VDB
RHSA-2023%3A1158
RHSA-2023%3A1158
PUBLISHED
CVSS 7.5 HIGH
A denial of service attack was found in prometheus/client_golang. This flaw allows an attacker to produce a denial of service attack on an HTTP server by exploiting the InstrumentHandlerCounter function in the version below 1.11.1, resulting in a loss of availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-csi-external-attacher-rhel8@sha256:3cb96219ff293ea3ac62c4ecb71edd154eb18cab5aae286771a77080bf3ff7fc_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-csi-external-attacher-rhel8@sha256:3cb96219ff293ea3ac62c4ecb71edd154eb18cab5aae286771a77080bf3ff7fc_ppc64le, openshift4/ose-csi-external-attacher-rhel8@sha256:3cb96219ff293ea3ac62c4ecb71edd154eb18cab5aae286771a77080bf3ff7fc_ppc64le |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel8@sha256:cb55d63be6427b452b4cad074e167c486d0ef9dec7a10a46658cb4ba10a89dbc_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, * |
| Red Hat | openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:6eb05dd0773d2f0704ec683df90a008bf6a854db45c7a0da9af47c2babde3e5d_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-azure-cloud-controller-manager-rhel8@sha256:6eb05dd0773d2f0704ec683df90a008bf6a854db45c7a0da9af47c2babde3e5d_amd64, * |
| Red Hat | openshift4/ose-vsphere-csi-driver-operator-rhel8@sha256:048a7caa5799def25160aad7297364c760b70a29c127f0bc494900a416f36610_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-vsphere-csi-driver-operator-rhel8@sha256:048a7caa5799def25160aad7297364c760b70a29c127f0bc494900a416f36610_amd64, * |
| Red Hat | openshift4/ose-oauth-proxy@sha256:f38b1ad3d87b9750adae28181d79d74263da2fcf5a9ff9ebdabe1c75c0cda3e5_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-oauth-proxy@sha256:f38b1ad3d87b9750adae28181d79d74263da2fcf5a9ff9ebdabe1c75c0cda3e5_s390x |
| Red Hat | openshift4/ose-cli-artifacts@sha256:9abc63fda30b7d5573c6fa4560034d8b4201c9a368d6eda74c2e9be2ded16dd5_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cli-artifacts@sha256:9abc63fda30b7d5573c6fa4560034d8b4201c9a368d6eda74c2e9be2ded16dd5_s390x, * |
| Red Hat | openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator@sha256:9949af4790b70800a12c87831cd7814bdcd63f54c2de979f46ab4aff24ef004a_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator@sha256:9949af4790b70800a12c87831cd7814bdcd63f54c2de979f46ab4aff24ef004a_arm64, * |
| Red Hat | openshift4/ose-prom-label-proxy@sha256:38bbf14429a2792102d11cd0eb506483981f72c6469fb6fedcf5a23c288d806e_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-prom-label-proxy@sha256:38bbf14429a2792102d11cd0eb506483981f72c6469fb6fedcf5a23c288d806e_amd64, * |
| Red Hat | openshift4/ose-oauth-proxy@sha256:f38b1ad3d87b9750adae28181d79d74263da2fcf5a9ff9ebdabe1c75c0cda3e5_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, * |
| Red Hat | openshift4/ose-oauth-apiserver-rhel8@sha256:75d52e93592459bd45df6303d6323d09f760c162e6c75f7fbd80692386e19683_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-oauth-apiserver-rhel8@sha256:75d52e93592459bd45df6303d6323d09f760c162e6c75f7fbd80692386e19683_arm64, openshift4/ose-oauth-apiserver-rhel8@sha256:75d52e93592459bd45df6303d6323d09f760c162e6c75f7fbd80692386e19683_arm64 |
| Red Hat | openshift4/ose-oauth-apiserver-rhel8@sha256:daa5952516d856504d546792f4de5f4b040605251b93cad4627dd91a42723f9b_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-oauth-apiserver-rhel8@sha256:daa5952516d856504d546792f4de5f4b040605251b93cad4627dd91a42723f9b_ppc64le, * |
| Red Hat | openshift4/ose-tests@sha256:3300a8ed0e6017289432d8d48fc4513247ece0fdc1915ed4d7dba452049f7a17_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-tests@sha256:3300a8ed0e6017289432d8d48fc4513247ece0fdc1915ed4d7dba452049f7a17_arm64, openshift4/ose-tests@sha256:3300a8ed0e6017289432d8d48fc4513247ece0fdc1915ed4d7dba452049f7a17_arm64 |
| Red Hat | openshift4/ose-cluster-config-operator@sha256:2c1bea16c794dfe51cb3ad2692e23d00e9135f5dff64cdd354cd2f35d345c7b2_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, * |
| Red Hat | openshift4/oc-mirror-plugin-rhel8@sha256:606cc7e585dffdd3906665ce175b70e7b627c083f46e781c74ec8d03ecb6088b_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/oc-mirror-plugin-rhel8@sha256:606cc7e585dffdd3906665ce175b70e7b627c083f46e781c74ec8d03ecb6088b_amd64 |
| Red Hat | openshift4/ose-operator-marketplace@sha256:79d44becc28b0c5ed05551d7e6c23e943efe9b1e1fe22e50ed284ea1fb55f536_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-operator-marketplace@sha256:79d44becc28b0c5ed05551d7e6c23e943efe9b1e1fe22e50ed284ea1fb55f536_ppc64le, openshift4/ose-operator-marketplace@sha256:79d44becc28b0c5ed05551d7e6c23e943efe9b1e1fe22e50ed284ea1fb55f536_ppc64le |
| Red Hat | openshift4/ose-telemeter@sha256:cc3ab4cea052f7d3c94dfd50ad912fca046f4d7a0fbe99fd8a0f2751c0999300_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-telemeter@sha256:cc3ab4cea052f7d3c94dfd50ad912fca046f4d7a0fbe99fd8a0f2751c0999300_s390x |
| Red Hat | openshift4/ose-kube-storage-version-migrator-rhel8@sha256:fd7031b90d0eb6007b626e486f9f301e4d42bdad4c60d60a757b10fd8d7f3017_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-kube-storage-version-migrator-rhel8@sha256:fd7031b90d0eb6007b626e486f9f301e4d42bdad4c60d60a757b10fd8d7f3017_amd64, openshift4/ose-kube-storage-version-migrator-rhel8@sha256:fd7031b90d0eb6007b626e486f9f301e4d42bdad4c60d60a757b10fd8d7f3017_amd64 |
| Red Hat | openshift4/ovirt-csi-driver-rhel7@sha256:9e5dff4de30d0e9d9076aa61e183993ddb6f2b2f33382dac18b27ad8a71c89a8_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ovirt-csi-driver-rhel7@sha256:9e5dff4de30d0e9d9076aa61e183993ddb6f2b2f33382dac18b27ad8a71c89a8_ppc64le, openshift4/ovirt-csi-driver-rhel7@sha256:9e5dff4de30d0e9d9076aa61e183993ddb6f2b2f33382dac18b27ad8a71c89a8_ppc64le |
| Red Hat | openshift4/ose-csi-livenessprobe-rhel8@sha256:5ce29f374fcd6eaae87d19a7b6b3e1913549a4376cf9b3beea740a62817354a7_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-csi-livenessprobe-rhel8@sha256:5ce29f374fcd6eaae87d19a7b6b3e1913549a4376cf9b3beea740a62817354a7_amd64, * |
| Red Hat | openshift4/ose-openshift-apiserver-rhel8@sha256:8ec3adf522abbfa441a062690d5629ba5e4525544595b92de6763a186823372f_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-openshift-apiserver-rhel8@sha256:8ec3adf522abbfa441a062690d5629ba5e4525544595b92de6763a186823372f_arm64 |
…and 1196 more
Timeline
- Mar 14, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 14, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:1158 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2045880 issue
- https://issues.redhat.com/browse/OCPBUGS-2584 advisory
- https://issues.redhat.com/browse/OCPBUGS-5954 advisory
- https://issues.redhat.com/browse/OCPBUGS-621 advisory
- https://issues.redhat.com/browse/OCPBUGS-6993 advisory
- https://issues.redhat.com/browse/OCPBUGS-7727 advisory
- https://issues.redhat.com/browse/OCPBUGS-7735 advisory
- https://issues.redhat.com/browse/OCPBUGS-7950 advisory
- https://issues.redhat.com/browse/OCPBUGS-7987 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1158.json advisory
- https://access.redhat.com/security/cve/CVE-2022-21698 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-21698 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-21698 advisory
- https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p advisory