VDB
RHSA-2023%3A2104
RHSA-2023%3A2104
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in http-cache-semantics. When the server reads the cache policy from the request using this library, a Regular Expression Denial of Service occurs, caused by malicious request header values sent to the server.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhacm2/memcached-exporter-rhel8@sha256:77d392b5aacc8d801555e67617e190248aaed68fbe7c94441c1388b5cb8413ea_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/memcached-exporter-rhel8@sha256:77d392b5aacc8d801555e67617e190248aaed68fbe7c94441c1388b5cb8413ea_ppc64le, rhacm2/memcached-exporter-rhel8@sha256:77d392b5aacc8d801555e67617e190248aaed68fbe7c94441c1388b5cb8413ea_ppc64le |
| Red Hat | rhacm2/thanos-rhel8@sha256:d3a26063213be409de7495218e0f1407280fef45c4cb140c2d1829932c0989d1_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, rhacm2/thanos-rhel8@sha256:d3a26063213be409de7495218e0f1407280fef45c4cb140c2d1829932c0989d1_ppc64le |
| Red Hat | rhacm2/management-ingress-rhel8@sha256:53b3b39ac29c20f49b396d0373a058a428866b35ca68909e25b16d2bf9a549c8_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/management-ingress-rhel8@sha256:53b3b39ac29c20f49b396d0373a058a428866b35ca68909e25b16d2bf9a549c8_arm64, rhacm2/management-ingress-rhel8@sha256:53b3b39ac29c20f49b396d0373a058a428866b35ca68909e25b16d2bf9a549c8_arm64 |
| Red Hat | rhacm2/multicloud-integrations-rhel8@sha256:5130c638f0cb5c5da92a79d7a62806836d63fff3432ac9455f0354c22dd956bd_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/multicloud-integrations-rhel8@sha256:5130c638f0cb5c5da92a79d7a62806836d63fff3432ac9455f0354c22dd956bd_ppc64le, rhacm2/multicloud-integrations-rhel8@sha256:5130c638f0cb5c5da92a79d7a62806836d63fff3432ac9455f0354c22dd956bd_ppc64le |
| Red Hat | rhacm2/acm-must-gather-rhel8@sha256:5eea4e889a403d1e9530980eaa0a973c1453c24fda8ada59957bbc4f20757551_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/acm-must-gather-rhel8@sha256:5eea4e889a403d1e9530980eaa0a973c1453c24fda8ada59957bbc4f20757551_ppc64le, rhacm2/acm-must-gather-rhel8@sha256:5eea4e889a403d1e9530980eaa0a973c1453c24fda8ada59957bbc4f20757551_ppc64le |
| Red Hat | rhacm2/grafana-dashboard-loader-rhel8@sha256:6c012d7109ad50b13f8603f347fb4bf23e7ae2b9a07b1e7b722c49ac4967b72d_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/grafana-dashboard-loader-rhel8@sha256:6c012d7109ad50b13f8603f347fb4bf23e7ae2b9a07b1e7b722c49ac4967b72d_ppc64le, rhacm2/grafana-dashboard-loader-rhel8@sha256:6c012d7109ad50b13f8603f347fb4bf23e7ae2b9a07b1e7b722c49ac4967b72d_ppc64le |
| Red Hat | rhacm2/redisgraph-tls-rhel8@sha256:97cda65bbc9c9da02d5cb804354ddd5879787dcc0d87e354b20fbb66d0a88c22_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/redisgraph-tls-rhel8@sha256:97cda65bbc9c9da02d5cb804354ddd5879787dcc0d87e354b20fbb66d0a88c22_amd64, * |
| Red Hat | rhacm2/acm-grafana-rhel8@sha256:b2cf4eae8410b345ab5222673e73985854ad6a1684c0f0e41d5913d0cb697081_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/acm-grafana-rhel8@sha256:b2cf4eae8410b345ab5222673e73985854ad6a1684c0f0e41d5913d0cb697081_amd64, rhacm2/acm-grafana-rhel8@sha256:b2cf4eae8410b345ab5222673e73985854ad6a1684c0f0e41d5913d0cb697081_amd64 |
| Red Hat | rhacm2/thanos-receive-controller-rhel8@sha256:a4700bdcda826ff18dc059a2df83f99ef39973e9fbfffff1b4ff8e6182d764ce_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/thanos-receive-controller-rhel8@sha256:a4700bdcda826ff18dc059a2df83f99ef39973e9fbfffff1b4ff8e6182d764ce_arm64, rhacm2/thanos-receive-controller-rhel8@sha256:a4700bdcda826ff18dc059a2df83f99ef39973e9fbfffff1b4ff8e6182d764ce_arm64 |
| Red Hat | rhacm2/submariner-addon-rhel8@sha256:f68201802e6754412c1181f707aed07058ad1e0d4d22b300c89c73de48cfd3f8_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/submariner-addon-rhel8@sha256:f68201802e6754412c1181f707aed07058ad1e0d4d22b300c89c73de48cfd3f8_s390x, rhacm2/submariner-addon-rhel8@sha256:f68201802e6754412c1181f707aed07058ad1e0d4d22b300c89c73de48cfd3f8_s390x |
| Red Hat | rhacm2/management-ingress-rhel8@sha256:f12af1c3fa06e65c3c6ebf9ab4480f37ea20b9ef512951586d67b91f39049eda_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/management-ingress-rhel8@sha256:f12af1c3fa06e65c3c6ebf9ab4480f37ea20b9ef512951586d67b91f39049eda_ppc64le, rhacm2/management-ingress-rhel8@sha256:f12af1c3fa06e65c3c6ebf9ab4480f37ea20b9ef512951586d67b91f39049eda_ppc64le |
| Red Hat | rhacm2/thanos-receive-controller-rhel8@sha256:a1ca558db817306610d0282bb2dcd95467478cf986d9eab68d63fcb915a0058e_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/thanos-receive-controller-rhel8@sha256:a1ca558db817306610d0282bb2dcd95467478cf986d9eab68d63fcb915a0058e_ppc64le, rhacm2/thanos-receive-controller-rhel8@sha256:a1ca558db817306610d0282bb2dcd95467478cf986d9eab68d63fcb915a0058e_ppc64le |
| Red Hat | rhacm2/governance-policy-spec-sync-rhel8@sha256:1dd978c5a126f4d77754b6ecf92fe43f8451bc705e8f04a948963de3e2156c8c_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/governance-policy-spec-sync-rhel8@sha256:1dd978c5a126f4d77754b6ecf92fe43f8451bc705e8f04a948963de3e2156c8c_s390x, rhacm2/governance-policy-spec-sync-rhel8@sha256:1dd978c5a126f4d77754b6ecf92fe43f8451bc705e8f04a948963de3e2156c8c_s390x |
| Red Hat | rhacm2/thanos-rhel8@sha256:0c9b23fa9b2fb28fc7a36a80c8a34a525b5f112c4bf956d258c41a2fc731f94d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/thanos-rhel8@sha256:0c9b23fa9b2fb28fc7a36a80c8a34a525b5f112c4bf956d258c41a2fc731f94d_amd64, * |
| Red Hat | rhacm2/search-aggregator-rhel8@sha256:442cccd2570283d4b98fd115ca354905121e375560332f1718e790e431caa87a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/search-aggregator-rhel8@sha256:442cccd2570283d4b98fd115ca354905121e375560332f1718e790e431caa87a_amd64, rhacm2/search-aggregator-rhel8@sha256:442cccd2570283d4b98fd115ca354905121e375560332f1718e790e431caa87a_amd64 |
| Red Hat | rhacm2/multiclusterhub-rhel8@sha256:696ba3d5ab05c91a4cca2d42cd333d86ea403d96795c09b4e263927338b37aed_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/multiclusterhub-rhel8@sha256:696ba3d5ab05c91a4cca2d42cd333d86ea403d96795c09b4e263927338b37aed_ppc64le, rhacm2/multiclusterhub-rhel8@sha256:696ba3d5ab05c91a4cca2d42cd333d86ea403d96795c09b4e263927338b37aed_ppc64le |
| Red Hat | rhacm2/acm-volsync-addon-controller-rhel8@sha256:9fa12720e772f7e8e101943742e0927d35cbb112ab1268a58faf3f73fbb0ea50_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, rhacm2/acm-volsync-addon-controller-rhel8@sha256:9fa12720e772f7e8e101943742e0927d35cbb112ab1268a58faf3f73fbb0ea50_ppc64le |
| Red Hat | rhacm2/acm-volsync-addon-controller-rhel8@sha256:8a721e578b78b6e56f92a9ddabebe1843b50492bdc9e42d00c757e8d239d9dbb_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/acm-volsync-addon-controller-rhel8@sha256:8a721e578b78b6e56f92a9ddabebe1843b50492bdc9e42d00c757e8d239d9dbb_arm64, rhacm2/acm-volsync-addon-controller-rhel8@sha256:8a721e578b78b6e56f92a9ddabebe1843b50492bdc9e42d00c757e8d239d9dbb_arm64 |
| Red Hat | rhacm2/cluster-proxy-addon-rhel8@sha256:934a586cc479b35ff5f665f327c77ceaeec953b368bd2bcd375c3e4e28dacd62_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | rhacm2/cluster-proxy-addon-rhel8@sha256:934a586cc479b35ff5f665f327c77ceaeec953b368bd2bcd375c3e4e28dacd62_s390x, rhacm2/cluster-proxy-addon-rhel8@sha256:934a586cc479b35ff5f665f327c77ceaeec953b368bd2bcd375c3e4e28dacd62_s390x |
| Red Hat | rhacm2/acm-prometheus-config-reloader-rhel8@sha256:4be1d5580dc2dd49b2f94c0c57e2de081ee54507cd1f422e9eb7a4126f6a36c3_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 | *, rhacm2/acm-prometheus-config-reloader-rhel8@sha256:4be1d5580dc2dd49b2f94c0c57e2de081ee54507cd1f422e9eb7a4126f6a36c3_ppc64le |
…and 183 more
Timeline
- May 3, 2023 CVE Published
- May 1, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2023:2104 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2165824 issue
- https://issues.redhat.com/browse/ACM-4736 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2104.json advisory
- https://access.redhat.com/security/cve/CVE-2022-25881 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-25881 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-25881 advisory