VDB
RHBA-2024%3A1440
RHBA-2024%3A1440
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body (up to 1GiB), causing the receiver to fail reading the response, possibly leading to a Denial of Service (DoS).
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | migration-toolkit-virtualization/mtv-api-rhel9@sha256:0f4e01423ae4c7a6f825f2373c7766f78f12aba02d7521f20c57b7d8ab595c90_amd64 as a component of 8Base-MTV-2.5 | *, migration-toolkit-virtualization/mtv-api-rhel9@sha256:0f4e01423ae4c7a6f825f2373c7766f78f12aba02d7521f20c57b7d8ab595c90_amd64, migration-toolkit-virtualization/mtv-api-rhel9@sha256:0f4e01423ae4c7a6f825f2373c7766f78f12aba02d7521f20c57b7d8ab595c90_amd64 |
| Red Hat | migration-toolkit-virtualization/mtv-must-gather-api-rhel8@sha256:2705373c12a52a6381c7eaec7de49926d27ef001230cd185b5a1bc69e10c353b_amd64 as a component of 8Base-MTV-2.5 | migration-toolkit-virtualization/mtv-must-gather-api-rhel8@sha256:2705373c12a52a6381c7eaec7de49926d27ef001230cd185b5a1bc69e10c353b_amd64, *, migration-toolkit-virtualization/mtv-must-gather-api-rhel8@sha256:2705373c12a52a6381c7eaec7de49926d27ef001230cd185b5a1bc69e10c353b_amd64 |
| Red Hat | migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:43276cd2620b7b75f3e1ec1741f7ed252246085c841f479dcc2e132d868d33ca_amd64 as a component of 8Base-MTV-2.5 | *, *, * |
| Red Hat | migration-toolkit-virtualization/mtv-openstack-populator-rhel9@sha256:48c96f917696e7e6fae056f60ca1c296e99cfc12d2306fd706c5eacc65a14c5c_amd64 as a component of 8Base-MTV-2.5 | *, *, * |
| Red Hat | migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:45bc8de023bbdae27728c7756a5f701ea2c68f359aa1d0dac70040021465d82e_amd64 as a component of 8Base-MTV-2.5 | migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:45bc8de023bbdae27728c7756a5f701ea2c68f359aa1d0dac70040021465d82e_amd64, *, migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:45bc8de023bbdae27728c7756a5f701ea2c68f359aa1d0dac70040021465d82e_amd64 |
| Red Hat | migration-toolkit-virtualization/mtv-controller-rhel9@sha256:d0b80c42d50f35a897c1f6194bb945d39ead87d4f75e9b8749b445652b854118_amd64 as a component of 8Base-MTV-2.5 | migration-toolkit-virtualization/mtv-controller-rhel9@sha256:d0b80c42d50f35a897c1f6194bb945d39ead87d4f75e9b8749b445652b854118_amd64, *, migration-toolkit-virtualization/mtv-controller-rhel9@sha256:d0b80c42d50f35a897c1f6194bb945d39ead87d4f75e9b8749b445652b854118_amd64 |
| Red Hat | migration-toolkit-virtualization/mtv-rhv-populator-rhel8@sha256:8f94983a110597a7bade03a71b45ace8fb7ad140d9e1729f5fb6b329802d7413_amd64 as a component of 8Base-MTV-2.5 | *, migration-toolkit-virtualization/mtv-rhv-populator-rhel8@sha256:8f94983a110597a7bade03a71b45ace8fb7ad140d9e1729f5fb6b329802d7413_amd64, migration-toolkit-virtualization/mtv-rhv-populator-rhel8@sha256:8f94983a110597a7bade03a71b45ace8fb7ad140d9e1729f5fb6b329802d7413_amd64 |
| Red Hat | migration-toolkit-virtualization/mtv-virt-v2v-warm-rhel8@sha256:73cc6a3adbcce881ebe41aa3dbb27be1c85d9c0d2ff0533c83481db780449d7c_amd64 as a component of 8Base-MTV-2.5 | migration-toolkit-virtualization/mtv-virt-v2v-warm-rhel8@sha256:73cc6a3adbcce881ebe41aa3dbb27be1c85d9c0d2ff0533c83481db780449d7c_amd64, *, * |
| Red Hat | migration-toolkit-virtualization/mtv-must-gather-rhel8@sha256:3280cc7d7e3ef235d92b0b094868438c474f88ac10ffc0bf8b5a62db02003c63_amd64 as a component of 8Base-MTV-2.5 | migration-toolkit-virtualization/mtv-must-gather-rhel8@sha256:3280cc7d7e3ef235d92b0b094868438c474f88ac10ffc0bf8b5a62db02003c63_amd64, migration-toolkit-virtualization/mtv-must-gather-rhel8@sha256:3280cc7d7e3ef235d92b0b094868438c474f88ac10ffc0bf8b5a62db02003c63_amd64, migration-toolkit-virtualization/mtv-must-gather-rhel8@sha256:3280cc7d7e3ef235d92b0b094868438c474f88ac10ffc0bf8b5a62db02003c63_amd64 |
| Red Hat | migration-toolkit-virtualization/mtv-rhel8-operator@sha256:81a9daf048f6e4ff96d50e19df354f695d50724cec047981161b51e9bd3ac212_amd64 as a component of 8Base-MTV-2.5 | migration-toolkit-virtualization/mtv-rhel8-operator@sha256:81a9daf048f6e4ff96d50e19df354f695d50724cec047981161b51e9bd3ac212_amd64, migration-toolkit-virtualization/mtv-rhel8-operator@sha256:81a9daf048f6e4ff96d50e19df354f695d50724cec047981161b51e9bd3ac212_amd64, * |
| Red Hat | migration-toolkit-virtualization/mtv-operator-bundle@sha256:9d5aaf522aed32d5e63948e2ce9359d99603829aed91c3e0da2c529f555fec91_amd64 as a component of 8Base-MTV-2.5 | migration-toolkit-virtualization/mtv-operator-bundle@sha256:9d5aaf522aed32d5e63948e2ce9359d99603829aed91c3e0da2c529f555fec91_amd64, migration-toolkit-virtualization/mtv-operator-bundle@sha256:9d5aaf522aed32d5e63948e2ce9359d99603829aed91c3e0da2c529f555fec91_amd64, migration-toolkit-virtualization/mtv-operator-bundle@sha256:9d5aaf522aed32d5e63948e2ce9359d99603829aed91c3e0da2c529f555fec91_amd64 |
| Red Hat | migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:45bc8de023bbdae27728c7756a5f701ea2c68f359aa1d0dac70040021465d82e_amd64 as a component of 8Base-MTV-2.5 | *, migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:45bc8de023bbdae27728c7756a5f701ea2c68f359aa1d0dac70040021465d82e_amd64, migration-toolkit-virtualization/mtv-populator-controller-rhel9@sha256:45bc8de023bbdae27728c7756a5f701ea2c68f359aa1d0dac70040021465d82e_amd64 |
| Red Hat | migration-toolkit-virtualization/mtv-validation-rhel9@sha256:9f8b478fd28d214c2ddb28d892d1f3869d3a454ca664baa4a7657f420d55f942_amd64 as a component of 8Base-MTV-2.5 | *, migration-toolkit-virtualization/mtv-validation-rhel9@sha256:9f8b478fd28d214c2ddb28d892d1f3869d3a454ca664baa4a7657f420d55f942_amd64, * |
| Red Hat | migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:870717b17d1277d8b91b2cad27713d43043fa968babbbb96ab1bb76328f316bb_amd64 as a component of 8Base-MTV-2.5 | *, migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:870717b17d1277d8b91b2cad27713d43043fa968babbbb96ab1bb76328f316bb_amd64, migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:870717b17d1277d8b91b2cad27713d43043fa968babbbb96ab1bb76328f316bb_amd64 |
| Red Hat | migration-toolkit-virtualization/mtv-operator-bundle@sha256:9d5aaf522aed32d5e63948e2ce9359d99603829aed91c3e0da2c529f555fec91_amd64 as a component of 8Base-MTV-2.5 | migration-toolkit-virtualization/mtv-operator-bundle@sha256:9d5aaf522aed32d5e63948e2ce9359d99603829aed91c3e0da2c529f555fec91_amd64, migration-toolkit-virtualization/mtv-operator-bundle@sha256:9d5aaf522aed32d5e63948e2ce9359d99603829aed91c3e0da2c529f555fec91_amd64, migration-toolkit-virtualization/mtv-operator-bundle@sha256:9d5aaf522aed32d5e63948e2ce9359d99603829aed91c3e0da2c529f555fec91_amd64 |
| Red Hat | migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:870717b17d1277d8b91b2cad27713d43043fa968babbbb96ab1bb76328f316bb_amd64 as a component of 8Base-MTV-2.5 | *, migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:870717b17d1277d8b91b2cad27713d43043fa968babbbb96ab1bb76328f316bb_amd64, migration-toolkit-virtualization/mtv-console-plugin-rhel9@sha256:870717b17d1277d8b91b2cad27713d43043fa968babbbb96ab1bb76328f316bb_amd64 |
| Red Hat | migration-toolkit-virtualization/mtv-validation-rhel9@sha256:9f8b478fd28d214c2ddb28d892d1f3869d3a454ca664baa4a7657f420d55f942_amd64 as a component of 8Base-MTV-2.5 | migration-toolkit-virtualization/mtv-validation-rhel9@sha256:9f8b478fd28d214c2ddb28d892d1f3869d3a454ca664baa4a7657f420d55f942_amd64, *, * |
| Red Hat | migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:43276cd2620b7b75f3e1ec1741f7ed252246085c841f479dcc2e132d868d33ca_amd64 as a component of 8Base-MTV-2.5 | migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:43276cd2620b7b75f3e1ec1741f7ed252246085c841f479dcc2e132d868d33ca_amd64, migration-toolkit-virtualization/mtv-virt-v2v-rhel9@sha256:43276cd2620b7b75f3e1ec1741f7ed252246085c841f479dcc2e132d868d33ca_amd64, * |
| Red Hat | migration-toolkit-virtualization/mtv-rhv-populator-rhel8@sha256:8f94983a110597a7bade03a71b45ace8fb7ad140d9e1729f5fb6b329802d7413_amd64 as a component of 8Base-MTV-2.5 | *, migration-toolkit-virtualization/mtv-rhv-populator-rhel8@sha256:8f94983a110597a7bade03a71b45ace8fb7ad140d9e1729f5fb6b329802d7413_amd64, migration-toolkit-virtualization/mtv-rhv-populator-rhel8@sha256:8f94983a110597a7bade03a71b45ace8fb7ad140d9e1729f5fb6b329802d7413_amd64 |
| Red Hat | migration-toolkit-virtualization/mtv-must-gather-rhel8@sha256:3280cc7d7e3ef235d92b0b094868438c474f88ac10ffc0bf8b5a62db02003c63_amd64 as a component of 8Base-MTV-2.5 | migration-toolkit-virtualization/mtv-must-gather-rhel8@sha256:3280cc7d7e3ef235d92b0b094868438c474f88ac10ffc0bf8b5a62db02003c63_amd64, migration-toolkit-virtualization/mtv-must-gather-rhel8@sha256:3280cc7d7e3ef235d92b0b094868438c474f88ac10ffc0bf8b5a62db02003c63_amd64, * |
…and 8 more
Timeline
- Mar 20, 2024 CVE Published
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 19, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHBA-2024:1440 advisory
- https://issues.redhat.com/browse/MTV-952 advisory
- https://issues.redhat.com/browse/MTV-987 advisory
- https://issues.redhat.com/browse/MTV-992 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhba-2024_1440.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39326 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2253330 issue
- https://www.cve.org/CVERecord?id=CVE-2023-39326 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39326 advisory
- https://pkg.go.dev/vuln/GO-2023-2382 advisory
- https://access.redhat.com/security/cve/CVE-2023-42282 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2265161 issue
- https://www.cve.org/CVERecord?id=CVE-2023-42282 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-42282 advisory
- https://cosmosofcyberspace.github.io/npm_ip_cve/npm_ip_cve.html advisory