440ca02ecd6a68e7729b462841cb7853edb2a382d9827ffcd4788558fe_amd64RHSA-2024:7922
Fixed in:tools-rhel8@sha256:64530c7da8eee94c90a7c28515f965142e2bbc558b1505acfd4d4fd3e0a9d705_ppc64leRHSA-2024:9620
Fixed in:tools-rhel8@sha256:d58d715f48956b91e64e4b2b84b8284a04eda99f66c5692f77afeb03fa3f3046_amd64RHSA-2024:10813
Fixed in:tools-rhel8@sha256:56b9a18cc60005d433a512dc52b348738ddedf79a19cdd681386dd7b49bad2a1_s390xRHSA-2024:9620
Fixed in:tools-rhel8@sha256:a8affb72128463b35d839e3e12eccdca4066672c969b362bb02855b9cd34f952_ppc64leRHSA-2024:8991
Fixed in:tools-rhel9@sha256:6fc4379e3fe8742950721efd62e7f94d3d811a15a87cc689cdf13b839c40ebae_s390xRHSA-2024:7922
Fixed in:tools-rhel8@sha256:301c59fcdf3acf0d894cd99d73059c97efbaac6729f15ce9e351744a3ac8c90b_arm64RHSA-2024:8991
Fixed in:tools-rhel9@sha256:a71e15c8e6689a2249784f1cee65d717b90bbc8248e8b837b9d64002ad423430_arm64RHSA-2024:7922
openshift4/oc-mirrorRed Hat / RHEL
Fixed in:plugin-rhel9@sha256:2314f70b625693dce0e151cc75e2a5bd2e74857e1e73e539bfc72d4908d97e1c_ppc64leRHSA-2024:8991
Fixed in:plugin-rhel8@sha256:4493946ad05cd3a657b69510d8927e7faf26e7965de8f362f98b06514da5257a_amd64RHSA-2024:10813
Fixed in:plugin-rhel8@sha256:9f55bb571ca6e28700dcdad7f010c385d18821188fceecfbcdd9d8e1c2d6ea53_arm64RHSA-2024:9620
Fixed in:plugin-rhel8@sha256:29f9c1303e820796eb55ac9698af978bb34dbf6715c529cd9e8e1bf8a7379300_amd64RHSA-2025:0014
Fixed in:plugin-rhel8@sha256:2a945dd88f891b39eec266baaceb531de08ca197b9c1e9c658dc7ac69d36aa66_amd64RHSA-2024:9620
Fixed in:plugin-rhel9@sha256:a00927809eef6316bec078189f2378bfe08615e58dd1695030146815bd0b5f71_amd64RHSA-2024:8991
Fixed in:plugin-rhel8@sha256:ef1fabf95b17eedc083783d9bc66bf12fc3082f89a36e13d18dffdcdf66179da_ppc64leRHSA-2024:9620
Fixed in:plugin-rhel9@sha256:fffe7b1ee512933d1f8f8dfe7ff788816e3412b671657de549a093d270679267_s390xRHSA-2024:8991
openshift4/oc-mirrorRocky
Fixed in:plugin-rhel8@sha256:08bfc089e6fa0ad39ee3be9966b4d9384e46b254d0d1eb78d9af7d94980aedf1_s390xRHSA-2024:9620
Fixed in:plugin-rhel8@sha256:4493946ad05cd3a657b69510d8927e7faf26e7965de8f362f98b06514da5257a_amd64RHSA-2024:10813
Fixed in:plugin-rhel9@sha256:a00927809eef6316bec078189f2378bfe08615e58dd1695030146815bd0b5f71_amd64RHSA-2024:8991
Fixed in:plugin-rhel8@sha256:2a945dd88f891b39eec266baaceb531de08ca197b9c1e9c658dc7ac69d36aa66_amd64RHSA-2024:9620
Fixed in:plugin-rhel9@sha256:fffe7b1ee512933d1f8f8dfe7ff788816e3412b671657de549a093d270679267_s390xRHSA-2024:8991
Fixed in:plugin-rhel8@sha256:29f9c1303e820796eb55ac9698af978bb34dbf6715c529cd9e8e1bf8a7379300_amd64RHSA-2025:0014
Fixed in:plugin-rhel9@sha256:ad49539de34c0755cbfa885d56e53dc34065dace894a6ffb8eb9c90da2b01bc5_arm64RHSA-2024:7922
Fixed in:plugin-rhel8@sha256:ef1fabf95b17eedc083783d9bc66bf12fc3082f89a36e13d18dffdcdf66179da_ppc64leRHSA-2024:9620
openshift4/openshift-route-controllerRed Hat / RHEL
Fixed in:manager-rhel8@sha256:738c17c7f9cfa3a99d1256a99f2e0f030452b8c5bc0ae5d816a0fc6b06111557_amd64RHSA-2025:0014
Fixed in:manager-rhel8@sha256:5ec55610f4f63b7e4b220e12881b4394f30d3074249d95111fe3a8f726365a90_s390xRHSA-2024:9620
Fixed in:manager-rhel9@sha256:49b048bf1d527f28960bf4f22332debcf3d43d0cb95f25c24396ce085c611c72_amd64RHSA-2024:7922
Fixed in:manager-rhel9@sha256:a6e910b2f83bf1408018e20092855e4afa771490662fd5a42582eed998969dda_s390xRHSA-2024:7922
Fixed in:manager-rhel8@sha256:e8dc8254684460948b700ebd01dfc033aa76185e9c58cf44e7f9f38b58d934a6_ppc64leRHSA-2024:8991
Fixed in:manager-rhel8@sha256:da7a28ce8d73dec535660cffd7836c43a193b1aca0af0258c2782c4453cc9125_amd64RHSA-2024:9620
Fixed in:manager-rhel8@sha256:d13b1f9887edbf020b1eaf18efc76116e0b89803f3c0a17e255a10b79bc0da0b_amd64RHSA-2024:10813
Fixed in:manager-rhel8@sha256:4d54bf984f9e1cb028230c8633c5dbe0bed070396ff38fed890d1d76335e6432_amd64RHSA-2024:8991
openshift4/openshift-route-controllerRocky
Fixed in:manager-rhel8@sha256:d57e27c1dfce4af3f5b7f4c7c6152d12635933001adb7818475bdcd460466714_ppc64leRHSA-2024:9620
Fixed in:manager-rhel8@sha256:4d54bf984f9e1cb028230c8633c5dbe0bed070396ff38fed890d1d76335e6432_amd64RHSA-2024:8991
Fixed in:manager-rhel9@sha256:c60dff4c875052f21a8b24a1086c496207b529b5921ba35022ed2e6dceea1314_arm64RHSA-2024:7922
Fixed in:manager-rhel8@sha256:d13b1f9887edbf020b1eaf18efc76116e0b89803f3c0a17e255a10b79bc0da0b_amd64RHSA-2024:10813
Fixed in:manager-rhel8@sha256:da7a28ce8d73dec535660cffd7836c43a193b1aca0af0258c2782c4453cc9125_amd64RHSA-2024:9620
Fixed in:manager-rhel8@sha256:487e09f41b960ca14a1ca14f76085a35f075f55222b8a2c08e974d79d5cf99d9_s390xRHSA-2024:8991
Fixed in:manager-rhel9@sha256:49b048bf1d527f28960bf4f22332debcf3d43d0cb95f25c24396ce085c611c72_amd64RHSA-2024:7922
Fixed in:manager-rhel8@sha256:5ec55610f4f63b7e4b220e12881b4394f30d3074249d95111fe3a8f726365a90_s390xRHSA-2024:9620
openshift4/oseRocky
Fixed in:ironic-rhel9@sha256:6158e639e72e7ac6b7730f290561d49cd5ee2c4ee4ef2f3e9138a75d94e00df3_amd64RHSA-2024:10813
Fixed in:prometheus@sha256:2a9e58f2fa0681d4f8c24cc322ad6b4138b55c915b5f3833866e97992287c71c_amd64RHSA-2024:10813
Fixed in:prometheus-alertmanager@sha256:9d5904d8b25b90f8b0ce4840b44ae38d70e55b77476a1042589bda6007baf36c_amd64RHSA-2024:10813
Fixed in:oauth-proxy@sha256:4aee098861080f307e69b0f7ef7a7e5ddc12ec0a674750945d4ee30d02feb29b_amd64RHSA-2024:10813
Fixed in:csi-livenessprobe@sha256:42938c36047b897d0e457b9e10dab5ac759a14fe3f12ed151264c854aeeb7cd9_amd64RHSA-2024:10813
Fixed in:coredns@sha256:dd736d1618719f2ffddceb697e4cc4527a764090e2b109663056f38f10f64b3b_amd64RHSA-2024:10813
Fixed in:configmap-reloader@sha256:510c453e836ee92024a59cbe6192b962bc23542ceeaf2a13bab217c0316d9a53_amd64RHSA-2024:10813
Fixed in:cluster-autoscaler@sha256:e9443368bf1d978e0616f45ad99c270ecdc7998e3c30aa01cfb05051a2c432e2_amd64RHSA-2024:10813
openshift4/oseRed Hat / RHEL
Fixed in:ovn-kubernetes@sha256:29d187c2f273530f58f51535165aa5b765d52374ad66143f94293ac9e35f1a41_ppc64leRHSA-2024:9620
Fixed in:thanos-rhel9@sha256:b93710373a9a9dcf083ef9b3f3051fe755b25fd3b19864d3ba848cbbc636ac9d_amd64RHSA-2024:7922
Fixed in:docker-builder@sha256:8ef6b1190f833ecdd6b96d924abc173aaaee0c286b6bbe89d7b2d1999374c450_amd64RHSA-2024:8991
Fixed in:multus-cni@sha256:da7c71e928ea97b1aad5dad1029d4166df2c23bd0e27ea2a513d9fd9c1c7972b_amd64RHSA-2024:8991
Fixed in:etcd-rhel9@sha256:888654d8c6e34f90a4f8c7b11407a46a6353119ce2f7ce8ceb02011a7690d605_amd64RHSA-2024:10813
Fixed in:installer-rhel9@sha256:f4a9ba75492b136f0e8f4ae27fc7dd1b94e59def7041f3164cd94565ba6c7dd3_amd64RHSA-2024:7922
Fixed in:hypershift-rhel9@sha256:d6d793db5b46e08aabdb1070ad143b37a5c58bef6bb316bb8c76acb72f971c5e_amd64RHSA-2024:7922
Fixed in:hypershift-rhel8@sha256:35ba29d529ec76a3fb55ca29a71ae0956aafffca915ea2665871b62fa0747754_amd64RHSA-2024:10813
openshift4/ose-agent-installerRed Hat / RHEL
Fixed in:utils-rhel9@sha256:4037f74f474c4e91e5728071dfae38cc70e031f97afd0e7b18026e68ddf47ac3_ppc64leRHSA-2024:9620
Fixed in:utils-rhel9@sha256:8e239b0702bde451eb31627ff07db0818573e567c2bea3ab6004a5aef4185965_s390xRHSA-2024:8991
Fixed in:orchestrator-rhel8@sha256:dd8bebb985b433f9244d8299091220f0a83bf15b7bdbbd3fe85a1556aef9b2a1_s390xRHSA-2024:8991
Fixed in:utils-rhel9@sha256:63171727236fad8170d6e3ab343a62942557d4b8c5c1de2c82d0b37c3290ccad_amd64RHSA-2024:8991
Fixed in:orchestrator-rhel8@sha256:d2ad6790029d358df0644cf1f0d474d26c36aae516f186990c77dd1a7e4fdf1f_amd64RHSA-2025:0014
Fixed in:orchestrator-rhel8@sha256:68df995c094bb021fcb0d01910e37a816027271c2fea010dcf2d101999d24428_amd64RHSA-2024:8991
Fixed in:orchestrator-rhel9@sha256:06c5e74913eb12f90420f0dc950f3b7744a672ccdf2837a3aa1f619976c7f8a2_ppc64leRHSA-2024:7922
Fixed in:utils-rhel9@sha256:b17e76d16ce7c2897f822d32d9288963f25e0644d6c792e2bb6d13727dec75d2_ppc64leRHSA-2024:7922
openshift4/ose-agent-installerRocky
Fixed in:utils-rhel9@sha256:4037f74f474c4e91e5728071dfae38cc70e031f97afd0e7b18026e68ddf47ac3_ppc64leRHSA-2024:9620
Fixed in:utils-rhel9@sha256:8e239b0702bde451eb31627ff07db0818573e567c2bea3ab6004a5aef4185965_s390xRHSA-2024:8991
Fixed in:orchestrator-rhel8@sha256:dd8bebb985b433f9244d8299091220f0a83bf15b7bdbbd3fe85a1556aef9b2a1_s390xRHSA-2024:8991
Fixed in:orchestrator-rhel8@sha256:8c58b41400b5f5442fcfae91e0011a6de10847369df27e732e37492643e35a67_s390xRHSA-2024:9620
Fixed in:utils-rhel9@sha256:d499ec8d5fb65256c5f8cb083bbeee7f2c36bc5a39ac72cbed97d502844ba333_arm64RHSA-2024:8991
Fixed in:orchestrator-rhel8@sha256:f582829bb24bd5ad6a6a766602170fe1722be3a82ae00b67f195c66ff9257444_arm64RHSA-2024:8991
Fixed in:utils-rhel9@sha256:24ceb691d8d8a80113069e07f597ad2c3de11af24a4f85cc6611b111e6f35204_arm64RHSA-2024:7922
Fixed in:orchestrator-rhel8@sha256:68df995c094bb021fcb0d01910e37a816027271c2fea010dcf2d101999d24428_amd64RHSA-2024:8991
openshift4/ose-agent-installer-apiRed Hat / RHEL
Fixed in:server-rhel8@sha256:25f4a9b1b616062a577678ad92901ebe00e3ed4be8504df7cca510ee25b5d539_s390xRHSA-2024:8991
Fixed in:server-rhel8@sha256:8bc83af7f70c29fa65ccc22fbf8bb2a697b165f378263a78e749c1d3833410d5_amd64RHSA-2024:10813
Fixed in:server-rhel8@sha256:9bc9088a896ebd6d3e5e6688de3ef5f903c1fa202aaa6caa1ec4a751fa31b6a3_arm64RHSA-2024:8991
Fixed in:server-rhel8@sha256:17876f54b968358be371190feaf27c9ac43e7950975908c4dd541201296cd8b0_amd64RHSA-2025:0014
Fixed in:server-rhel9@sha256:f6f5ebb3320f12bc582d3c3884500a890c81358af0c47fa3f9a2cb40fb4d5746_amd64RHSA-2024:7922
Fixed in:server-rhel9@sha256:c2ce73d6d042ee7b6dbc8c491573e383499c4326ebfab30b96c4e5248e164b34_arm64RHSA-2024:7922
Fixed in:server-rhel8@sha256:e4dff2ee3a608046b7f63c8f33db60cbb148521f02de2d58da5dcf700f3c9358_amd64RHSA-2024:8991
Fixed in:server-rhel9@sha256:af29a79edf94d915f7c4a1dc7793b9f0bb1643eacb5affb8d6f355b85eed3c5f_s390xRHSA-2024:7922
openshift4/ose-agent-installer-apiRocky
Fixed in:server-rhel8@sha256:2bfcac91e432c07978d83a45b10c098566ea38e7d7513c55a30a8b769d5982d0_s390xRHSA-2024:9620
Fixed in:server-rhel9@sha256:f6f5ebb3320f12bc582d3c3884500a890c81358af0c47fa3f9a2cb40fb4d5746_amd64RHSA-2024:7922
Fixed in:server-rhel8@sha256:253da56bd5da0d5ff45d284889465d522cefa735fb9bc329bf50e52935c45b4d_amd64RHSA-2024:9620
Fixed in:server-rhel9@sha256:af29a79edf94d915f7c4a1dc7793b9f0bb1643eacb5affb8d6f355b85eed3c5f_s390xRHSA-2024:7922
Fixed in:server-rhel8@sha256:6d1474e4fd213746576dc00425ba3ace61967fdfb6b0114a8f26e9230c1a6726_arm64RHSA-2024:9620
Fixed in:server-rhel8@sha256:2d68d7ea0c747ad95aeb5434fd63446017b66a52c8c4f70b45f386460f6b7154_ppc64leRHSA-2024:9620
Fixed in:server-rhel9@sha256:db4d753f37abaadf4515983f56e614fc2010b565d7657d291d75575f25a36517_ppc64leRHSA-2024:7922
Fixed in:server-rhel8@sha256:8bc83af7f70c29fa65ccc22fbf8bb2a697b165f378263a78e749c1d3833410d5_amd64RHSA-2024:10813

This vulnerability affects an unusually large number of packages. The highest-confidence fixes are shown above; the full list is longer. Check the referenced advisories for complete coverage.

TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityHigh
Privileges RequiredLow
User InteractionRequired
ScopeChanged

Impact

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Exploit Intelligence

0.67%probability of exploitation in 30 days
49thpercentile

Moderate risk: more likely to be exploited than 49% of all known CVEs.

References

Related Vulnerabilities

Other CWE-331 vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2008-1447Medium6.895%-Fix
CVE-2018-18326High7.554%--
CVE-2018-15812High7.547%--
CVE-2023-38357Medium5.35.3%-Fix
CVE-2015-3405High7.55.0%-Fix
CVE-2008-2108Critical9.84.3%-Fix

Common questions

How do I fix CVE-2024-6508?

Published advisories record a fix for 184 affected products. The "How to fix" section on this page lists the fixed version and source advisory for each one, so apply the entry matching what you actually run.

Is CVE-2024-6508 being actively exploited?

Not that we know of. CVE-2024-6508 is not in the CISA Known Exploited Vulnerabilities catalog. Its EPSS score of 0.67% is the estimated probability that it will be exploited in the next 30 days. That is higher than 49% of all scored CVEs.

How severe is CVE-2024-6508?

CVE-2024-6508 has a CVSS v3 base score of 8.0, rated high. CVSS rates the technical impact if the vulnerability is exploited, not how likely that is, so weigh it alongside the exploit-prediction score when you decide what to patch first.

What does CVE-2024-6508 affect?

Published advisories record a fix for openshift4/aws-kms-encryption (Red Hat / RHEL), openshift4/aws-kms-encryption (Rocky), openshift4/azure-kms-encryption (Rocky), openshift4/azure-kms-encryption (Red Hat / RHEL), and 180 more. The list on this page is capped, so there may be more.

Embed a live status badge for CVE-2024-6508
CVE-2024-6508 severity badge

Markdown

[![CVE-2024-6508](https://tridentstack.com/cve/badge/CVE-2024-6508.svg)](https://tridentstack.com/cve/CVE-2024-6508)

HTML

<a href="https://tridentstack.com/cve/CVE-2024-6508"><img src="https://tridentstack.com/cve/badge/CVE-2024-6508.svg" alt="CVE-2024-6508"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

See how it worksStart freeThis CVE lookup is free and always will be.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-08-11.