CVE-2023-2319

It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the…

Critical · published May 17, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
61.7
In the wild
Unconfirmed
What it is

🚨 A critical oversight in Red Hat's PCS package! An update meant to enhance security actually left a known Webpack vulnerability wide open. 🔥 Think of it like a restaurant promising the freshest ingredients but forgetting to check the delivery — they still serve a dish with an allergen! Users of Red Hat Enterprise Linux 9.2 are at risk of being served a security meal that hasn't been properly vetted. This regression could allow for unpatched vulnerabilities to be exploited, putting systems at serious risk. If someone were to exploit this oversight, attackers could potentially gain unauthorized access or extract sensitive data. In a world where digital threats lurk, this could feel absolutely devastating!

Put simply

Think of it like a restaurant promising the freshest ingredients but forgetting to check the delivery — they still serve a dish with an allergen! Users of Red Hat Enterprise Linux 9.2 are at risk of being served a security meal that hasn't been properly vetted. CVE-2023-2319 highlights a failure to include a fix for an existing Webpack issue in the PCS package of RHBA-2023:2151, which has been a known issue since Red Hat 9.1. This regression leaves systems unnecessarily exposed despite a prior resolution.

What to do

This regression could allow for unpatched vulnerabilities to be exploited, putting systems at serious risk. If someone were to exploit this oversight, attackers could potentially gain unauthorized access or extract sensitive data. In a world where digital threats lurk, this could feel absolutely devastating! To stay secure, immediately patch to the latest version of the PCS package as soon as Red Hat provides a fix. Keep an eye on Red Hat's updates for guidance and ensure your systems are up-to-date! You've got this! Stay on top of updates, and you'll ensure your systems are protected. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00974 · 61.7th percentile
Published
2023-05-17T00:00Z
EPSS history
Timeline
  • 17 MAY 00:00Z
    It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the…
    cvelistv5