VDB
RHSA-2023%3A1030
RHSA-2023%3A1030
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in the net/http library of the golang package. This flaw allows an attacker to cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/network-tools-rhel8@sha256:9c8ee198f2f8ea9fb39c0cd52979565dcd92b0216cafdbc6d27650a13f669e77_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/network-tools-rhel8@sha256:9c8ee198f2f8ea9fb39c0cd52979565dcd92b0216cafdbc6d27650a13f669e77_amd64 |
| Red Hat | openshift4/ose-tools-rhel8@sha256:bf2d7a2e1f16e06d57fad1a8d053990c206faff7c3dcf9f7a519cc9a80634357_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-tools-rhel8@sha256:bf2d7a2e1f16e06d57fad1a8d053990c206faff7c3dcf9f7a519cc9a80634357_ppc64le |
| Red Hat | openshift4/ose-cluster-network-operator@sha256:b5beadbe32fa7ec270d445fcff892998b11665dff99aae7de40c925a9e3f5db2_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-network-operator@sha256:b5beadbe32fa7ec270d445fcff892998b11665dff99aae7de40c925a9e3f5db2_ppc64le |
| Red Hat | openshift4/ose-insights-rhel8-operator@sha256:f8b79eadf6b917496ad72a29f20b74f08791b848363d0fb66915a0cdbdc64083_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-insights-rhel8-operator@sha256:f8b79eadf6b917496ad72a29f20b74f08791b848363d0fb66915a0cdbdc64083_s390x |
| Red Hat | openshift4/ose-insights-rhel8-operator@sha256:b1ab1ec02034423ee022d5e6be039c5c130bf2477b1195165afcd57a8c9dd33b_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-insights-rhel8-operator@sha256:b1ab1ec02034423ee022d5e6be039c5c130bf2477b1195165afcd57a8c9dd33b_ppc64le |
| Red Hat | openshift4/ose-cluster-network-operator@sha256:94c162577fa2fe2be23b275c50bf9a2b9d11840edea185006906423a3dc01cb4_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-network-operator@sha256:94c162577fa2fe2be23b275c50bf9a2b9d11840edea185006906423a3dc01cb4_amd64 |
| Red Hat | openshift4/ose-tests@sha256:e229fe446d8d10452347bc3526bef35928c3e511307c0b0855a7a034ba76e186_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | * |
| Red Hat | openshift4/ose-console@sha256:27f522ae8d8cf2dc05d4f9d8818090b083fe5a24f7612a237a126dc8a21aaa94_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-console@sha256:27f522ae8d8cf2dc05d4f9d8818090b083fe5a24f7612a237a126dc8a21aaa94_amd64 |
| Red Hat | openshift4/ose-cluster-kube-apiserver-operator@sha256:e2225657d998872ba7ec0870520e9c294e3b7a108b7c41546abeaea3edafdfe7_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-kube-apiserver-operator@sha256:e2225657d998872ba7ec0870520e9c294e3b7a108b7c41546abeaea3edafdfe7_ppc64le |
| Red Hat | openshift4/ose-cluster-kube-apiserver-operator@sha256:78b07d1da142bd21f4755bfd188963c0310933a3ac12de3e03027d7f473a914d_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-kube-apiserver-operator@sha256:78b07d1da142bd21f4755bfd188963c0310933a3ac12de3e03027d7f473a914d_s390x |
| Red Hat | openshift4/ose-machine-os-images-rhel8@sha256:2542939060bca980aef8f85995946f8fc2cda41b66a7a559be64e2fdc7e8f8e9_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-machine-os-images-rhel8@sha256:2542939060bca980aef8f85995946f8fc2cda41b66a7a559be64e2fdc7e8f8e9_arm64 |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:92a2321c500156cd3fc7b5bf410bd1220684a3aaad2e34ea910061c442e168df_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/driver-toolkit-rhel8@sha256:92a2321c500156cd3fc7b5bf410bd1220684a3aaad2e34ea910061c442e168df_arm64 |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:837d7fa2b7c77a3428f9347ba1bee94f94425eb577cfd1f1918c375ad50c0c5c_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-node-tuning-operator@sha256:837d7fa2b7c77a3428f9347ba1bee94f94425eb577cfd1f1918c375ad50c0c5c_arm64 |
| Red Hat | openshift4/ose-machine-os-images-rhel8@sha256:2542939060bca980aef8f85995946f8fc2cda41b66a7a559be64e2fdc7e8f8e9_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-machine-os-images-rhel8@sha256:2542939060bca980aef8f85995946f8fc2cda41b66a7a559be64e2fdc7e8f8e9_arm64 |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:b4fbe80c845a7c193db8ccbf9c4d37b793ceaac92e02468249ccd7591cd42c1c_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/driver-toolkit-rhel8@sha256:b4fbe80c845a7c193db8ccbf9c4d37b793ceaac92e02468249ccd7591cd42c1c_s390x |
| Red Hat | openshift4/ose-cluster-kube-controller-manager-operator@sha256:640576e95ce4d5a6ef60d72246ef41e2f63e2f8010b6c170f5959461d99e232d_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-kube-controller-manager-operator@sha256:640576e95ce4d5a6ef60d72246ef41e2f63e2f8010b6c170f5959461d99e232d_arm64 |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:67d0ce68a4d2ff1fbedfe14f6fad7835dcc6ab99bb47d9a91148c9bc2b3b1e67_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-node-tuning-operator@sha256:67d0ce68a4d2ff1fbedfe14f6fad7835dcc6ab99bb47d9a91148c9bc2b3b1e67_s390x |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:837d7fa2b7c77a3428f9347ba1bee94f94425eb577cfd1f1918c375ad50c0c5c_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-node-tuning-operator@sha256:837d7fa2b7c77a3428f9347ba1bee94f94425eb577cfd1f1918c375ad50c0c5c_arm64 |
| Red Hat | openshift4/ose-installer@sha256:b03a8143326290e095214d4be36b9e945bc226d4dc7a3b9307232b16113aec74_s390x as a component of Red Hat OpenShift Container Platform 4.11 | * |
| Red Hat | openshift4/ose-installer-artifacts@sha256:91f09a1cf525590c6d7ce1ad2e22c2adda2b949edfd75175be8ca7839605df0d_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-installer-artifacts@sha256:91f09a1cf525590c6d7ce1ad2e22c2adda2b949edfd75175be8ca7839605df0d_amd64 |
…and 104 more
Timeline
- Mar 7, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:1030 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2161274 issue
- https://issues.redhat.com/browse/OCPBUGS-6834 advisory
- https://issues.redhat.com/browse/OCPBUGS-7174 advisory
- https://issues.redhat.com/browse/OCPBUGS-7494 advisory
- https://issues.redhat.com/browse/OCPBUGS-7526 advisory
- https://issues.redhat.com/browse/OCPBUGS-7530 advisory
- https://issues.redhat.com/browse/OCPBUGS-7814 advisory
- https://issues.redhat.com/browse/OCPBUGS-7851 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1030.json advisory
- https://access.redhat.com/security/cve/CVE-2022-41717 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-41717 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-41717 advisory
- https://go.dev/cl/455635 advisory
- https://go.dev/cl/455717 advisory
- https://go.dev/issue/56350 advisory
- https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ advisory
- https://pkg.go.dev/vuln/GO-2022-1144 advisory