VDB
RHBA-2023%3A1750
RHBA-2023%3A1750
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in Go, where it is vulnerable to a denial of service caused by an excessive resource consumption flaw in the net/http and mime/multipart packages. By sending a specially-crafted request, a remote attacker can cause a denial of service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-k8s-prometheus-adapter@sha256:845aab8c274802f6ade7c6cf572d80d88212588babb6b89fa6bbdfeae1c93464_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-csi-driver-shared-resource-rhel8@sha256:3775c90ad40dd800f81567427e5b97685c80cb38895e4a0ffb21721578ccbe15_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-csi-driver-shared-resource-rhel8@sha256:3775c90ad40dd800f81567427e5b97685c80cb38895e4a0ffb21721578ccbe15_s390x, openshift4/ose-csi-driver-shared-resource-rhel8@sha256:3775c90ad40dd800f81567427e5b97685c80cb38895e4a0ffb21721578ccbe15_s390x |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:e5435672c426a5584d8acaef94910424776f97e91b18257af48b77d00089cb75_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/driver-toolkit-rhel8@sha256:e5435672c426a5584d8acaef94910424776f97e91b18257af48b77d00089cb75_ppc64le, openshift4/driver-toolkit-rhel8@sha256:e5435672c426a5584d8acaef94910424776f97e91b18257af48b77d00089cb75_ppc64le |
| Red Hat | openshift4/ose-service-ca-operator@sha256:40540051826f1727d98b3ecb284b8d8c1d18b3b13082bc1b4160bce82e54e360_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-service-ca-operator@sha256:40540051826f1727d98b3ecb284b8d8c1d18b3b13082bc1b4160bce82e54e360_ppc64le, openshift4/ose-service-ca-operator@sha256:40540051826f1727d98b3ecb284b8d8c1d18b3b13082bc1b4160bce82e54e360_ppc64le |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel8@sha256:0820c44f0e5d2333a7f852b826da1a8bf5fcada0cb869d928f23b186bf21662e_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-ovn-kubernetes-microshift-rhel8@sha256:0820c44f0e5d2333a7f852b826da1a8bf5fcada0cb869d928f23b186bf21662e_ppc64le, * |
| Red Hat | openshift4/ose-prometheus-alertmanager@sha256:61cc85e795d059981b42de4fa8b0bb6303cb8739aaed15f1b30ae6445dd3d843_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-prometheus-alertmanager@sha256:61cc85e795d059981b42de4fa8b0bb6303cb8739aaed15f1b30ae6445dd3d843_arm64 |
| Red Hat | openshift4/ose-installer@sha256:dda6e77a618d02de3cfeb93978992a67002b692d3937eb7e2438a4ac734aa4c9_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-installer@sha256:dda6e77a618d02de3cfeb93978992a67002b692d3937eb7e2438a4ac734aa4c9_ppc64le, openshift4/ose-installer@sha256:dda6e77a618d02de3cfeb93978992a67002b692d3937eb7e2438a4ac734aa4c9_ppc64le |
| Red Hat | openshift4/ose-thanos-rhel8@sha256:92e77c333557a4891eced2e3cc361e1585de4fa96d9f245eadc25e93cb321b05_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-thanos-rhel8@sha256:92e77c333557a4891eced2e3cc361e1585de4fa96d9f245eadc25e93cb321b05_arm64, openshift4/ose-thanos-rhel8@sha256:92e77c333557a4891eced2e3cc361e1585de4fa96d9f245eadc25e93cb321b05_arm64 |
| Red Hat | openshift4/ose-prometheus-node-exporter@sha256:13a9a7a7c69cc987da2c2807b0af1403ea3ef0521061ef3e79182a864c6836e8_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-prometheus-node-exporter@sha256:13a9a7a7c69cc987da2c2807b0af1403ea3ef0521061ef3e79182a864c6836e8_s390x, openshift4/ose-prometheus-node-exporter@sha256:13a9a7a7c69cc987da2c2807b0af1403ea3ef0521061ef3e79182a864c6836e8_s390x |
| Red Hat | openshift4/ose-cluster-storage-operator@sha256:c0cfee21c5db5ef1ce856f1e95bda058524356438d535f4baf89536999cd9bd9_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-storage-operator@sha256:c0cfee21c5db5ef1ce856f1e95bda058524356438d535f4baf89536999cd9bd9_arm64, openshift4/ose-cluster-storage-operator@sha256:c0cfee21c5db5ef1ce856f1e95bda058524356438d535f4baf89536999cd9bd9_arm64 |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:6b2e959985df9edb6a2173f3f4c4d3930ee5a7f30c765fad30673fa647c2b4cf_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:6b2e959985df9edb6a2173f3f4c4d3930ee5a7f30c765fad30673fa647c2b4cf_arm64 |
| Red Hat | openshift4/ovirt-csi-driver-rhel7@sha256:d4c52aea41dac681bd4f80fa432c9a7f267de1e66b490c9b4a004a91682089a0_s390x as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/cloud-network-config-controller-rhel8@sha256:919fb5388037f40cfc273192cfd68367d684b297475ab441ac16d33a56b253e2_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/cloud-network-config-controller-rhel8@sha256:919fb5388037f40cfc273192cfd68367d684b297475ab441ac16d33a56b253e2_ppc64le |
| Red Hat | openshift4/ose-ironic-static-ip-manager-rhel9@sha256:4ff8ed7333aa6df232e0ac9c862c1690c79b610a48d91e8cd45bcdcac4300c76_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-ironic-static-ip-manager-rhel9@sha256:4ff8ed7333aa6df232e0ac9c862c1690c79b610a48d91e8cd45bcdcac4300c76_arm64 |
| Red Hat | openshift4/ose-openshift-apiserver-rhel8@sha256:180d7391ed0d4eeea8e5b58d2066db63ec90577e8a9a5d2b09042751552d0848_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-openshift-apiserver-rhel8@sha256:180d7391ed0d4eeea8e5b58d2066db63ec90577e8a9a5d2b09042751552d0848_amd64, openshift4/ose-openshift-apiserver-rhel8@sha256:180d7391ed0d4eeea8e5b58d2066db63ec90577e8a9a5d2b09042751552d0848_amd64 |
| Red Hat | openshift4/ose-agent-installer-orchestrator-rhel8@sha256:e7e5d8fb18f183082e3e3fe957ff3679da59dbf142edbb8a5b1379cab3973e8c_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-agent-installer-orchestrator-rhel8@sha256:e7e5d8fb18f183082e3e3fe957ff3679da59dbf142edbb8a5b1379cab3973e8c_ppc64le, * |
| Red Hat | openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:1044dcf7350513ba8daaf429ad5ee1f36bec7f81a653f7ed9dcc20844762194f_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:1044dcf7350513ba8daaf429ad5ee1f36bec7f81a653f7ed9dcc20844762194f_ppc64le, openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:1044dcf7350513ba8daaf429ad5ee1f36bec7f81a653f7ed9dcc20844762194f_ppc64le |
| Red Hat | openshift4/ose-csi-external-snapshotter@sha256:c6ab2d15cfef9d5c1e71a81ef6b535ef19781ee4d52b8ae257309fa1d360dd21_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-csi-external-snapshotter@sha256:c6ab2d15cfef9d5c1e71a81ef6b535ef19781ee4d52b8ae257309fa1d360dd21_ppc64le, openshift4/ose-csi-external-snapshotter@sha256:c6ab2d15cfef9d5c1e71a81ef6b535ef19781ee4d52b8ae257309fa1d360dd21_ppc64le |
| Red Hat | openshift4/ose-insights-rhel8-operator@sha256:dfa47ad06cf280843399154cc5e3aeddd9d4cdb7ce928764d5cdb8c29090ffce_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-insights-rhel8-operator@sha256:dfa47ad06cf280843399154cc5e3aeddd9d4cdb7ce928764d5cdb8c29090ffce_arm64 |
| Red Hat | openshift4/ose-prometheus@sha256:51c816113a911948dee50c33d3ef01830c52aac96bd89661f1bdd306992516e0_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-prometheus@sha256:51c816113a911948dee50c33d3ef01830c52aac96bd89661f1bdd306992516e0_arm64, openshift4/ose-prometheus@sha256:51c816113a911948dee50c33d3ef01830c52aac96bd89661f1bdd306992516e0_arm64 |
…and 1232 more
Timeline
- Apr 19, 2023 CVE Published
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 29, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHBA-2023:1750 advisory
- https://issues.redhat.com/browse/OCPBUGS-11109 advisory
- https://issues.redhat.com/browse/OCPBUGS-11166 advisory
- https://issues.redhat.com/browse/OCPBUGS-11404 advisory
- https://issues.redhat.com/browse/OCPBUGS-11461 advisory
- https://issues.redhat.com/browse/OCPBUGS-11521 advisory
- https://issues.redhat.com/browse/OCPBUGS-3517 advisory
- https://issues.redhat.com/browse/OCPBUGS-6672 advisory
- https://issues.redhat.com/browse/OCPBUGS-6789 advisory
- https://issues.redhat.com/browse/OCPBUGS-7332 advisory
- https://issues.redhat.com/browse/OCPBUGS-7718 advisory
- https://issues.redhat.com/browse/OCPBUGS-7945 advisory
- https://issues.redhat.com/browse/OCPBUGS-7953 advisory
- https://issues.redhat.com/browse/OCPBUGS-8016 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhba-2023_1750.json advisory
- https://access.redhat.com/security/cve/CVE-2022-41725 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2178488 issue
- https://www.cve.org/CVERecord?id=CVE-2022-41725 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-41725 advisory
- https://go.dev/cl/468124 advisory
…and 3 more