{"schema":"vulnpedia.research/1","cve":"CVE-2024-14029","references":[{"url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-753j-mpmx-qq6g","tags":["vendor-advisory","exploit","WEB","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-09-15T15:17:52.942Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-09-15T15:17:52.942Z","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-753j-mpmx-qq6g"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-09-15T17:09:00.298Z","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-753j-mpmx-qq6g"},{"source":"nvd","sourceId":"CVE-2024-14029","modified":"2026-09-28T14:10:00.213","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-753j-mpmx-qq6g"},{"source":"ghsa","sourceId":"GHSA-753j-mpmx-qq6g","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-753j-mpmx-qq6g"},{"source":"ghsa","sourceId":"GHSA-753j-mpmx-qq6g","modified":"2026-09-16T03:56:03.776164621Z","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-753j-mpmx-qq6g"},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-753j-mpmx-qq6g"}]},{"url":"https://www.vulncheck.com/advisories/tornado-before-6.4.1-http-request-smuggling-via-transfer-encoding","tags":["third-party-advisory","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-09-15T15:17:52.942Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-09-15T15:17:52.942Z","url":"https://www.vulncheck.com/advisories/tornado-before-6.4.1-http-request-smuggling-via-transfer-encoding"},{"source":"nvd","sourceId":"CVE-2024-14029","modified":"2026-09-28T14:10:00.213","url":"https://www.vulncheck.com/advisories/tornado-before-6.4.1-http-request-smuggling-via-transfer-encoding"},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://www.vulncheck.com/advisories/tornado-before-6.4.1-http-request-smuggling-via-transfer-encoding"}]},{"url":"https://osv.dev/vulnerability/GHSA-753j-mpmx-qq6g","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-753j-mpmx-qq6g","modified":"2026-09-16T03:56:03.776164621Z","origins":[{"source":"ghsa","sourceId":"GHSA-753j-mpmx-qq6g","url":"https://osv.dev/vulnerability/GHSA-753j-mpmx-qq6g"},{"source":"ghsa","sourceId":"GHSA-753j-mpmx-qq6g","modified":"2026-09-16T03:56:03.776164621Z","url":"https://osv.dev/vulnerability/GHSA-753j-mpmx-qq6g"}]},{"url":"https://github.com/tornadoweb/tornado/commit/d65f6e71a77f53a1ff0a0dc55704be13f04eb572","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-753j-mpmx-qq6g","modified":"2026-09-16T03:56:03.776164621Z","origins":[{"source":"ghsa","sourceId":"GHSA-753j-mpmx-qq6g","url":"https://github.com/tornadoweb/tornado/commit/d65f6e71a77f53a1ff0a0dc55704be13f04eb572"},{"source":"ghsa","sourceId":"GHSA-753j-mpmx-qq6g","modified":"2026-09-16T03:56:03.776164621Z","url":"https://github.com/tornadoweb/tornado/commit/d65f6e71a77f53a1ff0a0dc55704be13f04eb572"}]},{"url":"https://github.com/tornadoweb/tornado","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-753j-mpmx-qq6g","modified":"2026-09-16T03:56:03.776164621Z","origins":[{"source":"ghsa","sourceId":"GHSA-753j-mpmx-qq6g","url":"https://github.com/tornadoweb/tornado"},{"source":"ghsa","sourceId":"GHSA-753j-mpmx-qq6g","modified":"2026-09-16T03:56:03.776164621Z","url":"https://github.com/tornadoweb/tornado"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2024-14029","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://access.redhat.com/security/cve/CVE-2024-14029"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533918","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533918"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-14029","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2024-14029"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-14029","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-14029"}]},{"url":"https://access.redhat.com/errata/RHSA-2024:10836","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://access.redhat.com/errata/RHSA-2024:10836"}]},{"url":"https://access.redhat.com/errata/RHSA-2024:10843","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://access.redhat.com/errata/RHSA-2024:10843"}]},{"url":"https://access.redhat.com/errata/RHSA-2024:10590","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://access.redhat.com/errata/RHSA-2024:10590"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84843","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84843"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84844","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84844"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:2470","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://access.redhat.com/errata/RHSA-2025:2470"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:2471","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://access.redhat.com/errata/RHSA-2025:2471"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84798","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84798"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:85135","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://access.redhat.com/errata/RHSA-2026:85135"}]},{"url":"https://access.redhat.com/errata/RHSA-2025:3108","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://access.redhat.com/errata/RHSA-2025:3108"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:86891","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://access.redhat.com/errata/RHSA-2026:86891"}]},{"source":"euvd","sourceId":"EUVD-2024-55765","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-55765","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2024-55765","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-55765"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-753j-mpmx-qq6g","url":"https://osv.dev/vulnerability/GHSA-753j-mpmx-qq6g","ecosystem":"PyPI","name":"tornado","purl":"pkg:pypi/tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.1"}]}],"versions":["0.2","1.0","1.1","1.1.1","1.2","1.2.1","2.0","2.1","2.1.1","2.2","2.2.1","2.3","2.4","2.4.1","3.0","3.0.1","3.0.2","3.1","3.1.1","3.2","3.2.1","3.2.2","4.0","4.0.1","4.0.2","4.1","4.1b2","4.2","4.2.1","4.2b1","4.3","4.3b1","4.3b2","4.4","4.4.1","4.4.2","4.4.3","4.4b1","4.5","4.5.1","4.5.2","4.5.3","4.5b1","4.5b2","5.0","5.0.1","5.0.2","5.0a1","5.0b1","5.1","5.1.1","5.1b1","6.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0a1","6.0b1","6.1","6.1b1","6.1b2","6.2","6.2b1","6.2b2","6.3","6.3.1","6.3.2","6.3.3","6.3b1","6.4","6.4b1"],"databaseSpecific":{"last_known_affected_version_range":"<= 6.4.0","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/06/GHSA-753j-mpmx-qq6g/GHSA-753j-mpmx-qq6g.json"},"modified":"2026-09-16T03:56:03.776164621Z","origins":[{"source":"ghsa","sourceId":"GHSA-753j-mpmx-qq6g","modified":"2026-09-16T03:56:03.776164621Z","url":"https://osv.dev/vulnerability/GHSA-753j-mpmx-qq6g"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"AppStream-9.2.0.Z.EUS:python-tornado-0:6.4.2-1.el9_2.src","product":"python-tornado-0:6.4.2-1.el9_2.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2024:10836"},{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."}],"purl":"pkg:rpm/redhat/python-tornado@6.4.2-1.el9_2?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"AppStream-9.4.0.Z.EUS:python-tornado-0:6.4.2-1.el9_4.src","product":"python-tornado-0:6.4.2-1.el9_4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2024:10843"},{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."}],"purl":"pkg:rpm/redhat/python-tornado@6.4.2-1.el9_4?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"AppStream-9.4.0.Z.EUS:python3-tornado-debuginfo-0:6.4.2-1.el9_4.x86_64","product":"python3-tornado-debuginfo-0:6.4.2-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2024:10843"},{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."}],"purl":"pkg:rpm/redhat/python3-tornado-debuginfo@6.4.2-1.el9_4?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"AppStream-9.5.0.Z.MAIN:python3-tornado-debuginfo-0:6.4.2-1.el9_5.x86_64","product":"python3-tornado-debuginfo-0:6.4.2-1.el9_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2024:10590"},{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."}],"purl":"pkg:rpm/redhat/python3-tornado-debuginfo@6.4.2-1.el9_5?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"HighAvailability-8.4.0.Z.EUS.EXTENSION:pcs-0:0.10.8-1.el8_4.12.src","product":"pcs-0:0.10.8-1.el8_4.12.src as a component of Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:84843"},{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."}],"purl":"pkg:rpm/redhat/pcs@0.10.8-1.el8_4.12?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"HighAvailability-8.8.0.Z.TUS:pcs-snmp-0:0.10.15-4.el8_8.12.x86_64","product":"pcs-snmp-0:0.10.15-4.el8_8.12.x86_64 as a component of Red Hat Enterprise Linux High Availability TUS (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:84844"},{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."}],"purl":"pkg:rpm/redhat/pcs-snmp@0.10.15-4.el8_8.12?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"HighAvailability-9.4.0.Z.EUS:pcs-0:0.11.7-2.el9_4.3.s390x","product":"pcs-0:0.11.7-2.el9_4.3.s390x as a component of Red Hat Enterprise Linux High Availability EUS (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:2470"},{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."}],"purl":"pkg:rpm/redhat/pcs@0.11.7-2.el9_4.3?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"HighAvailability-9.5.0.Z.MAIN:pcs-snmp-0:0.11.8-1.el9_5.2.ppc64le","product":"pcs-snmp-0:0.11.8-1.el9_5.2.ppc64le as a component of Red Hat Enterprise Linux High Availability (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:2471"},{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."}],"purl":"pkg:rpm/redhat/pcs-snmp@0.11.8-1.el9_5.2?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"ResilientStorage-8.10.0.Z.MAIN.EUS:pcs-0:0.10.18-2.el8_10.10.src","product":"pcs-0:0.10.18-2.el8_10.10.src as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:84798"},{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."}],"purl":"pkg:rpm/redhat/pcs@0.10.18-2.el8_10.10?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"ResilientStorage-9.4.0.Z.EUS:pcs-0:0.11.7-2.el9_4.3.ppc64le","product":"pcs-0:0.11.7-2.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux Resilient Storage EUS (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:2470"},{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."}],"purl":"pkg:rpm/redhat/pcs@0.11.7-2.el9_4.3?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"ResilientStorage-9.5.0.Z.MAIN:pcs-snmp-0:0.11.8-1.el9_5.2.x86_64","product":"pcs-snmp-0:0.11.8-1.el9_5.2.x86_64 as a component of Red Hat Enterprise Linux Resilient Storage (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2025:2471"},{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."}],"purl":"pkg:rpm/redhat/pcs-snmp@0.11.8-1.el9_5.2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"red_hat_enterprise_linux_7:python-tornado","product":"python-tornado as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/python-tornado","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"red_hat_enterprise_linux_7:python-tornado-doc","product":"python-tornado-doc as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/python-tornado-doc","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9","product":"rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-cuda-rhel9@sha256:e0fbb896811ab54d183e23612030072b946674824bad697bf2b3f68362651662?repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9","product":"rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/bootc-gaudi-rhel9@sha256:e1057b59ca1be9501332abf97230855e85c7df858356be0da9dce230ea7e98e1?repository_url=registry.redhat.io/rhelai3/bootc-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/disk-image-cuda-rhel9","product":"rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/disk-image-cuda-rhel9@sha256:9d807c5381e81734b6303669421b265aea1eca54a18ca577d453508ffde1770c?repository_url=registry.redhat.io/rhelai3/disk-image-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"red_hat_openstack_platform_16.2:rhosp-rhel8/openstack-cinder-backup","product":"rhosp-rhel8/openstack-cinder-backup as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/openstack-cinder-backup@sha256:2ea0f1758551777be62b1c42c4f23b2fee1e172cf8e5bfb7986bcae3fd940e22?repository_url=registry.redhat.io/rhosp-rhel8/openstack-cinder-backup","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"red_hat_openstack_platform_16.2:rhosp-rhel8/openstack-cinder-volume","product":"rhosp-rhel8/openstack-cinder-volume as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/openstack-cinder-volume@sha256:108d3a26be8132c496bb11af28f0c065fd2c903d72ab3c35505d9e08fb6be12f?repository_url=registry.redhat.io/rhosp-rhel8/openstack-cinder-volume","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"red_hat_openstack_platform_16.2:rhosp-rhel8/openstack-manila-share","product":"rhosp-rhel8/openstack-manila-share as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/openstack-manila-share@sha256:c5d13016d5986ad584194e8f3d38afb74b119cfb01cd44f7503af8491416cbc7?repository_url=registry.redhat.io/rhosp-rhel8/openstack-manila-share","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"red_hat_openstack_platform_16.2:rhosp-rhel8/openstack-mariadb","product":"rhosp-rhel8/openstack-mariadb as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/openstack-mariadb@sha256:907adbb571120fb91473d982a117ee61fa54ed5c2c309e171eb55612b3ae8f46?repository_url=registry.redhat.io/rhosp-rhel8/openstack-mariadb","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"red_hat_openstack_platform_16.2:rhosp-rhel8/openstack-rabbitmq","product":"rhosp-rhel8/openstack-rabbitmq as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/openstack-rabbitmq@sha256:950955f4f3aad6f07d3984592ca240c5f14912a5b1db629ed62bcfd20180442d?repository_url=registry.redhat.io/rhosp-rhel8/openstack-rabbitmq","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"red_hat_openstack_platform_16.2:rhosp-rhel8/openstack-redis","product":"rhosp-rhel8/openstack-redis as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Configure upstream reverse proxies or load balancers to strictly normalize HTTP headers and reject any incoming requests containing duplicate Transfer-Encoding headers before they reach the backend Tornado application worker."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/openstack-redis@sha256:068aa1a4181ce992f44b01bf81f4134ce6288a085ce49ccae53cb572157feace?repository_url=registry.redhat.io/rhosp-rhel8/openstack-redis","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"Red Hat OpenShift AI 3.5:registry.redhat.io/rhoai/odh-ai-gateway-operator-rhel9@sha256:3f59cdb3c2978ec98973d54226b23e3f106a872d25eab72590f834b7da2994af_s390x","product":"registry.redhat.io/rhoai/odh-ai-gateway-operator-rhel9@sha256:3f59cdb3c2978ec98973d54226b23e3f106a872d25eab72590f834b7da2994af_s390x as a component of Red Hat OpenShift AI 3.5","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-ai-gateway-operator-rhel9@sha256%3A3f59cdb3c2978ec98973d54226b23e3f106a872d25eab72590f834b7da2994af?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-ai-gateway-operator-rhel9&tag=1791988137","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"Red Hat OpenShift AI 3.5:registry.redhat.io/rhoai/odh-eval-hub-rhel9@sha256:e5d67c0d0cd38ff9eab982fda1c2e6cdb5e97ebce54a2b501ca3d5d19e131906_amd64","product":"registry.redhat.io/rhoai/odh-eval-hub-rhel9@sha256:e5d67c0d0cd38ff9eab982fda1c2e6cdb5e97ebce54a2b501ca3d5d19e131906_amd64 as a component of Red Hat OpenShift AI 3.5","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-eval-hub-rhel9@sha256%3Ae5d67c0d0cd38ff9eab982fda1c2e6cdb5e97ebce54a2b501ca3d5d19e131906?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-eval-hub-rhel9&tag=1791946053","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"Red Hat OpenShift AI 3.5:registry.redhat.io/rhoai/odh-kserve-localmodelnode-agent-rhel9@sha256:d5e6cf3d83ff4b2f1610f7352d12771df978471a910e9797e4759a3e477b3261_amd64","product":"registry.redhat.io/rhoai/odh-kserve-localmodelnode-agent-rhel9@sha256:d5e6cf3d83ff4b2f1610f7352d12771df978471a910e9797e4759a3e477b3261_amd64 as a component of Red Hat OpenShift AI 3.5","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-kserve-localmodelnode-agent-rhel9@sha256%3Ad5e6cf3d83ff4b2f1610f7352d12771df978471a910e9797e4759a3e477b3261?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-kserve-localmodelnode-agent-rhel9&tag=1791949630","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"Red Hat OpenShift AI 3.5:registry.redhat.io/rhoai/odh-llm-d-batch-gateway-processor-rhel9@sha256:683d1f2e57b2e5212019b164a3e908e83872e6616c4eddcd38697d093686804e_arm64","product":"registry.redhat.io/rhoai/odh-llm-d-batch-gateway-processor-rhel9@sha256:683d1f2e57b2e5212019b164a3e908e83872e6616c4eddcd38697d093686804e_arm64 as a component of Red Hat OpenShift AI 3.5","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-llm-d-batch-gateway-processor-rhel9@sha256%3A683d1f2e57b2e5212019b164a3e908e83872e6616c4eddcd38697d093686804e?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-llm-d-batch-gateway-processor-rhel9&tag=1791949062","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"Red Hat OpenShift AI 3.5:registry.redhat.io/rhoai/odh-mlserver-cuda-rhel9@sha256:fa8b099930cd6b60a73b72d3e3a054615591c94c5b8734e6736ed4511b61b8a3_arm64","product":"registry.redhat.io/rhoai/odh-mlserver-cuda-rhel9@sha256:fa8b099930cd6b60a73b72d3e3a054615591c94c5b8734e6736ed4511b61b8a3_arm64 as a component of Red Hat OpenShift AI 3.5","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-mlserver-cuda-rhel9@sha256%3Afa8b099930cd6b60a73b72d3e3a054615591c94c5b8734e6736ed4511b61b8a3?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-mlserver-cuda-rhel9&tag=1790962549","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"Red Hat OpenShift AI 3.5:registry.redhat.io/rhoai/odh-model-performance-data-rhel9@sha256:3bb692f4856da5d3a364b4b37b66da7cfc21c559875800c0b9c91fd58d1b2e4f_arm64","product":"registry.redhat.io/rhoai/odh-model-performance-data-rhel9@sha256:3bb692f4856da5d3a364b4b37b66da7cfc21c559875800c0b9c91fd58d1b2e4f_arm64 as a component of Red Hat OpenShift AI 3.5","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-model-performance-data-rhel9@sha256%3A3bb692f4856da5d3a364b4b37b66da7cfc21c559875800c0b9c91fd58d1b2e4f?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-model-performance-data-rhel9&tag=1790962474","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"Red Hat OpenShift AI 3.5:registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256:36c28a270b8244026113af32bc593d7346360a710da78061ab3075809b4bc2b6_amd64","product":"registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256:36c28a270b8244026113af32bc593d7346360a710da78061ab3075809b4bc2b6_amd64 as a component of Red Hat OpenShift AI 3.5","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256%3A36c28a270b8244026113af32bc593d7346360a710da78061ab3075809b4bc2b6?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9&tag=1791816462","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"Red Hat OpenShift AI 3.5:registry.redhat.io/rhoai/odh-training-rocm64-torch29-py312-rhel9@sha256:bf92266597ce7a7931391590168abf8387bd531e42ee6f47d0903535fea2459a_amd64","product":"registry.redhat.io/rhoai/odh-training-rocm64-torch29-py312-rhel9@sha256:bf92266597ce7a7931391590168abf8387bd531e42ee6f47d0903535fea2459a_amd64 as a component of Red Hat OpenShift AI 3.5","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-training-rocm64-torch29-py312-rhel9@sha256%3Abf92266597ce7a7931391590168abf8387bd531e42ee6f47d0903535fea2459a?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-training-rocm64-torch29-py312-rhel9&tag=1791926972","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"Red Hat OpenShift AI 3.5:registry.redhat.io/rhoai/rhai-cli-rhel9@sha256:7063100cab54fb0662809c17daa09e7ee74316eebcb4699d7ea870e09d4a30ad_amd64","product":"registry.redhat.io/rhoai/rhai-cli-rhel9@sha256:7063100cab54fb0662809c17daa09e7ee74316eebcb4699d7ea870e09d4a30ad_amd64 as a component of Red Hat OpenShift AI 3.5","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/rhoai/odh-cli-rhel9@sha256%3A7063100cab54fb0662809c17daa09e7ee74316eebcb4699d7ea870e09d4a30ad?arch=amd64&repository_url=registry.redhat.io/rhoai/rhai-cli-rhel9&tag=1791945905","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]},{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json","productId":"red_hat_openstack_platform_17.1:rhosp-rhel9/openstack-redis","product":"rhosp-rhel9/openstack-redis as a component of Red Hat OpenStack Platform 17.1","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/openstack-redis@sha256:8096c9e75e718782eaf27f1c8375af14a13446245c2cc4ab9b5a59e4cf8f46fc?repository_url=registry.redhat.io/rhosp-rhel9/openstack-redis","origins":[{"source":"redhat","sourceId":"CVE-2024-14029","modified":"2026-10-21T19:03:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-14029.json"}]}],"vendorCoverage":{"total":553,"shown":32,"omitted":521,"source":"redhat"}}