VDB
RHBA-2023%3A3611
RHBA-2023%3A3611
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | ocp-tools-4/jenkins-agent-base-rhel8@sha256:8e32ea3e4fd183303f9d39cf2547f094767ea281871779279c11621be8c2dbc8_ppc64le as a component of OpenShift Developer Tools and Services for OCP 4.12 | *, ocp-tools-4/jenkins-agent-base-rhel8@sha256:8e32ea3e4fd183303f9d39cf2547f094767ea281871779279c11621be8c2dbc8_ppc64le, ocp-tools-4/jenkins-agent-base-rhel8@sha256:8e32ea3e4fd183303f9d39cf2547f094767ea281871779279c11621be8c2dbc8_ppc64le |
| Red Hat | ocp-tools-4/jenkins-agent-base-rhel8@sha256:8e32ea3e4fd183303f9d39cf2547f094767ea281871779279c11621be8c2dbc8_ppc64le as a component of OpenShift Developer Tools and Services for OCP 4.12 | ocp-tools-4/jenkins-agent-base-rhel8@sha256:8e32ea3e4fd183303f9d39cf2547f094767ea281871779279c11621be8c2dbc8_ppc64le, *, * |
| Red Hat | ocp-tools-4/jenkins-agent-base-rhel8@sha256:d2b1d82bb799a1be9d814c756bcb62d56fcd6e508e931b74cada392a20818af6_amd64 as a component of OpenShift Developer Tools and Services for OCP 4.12 | *, ocp-tools-4/jenkins-agent-base-rhel8@sha256:d2b1d82bb799a1be9d814c756bcb62d56fcd6e508e931b74cada392a20818af6_amd64, ocp-tools-4/jenkins-agent-base-rhel8@sha256:d2b1d82bb799a1be9d814c756bcb62d56fcd6e508e931b74cada392a20818af6_amd64 |
| Red Hat | ocp-tools-4/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e_arm64 as a component of OpenShift Developer Tools and Services for OCP 4.12 | ocp-tools-4/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e_arm64, ocp-tools-4/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e_arm64, ocp-tools-4/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e_arm64 |
| Red Hat | ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x as a component of OpenShift Developer Tools and Services for OCP 4.12 | *, ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x, ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x |
| Red Hat | ocp-tools-4/jenkins-agent-base-rhel8@sha256:d2b1d82bb799a1be9d814c756bcb62d56fcd6e508e931b74cada392a20818af6_amd64 as a component of OpenShift Developer Tools and Services for OCP 4.12 | *, *, ocp-tools-4/jenkins-agent-base-rhel8@sha256:d2b1d82bb799a1be9d814c756bcb62d56fcd6e508e931b74cada392a20818af6_amd64 |
| Red Hat | ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64 as a component of OpenShift Developer Tools and Services for OCP 4.12 | ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64, ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64, ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64 |
| Red Hat | ocp-tools-4/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb_ppc64le as a component of OpenShift Developer Tools and Services for OCP 4.12 | *, *, * |
| Red Hat | ocp-tools-4/jenkins-agent-base-rhel8@sha256:85cf90bc3dd633e33cf9d26e99f92859c530d5bcfda1098b75b984a546de71d2_arm64 as a component of OpenShift Developer Tools and Services for OCP 4.12 | ocp-tools-4/jenkins-agent-base-rhel8@sha256:85cf90bc3dd633e33cf9d26e99f92859c530d5bcfda1098b75b984a546de71d2_arm64, ocp-tools-4/jenkins-agent-base-rhel8@sha256:85cf90bc3dd633e33cf9d26e99f92859c530d5bcfda1098b75b984a546de71d2_arm64, * |
| Red Hat | ocp-tools-4/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb_ppc64le as a component of OpenShift Developer Tools and Services for OCP 4.12 | ocp-tools-4/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb_ppc64le, ocp-tools-4/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb_ppc64le, ocp-tools-4/jenkins-rhel8@sha256:815b74527294e88078bed7849245cd6af2fde55eff426de76d627cd1bee320fb_ppc64le |
| Red Hat | ocp-tools-4/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc_s390x as a component of OpenShift Developer Tools and Services for OCP 4.12 | ocp-tools-4/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc_s390x, *, ocp-tools-4/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc_s390x |
| Red Hat | ocp-tools-4/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc_s390x as a component of OpenShift Developer Tools and Services for OCP 4.12 | ocp-tools-4/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc_s390x, *, ocp-tools-4/jenkins-agent-base-rhel8@sha256:3d008c8fe975ab44031a6a1a524b8501acbc040d283e81982f429f31b7cf46bc_s390x |
| Red Hat | ocp-tools-4/jenkins-agent-base-rhel8@sha256:85cf90bc3dd633e33cf9d26e99f92859c530d5bcfda1098b75b984a546de71d2_arm64 as a component of OpenShift Developer Tools and Services for OCP 4.12 | *, ocp-tools-4/jenkins-agent-base-rhel8@sha256:85cf90bc3dd633e33cf9d26e99f92859c530d5bcfda1098b75b984a546de71d2_arm64, * |
| Red Hat | ocp-tools-4/jenkins-rhel8@sha256:aba721a1e9eca5a15a170325844cfaa4f4c70f11621e4c41ec5a5bfc7b46534e_arm64 as a component of OpenShift Developer Tools and Services for OCP 4.12 | *, *, * |
| golang | net/http2 | |
| Red Hat | ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x as a component of OpenShift Developer Tools and Services for OCP 4.12 | *, ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x, ocp-tools-4/jenkins-rhel8@sha256:816601e12a70a9ae1c39f5933c871e4520776ed159fe73c09f46b9dace3ed4a3_s390x |
| Red Hat | ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64 as a component of OpenShift Developer Tools and Services for OCP 4.12 | ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64, *, ocp-tools-4/jenkins-rhel8@sha256:96dd08bfa56b6e09e7b65c97eda0a679670f1996c944aadfb2f3131d1e041ebc_amd64 |
Timeline
- Jun 15, 2023 CVE Published
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 20, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHBA-2023:3611 advisory
- https://docs.openshift.com/container-platform/4.12/cicd/jenkins/important-changes-to-openshift-jenkins-images.html advisory
- https://issues.redhat.com/browse/OCPBUGS-13652 advisory
- https://issues.redhat.com/browse/OCPBUGS-14393 advisory
- https://issues.redhat.com/browse/OCPBUGS-14642 advisory
- https://issues.redhat.com/browse/OCPBUGS-6632 advisory
- https://issues.redhat.com/browse/OCPBUGS-7016 advisory
- https://issues.redhat.com/browse/OCPBUGS-7017 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhba-2023_3611.json advisory
- https://access.redhat.com/security/cve/CVE-2022-41723 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2178358 issue
- https://www.cve.org/CVERecord?id=CVE-2022-41723 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-41723 advisory
- https://github.com/advisories/GHSA-vvpx-j8f3-3w6h advisory
- https://go.dev/cl/468135 advisory
- https://go.dev/cl/468295 advisory
- https://go.dev/issue/57855 advisory
- https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E advisory
- https://pkg.go.dev/vuln/GO-2023-1571 advisory
- https://vuln.go.dev/ID/GO-2023-1571.json advisory