VDB
RHSA-2023%3A2107
RHSA-2023%3A2107
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in Golang Go, where it is vulnerable to a denial of service caused when processing large TLS handshake records. By sending specially-crafted TLS handshake records, a remote, authenticated attacker can cause a denial of service condition.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhmtc/openshift-migration-log-reader-rhel8@sha256:c584e226c8e716ec0a8c32bb34890fed6694300b2d4526cf4beadbdc4e534211_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-log-reader-rhel8@sha256:c584e226c8e716ec0a8c32bb34890fed6694300b2d4526cf4beadbdc4e534211_amd64, rhmtc/openshift-migration-log-reader-rhel8@sha256:c584e226c8e716ec0a8c32bb34890fed6694300b2d4526cf4beadbdc4e534211_amd64 |
| Red Hat | rhmtc/openshift-migration-registry-rhel8@sha256:7fbedd3b98b1cabdfc96e5318803eab27c45ed56c95787225e8586ab2b7a8ba6_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-registry-rhel8@sha256:7fbedd3b98b1cabdfc96e5318803eab27c45ed56c95787225e8586ab2b7a8ba6_amd64, rhmtc/openshift-migration-registry-rhel8@sha256:7fbedd3b98b1cabdfc96e5318803eab27c45ed56c95787225e8586ab2b7a8ba6_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:456e55c4d109cf5a7b90953d4341f3590bff067817e6c5cace2142eb5c0d74e0_amd64 as a component of 8Base-RHMTC-1.7 | *, *, rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:456e55c4d109cf5a7b90953d4341f3590bff067817e6c5cace2142eb5c0d74e0_amd64 |
| Red Hat | rhmtc/openshift-migration-hook-runner-rhel8@sha256:7188a1535791d38b23e5e6856c8e27e9884a4643af9917cc9f2c8b789dd17772_amd64 as a component of 8Base-RHMTC-1.7 | *, rhmtc/openshift-migration-hook-runner-rhel8@sha256:7188a1535791d38b23e5e6856c8e27e9884a4643af9917cc9f2c8b789dd17772_amd64, rhmtc/openshift-migration-hook-runner-rhel8@sha256:7188a1535791d38b23e5e6856c8e27e9884a4643af9917cc9f2c8b789dd17772_amd64 |
| Red Hat | rhmtc/openshift-migration-rhel8-operator@sha256:f0b664a6d9ebb49394ab9a52e9985f79f2a4a3f9ab4b091603243a294c17939c_amd64 as a component of 8Base-RHMTC-1.7 | *, *, rhmtc/openshift-migration-rhel8-operator@sha256:f0b664a6d9ebb49394ab9a52e9985f79f2a4a3f9ab4b091603243a294c17939c_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:456e55c4d109cf5a7b90953d4341f3590bff067817e6c5cace2142eb5c0d74e0_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:456e55c4d109cf5a7b90953d4341f3590bff067817e6c5cace2142eb5c0d74e0_amd64, rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:456e55c4d109cf5a7b90953d4341f3590bff067817e6c5cace2142eb5c0d74e0_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:74996652ffc000145d5fedbb88ecd515db7d517abdef68feddfc9f6bba2800ef_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:74996652ffc000145d5fedbb88ecd515db7d517abdef68feddfc9f6bba2800ef_amd64, rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:74996652ffc000145d5fedbb88ecd515db7d517abdef68feddfc9f6bba2800ef_amd64 |
| Red Hat | rhmtc/openshift-velero-plugin-rhel8@sha256:6a1036a320cc796780544cdfc08c4eb3726ee1c6728c075dd6ca324a16ac35b7_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-velero-plugin-rhel8@sha256:6a1036a320cc796780544cdfc08c4eb3726ee1c6728c075dd6ca324a16ac35b7_amd64, *, rhmtc/openshift-velero-plugin-rhel8@sha256:6a1036a320cc796780544cdfc08c4eb3726ee1c6728c075dd6ca324a16ac35b7_amd64 |
| Red Hat | rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:01316425b4cf28cce4e5099d5cc85726d8d0e04b52506e1e0a7783cb8421769e_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:01316425b4cf28cce4e5099d5cc85726d8d0e04b52506e1e0a7783cb8421769e_amd64, rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:01316425b4cf28cce4e5099d5cc85726d8d0e04b52506e1e0a7783cb8421769e_amd64 |
| Red Hat | rhmtc/openshift-migration-controller-rhel8@sha256:0aa32b482011e2ca00a2d07ce95fd9a798dfef8083ee5f3f3eca0cc249d3fe72_amd64 as a component of 8Base-RHMTC-1.7 | *, *, rhmtc/openshift-migration-controller-rhel8@sha256:0aa32b482011e2ca00a2d07ce95fd9a798dfef8083ee5f3f3eca0cc249d3fe72_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:0d4795f85cee5a035dad89404790225165e2e98e92bbf1c2d5bd61c7897532c3_amd64 as a component of 8Base-RHMTC-1.7 | *, *, rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:0d4795f85cee5a035dad89404790225165e2e98e92bbf1c2d5bd61c7897532c3_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:0d4795f85cee5a035dad89404790225165e2e98e92bbf1c2d5bd61c7897532c3_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:0d4795f85cee5a035dad89404790225165e2e98e92bbf1c2d5bd61c7897532c3_amd64, * |
| Red Hat | rhmtc/openshift-migration-ui-rhel8@sha256:0e1120d6c1dc0ed5b7e586e1d06a27433712a73801cb9a74369f826cba693baf_amd64 as a component of 8Base-RHMTC-1.7 | *, *, rhmtc/openshift-migration-ui-rhel8@sha256:0e1120d6c1dc0ed5b7e586e1d06a27433712a73801cb9a74369f826cba693baf_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:74996652ffc000145d5fedbb88ecd515db7d517abdef68feddfc9f6bba2800ef_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:74996652ffc000145d5fedbb88ecd515db7d517abdef68feddfc9f6bba2800ef_amd64, rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:74996652ffc000145d5fedbb88ecd515db7d517abdef68feddfc9f6bba2800ef_amd64, * |
| Red Hat | rhmtc/openshift-migration-hook-runner-rhel8@sha256:7188a1535791d38b23e5e6856c8e27e9884a4643af9917cc9f2c8b789dd17772_amd64 as a component of 8Base-RHMTC-1.7 | *, rhmtc/openshift-migration-hook-runner-rhel8@sha256:7188a1535791d38b23e5e6856c8e27e9884a4643af9917cc9f2c8b789dd17772_amd64 |
| Red Hat | rhmtc/openshift-migration-operator-bundle@sha256:25885d87e7e368ab92c8d2ee23c25b14f014a07ed305605d5a847aeef45b6e56_amd64 as a component of 8Base-RHMTC-1.7 | *, *, rhmtc/openshift-migration-operator-bundle@sha256:25885d87e7e368ab92c8d2ee23c25b14f014a07ed305605d5a847aeef45b6e56_amd64 |
| Red Hat | rhmtc/openshift-migration-openvpn-rhel8@sha256:4abbd8e86b4f0565ae370e159091ba43b71c4b5acdf4be2dbcab4d3e2503c403_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-openvpn-rhel8@sha256:4abbd8e86b4f0565ae370e159091ba43b71c4b5acdf4be2dbcab4d3e2503c403_amd64, rhmtc/openshift-migration-openvpn-rhel8@sha256:4abbd8e86b4f0565ae370e159091ba43b71c4b5acdf4be2dbcab4d3e2503c403_amd64, * |
| Red Hat | rhmtc/openshift-migration-ui-rhel8@sha256:0e1120d6c1dc0ed5b7e586e1d06a27433712a73801cb9a74369f826cba693baf_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-ui-rhel8@sha256:0e1120d6c1dc0ed5b7e586e1d06a27433712a73801cb9a74369f826cba693baf_amd64, * |
| Red Hat | rhmtc/openshift-migration-openvpn-rhel8@sha256:4abbd8e86b4f0565ae370e159091ba43b71c4b5acdf4be2dbcab4d3e2503c403_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-openvpn-rhel8@sha256:4abbd8e86b4f0565ae370e159091ba43b71c4b5acdf4be2dbcab4d3e2503c403_amd64, rhmtc/openshift-migration-openvpn-rhel8@sha256:4abbd8e86b4f0565ae370e159091ba43b71c4b5acdf4be2dbcab4d3e2503c403_amd64 |
| Red Hat | rhmtc/openshift-migration-registry-rhel8@sha256:7fbedd3b98b1cabdfc96e5318803eab27c45ed56c95787225e8586ab2b7a8ba6_amd64 as a component of 8Base-RHMTC-1.7 | *, rhmtc/openshift-migration-registry-rhel8@sha256:7fbedd3b98b1cabdfc96e5318803eab27c45ed56c95787225e8586ab2b7a8ba6_amd64, rhmtc/openshift-migration-registry-rhel8@sha256:7fbedd3b98b1cabdfc96e5318803eab27c45ed56c95787225e8586ab2b7a8ba6_amd64 |
…and 14 more
Timeline
- May 4, 2023 CVE Published
- Apr 28, 2026 Security Advisory
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 15, 2026 CVE Updated
- May 15, 2026 Distribution Patch
References
- https://access.redhat.com/errata/RHSA-2023:2107 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2178492 issue
- https://nvd.nist.gov/vuln/detail/CVE-2022-41724 advisory
- https://access.redhat.com/security/cve/CVE-2022-41725 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-41725 advisory
- https://pkg.go.dev/vuln/GO-2023-1569 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-25173 advisory
- https://access.redhat.com/security/cve/CVE-2023-25173 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2174485 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2178488 issue
- https://go.dev/cl/468125 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-41725 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-25173 advisory
- https://github.com/containerd/containerd/releases/tag/v1.5.18 advisory
- https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p advisory
- https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/ advisory
- https://www.cve.org/CVERecord?id=CVE-2022-41724 advisory
- https://github.com/containerd/containerd/commit/133f6bb6cd827ce35a5fb279c1ead12b9d21460a advisory
- https://github.com/containerd/containerd/releases/tag/v1.6.18 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
…and 7 more