VDB
RHSA-2023%3A2014
RHSA-2023%3A2014
PUBLISHED
CVSS 7.5 HIGH
A denial of service attack was found in prometheus/client_golang. This flaw allows an attacker to produce a denial of service attack on an HTTP server by exploiting the InstrumentHandlerCounter function in the version below 1.11.1, resulting in a loss of availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:594df772144bbd54bdef8526f8a1db8b9410c4f6a3521198676eb0a2641a9a7e_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/driver-toolkit-rhel8@sha256:594df772144bbd54bdef8526f8a1db8b9410c4f6a3521198676eb0a2641a9a7e_s390x |
| Red Hat | openshift4/ose-console-operator@sha256:221a85175eb8ebe2fb0076fe2fbcf7261efc7197f8457c8c93fd57c49e0059ee_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-console-operator@sha256:221a85175eb8ebe2fb0076fe2fbcf7261efc7197f8457c8c93fd57c49e0059ee_arm64 |
| Red Hat | openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:e8888207c7ba840fd8769e572b96265db79431b77e7ee08c653e8df8e37c3784_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:e8888207c7ba840fd8769e572b96265db79431b77e7ee08c653e8df8e37c3784_amd64 |
| Red Hat | openshift4/ose-multus-admission-controller@sha256:ce7b1592296f173c1627e563befc13b0c27fc7ad51cffcb047c02fa7a3fd1c3a_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-multus-admission-controller@sha256:ce7b1592296f173c1627e563befc13b0c27fc7ad51cffcb047c02fa7a3fd1c3a_arm64, openshift4/ose-multus-admission-controller@sha256:ce7b1592296f173c1627e563befc13b0c27fc7ad51cffcb047c02fa7a3fd1c3a_arm64 |
| Red Hat | openshift4/ose-machine-config-operator@sha256:03e3c6d3366b1cfb8afbec8a0e13e1f060ef8586cc14a50a8321e8989852b8ad_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-machine-config-operator@sha256:03e3c6d3366b1cfb8afbec8a0e13e1f060ef8586cc14a50a8321e8989852b8ad_arm64 |
| Red Hat | openshift4/ose-machine-config-operator@sha256:ced7f91429179bea95f2569793a3ede7fa4a2b3ebfb1917522994cf194b4a6e9_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-machine-config-operator@sha256:ced7f91429179bea95f2569793a3ede7fa4a2b3ebfb1917522994cf194b4a6e9_s390x |
| Red Hat | openshift4/ose-tools-rhel8@sha256:a9e61d9502a903163aaa4dde8edba9f176abdc837dd4c774897376ecf33ef222_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-tools-rhel8@sha256:a9e61d9502a903163aaa4dde8edba9f176abdc837dd4c774897376ecf33ef222_amd64 |
| Red Hat | openshift4/ose-tests@sha256:178cc16090a1cd2d916270e956bf3848006faae71e12911d6807a3220b1212c2_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-tests@sha256:178cc16090a1cd2d916270e956bf3848006faae71e12911d6807a3220b1212c2_s390x, openshift4/ose-tests@sha256:178cc16090a1cd2d916270e956bf3848006faae71e12911d6807a3220b1212c2_s390x |
| Red Hat | openshift4/ose-tools-rhel8@sha256:3a42c24754bb8d38b3bb509a7360b493a72697cd9c10f19631846c5597f4b0c2_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-tools-rhel8@sha256:3a42c24754bb8d38b3bb509a7360b493a72697cd9c10f19631846c5597f4b0c2_ppc64le, * |
| Red Hat | openshift4/ose-cluster-ingress-operator@sha256:92d0698b248981fec14af4c89f4afb9e05a187065b8c8e10e206af79dd797120_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-ingress-operator@sha256:92d0698b248981fec14af4c89f4afb9e05a187065b8c8e10e206af79dd797120_ppc64le, * |
| Red Hat | openshift4/ose-console@sha256:8b7a226789b0d58f02102d1913d6710d4792d38df74448f20a895110a25a1000_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-console@sha256:8b7a226789b0d58f02102d1913d6710d4792d38df74448f20a895110a25a1000_ppc64le |
| Red Hat | openshift4/ose-console-operator@sha256:cd0bba83906b08b129ef82c952d3b2a6bdf35cbc20d35327d7b91f6704a7e1fd_s390x as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-console-operator@sha256:cd0bba83906b08b129ef82c952d3b2a6bdf35cbc20d35327d7b91f6704a7e1fd_s390x |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:14eb6756fa68f96b9c6cad424ba36e756045c4c020cd37875d9d03abeb9e7d1f_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/driver-toolkit-rhel8@sha256:14eb6756fa68f96b9c6cad424ba36e756045c4c020cd37875d9d03abeb9e7d1f_arm64 |
| Red Hat | openshift4/ose-cluster-ingress-operator@sha256:2f8732aa24b6f56934c3b639c9b3e4caa445f87972df74a174b03d6fa147b41a_s390x as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-ingress-operator@sha256:2f8732aa24b6f56934c3b639c9b3e4caa445f87972df74a174b03d6fa147b41a_s390x, * |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:14eb6756fa68f96b9c6cad424ba36e756045c4c020cd37875d9d03abeb9e7d1f_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/driver-toolkit-rhel8@sha256:14eb6756fa68f96b9c6cad424ba36e756045c4c020cd37875d9d03abeb9e7d1f_arm64, openshift4/driver-toolkit-rhel8@sha256:14eb6756fa68f96b9c6cad424ba36e756045c4c020cd37875d9d03abeb9e7d1f_arm64 |
| Red Hat | openshift4/ose-tests@sha256:36c242bdd0868571966ef95c2092fb83964b0a7b76cc382c6e8321c723f9d08b_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, openshift4/ose-tests@sha256:36c242bdd0868571966ef95c2092fb83964b0a7b76cc382c6e8321c723f9d08b_arm64 |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:99cf5c7b5460d5dddc2207f4652b424466c79bd35154c1d3ff4127bc4033e012_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-node-tuning-operator@sha256:99cf5c7b5460d5dddc2207f4652b424466c79bd35154c1d3ff4127bc4033e012_amd64, * |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:8ec345bc19afdb55cc3de2966e85d3023da907ff3a8d0ef9b9b207a31b617574_ppc64le as a component of Red Hat OpenShift Container Platform 4.11 | openshift4/ose-cluster-node-tuning-operator@sha256:8ec345bc19afdb55cc3de2966e85d3023da907ff3a8d0ef9b9b207a31b617574_ppc64le, openshift4/ose-cluster-node-tuning-operator@sha256:8ec345bc19afdb55cc3de2966e85d3023da907ff3a8d0ef9b9b207a31b617574_ppc64le |
| Red Hat | openshift4/ose-cluster-ingress-operator@sha256:346c77d98b5b60f432a5773ba7bf982a03bce08260cf6a7bd064332b36c1fc02_amd64 as a component of Red Hat OpenShift Container Platform 4.11 | *, * |
| Red Hat | openshift4/ose-multus-admission-controller@sha256:ce7b1592296f173c1627e563befc13b0c27fc7ad51cffcb047c02fa7a3fd1c3a_arm64 as a component of Red Hat OpenShift Container Platform 4.11 | *, * |
…and 76 more
Timeline
- May 2, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 14, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:2014 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2045880 issue
- https://issues.redhat.com/browse/OCPBUGS-11969 advisory
- https://issues.redhat.com/browse/OCPBUGS-12243 advisory
- https://issues.redhat.com/browse/OCPBUGS-2844 advisory
- https://issues.redhat.com/browse/OCPBUGS-6687 advisory
- https://issues.redhat.com/browse/OCPBUGS-8000 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2014.json advisory
- https://access.redhat.com/security/cve/CVE-2022-21698 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-21698 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-21698 advisory
- https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p advisory