VDB
RHSA-2023%3A3367
RHSA-2023%3A3367
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-prometheus-operator@sha256:0a80a7772f1e4e9d4a7074d3e65b37b2270c3513e6bcc0595916f5eb67ed3cdc_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-prometheus-operator@sha256:0a80a7772f1e4e9d4a7074d3e65b37b2270c3513e6bcc0595916f5eb67ed3cdc_s390x, openshift4/ose-prometheus-operator@sha256:0a80a7772f1e4e9d4a7074d3e65b37b2270c3513e6bcc0595916f5eb67ed3cdc_s390x, openshift4/ose-prometheus-operator@sha256:0a80a7772f1e4e9d4a7074d3e65b37b2270c3513e6bcc0595916f5eb67ed3cdc_s390x |
| Red Hat | openshift4/ose-deployer@sha256:ea390be244d81c4be838f467ef06ef23e6647166861a52dd256138eeb534dd5b_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-deployer@sha256:ea390be244d81c4be838f467ef06ef23e6647166861a52dd256138eeb534dd5b_arm64, openshift4/ose-deployer@sha256:ea390be244d81c4be838f467ef06ef23e6647166861a52dd256138eeb534dd5b_arm64, openshift4/ose-deployer@sha256:ea390be244d81c4be838f467ef06ef23e6647166861a52dd256138eeb534dd5b_arm64 |
| Red Hat | openshift4/ovirt-csi-driver-rhel8-operator@sha256:b2b9e9c81a53c855adaa7147d3d7d2f4784140905a67aafca4c3e55e1de529fa_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ovirt-csi-driver-rhel8-operator@sha256:b2b9e9c81a53c855adaa7147d3d7d2f4784140905a67aafca4c3e55e1de529fa_s390x, openshift4/ovirt-csi-driver-rhel8-operator@sha256:b2b9e9c81a53c855adaa7147d3d7d2f4784140905a67aafca4c3e55e1de529fa_s390x, openshift4/ovirt-csi-driver-rhel8-operator@sha256:b2b9e9c81a53c855adaa7147d3d7d2f4784140905a67aafca4c3e55e1de529fa_s390x |
| Red Hat | openshift4/ose-openshift-controller-manager-rhel8@sha256:bad706689dbf8b372521a2f82658a3c9bf9f8d4c303132789042258ce52b4f08_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-openshift-controller-manager-rhel8@sha256:bad706689dbf8b372521a2f82658a3c9bf9f8d4c303132789042258ce52b4f08_arm64 |
| Red Hat | openshift4/ose-cluster-kube-apiserver-operator@sha256:7270ceb168750f0c4ae0afb0086b6dc111dd0da5a96ef32638e8c414b288d228_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-kube-apiserver-operator@sha256:7270ceb168750f0c4ae0afb0086b6dc111dd0da5a96ef32638e8c414b288d228_amd64, openshift4/ose-cluster-kube-apiserver-operator@sha256:7270ceb168750f0c4ae0afb0086b6dc111dd0da5a96ef32638e8c414b288d228_amd64, openshift4/ose-cluster-kube-apiserver-operator@sha256:7270ceb168750f0c4ae0afb0086b6dc111dd0da5a96ef32638e8c414b288d228_amd64 |
| Red Hat | openshift4/ose-azure-cloud-node-manager-rhel8@sha256:019092aa045886f8adfa8d9ea9f90b8f6db2e720dc10a33d992c7fb272e2e6bd_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-azure-cloud-node-manager-rhel8@sha256:019092aa045886f8adfa8d9ea9f90b8f6db2e720dc10a33d992c7fb272e2e6bd_amd64, openshift4/ose-azure-cloud-node-manager-rhel8@sha256:019092aa045886f8adfa8d9ea9f90b8f6db2e720dc10a33d992c7fb272e2e6bd_amd64, openshift4/ose-azure-cloud-node-manager-rhel8@sha256:019092aa045886f8adfa8d9ea9f90b8f6db2e720dc10a33d992c7fb272e2e6bd_amd64 |
| Red Hat | openshift4/ose-cluster-openshift-apiserver-operator@sha256:fb0da70b9e77456083b94a91393f913c0fe070880d6ce0504599a92d5abc66ee_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-openshift-apiserver-operator@sha256:fb0da70b9e77456083b94a91393f913c0fe070880d6ce0504599a92d5abc66ee_ppc64le, openshift4/ose-cluster-openshift-apiserver-operator@sha256:fb0da70b9e77456083b94a91393f913c0fe070880d6ce0504599a92d5abc66ee_ppc64le, openshift4/ose-cluster-openshift-apiserver-operator@sha256:fb0da70b9e77456083b94a91393f913c0fe070880d6ce0504599a92d5abc66ee_ppc64le |
| Red Hat | openshift4/ose-installer@sha256:e083c658d3f043919f73a167fd6324d124b85391faaf6dfd76941807bd6ee236_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-installer@sha256:e083c658d3f043919f73a167fd6324d124b85391faaf6dfd76941807bd6ee236_ppc64le, openshift4/ose-installer@sha256:e083c658d3f043919f73a167fd6324d124b85391faaf6dfd76941807bd6ee236_ppc64le, openshift4/ose-installer@sha256:e083c658d3f043919f73a167fd6324d124b85391faaf6dfd76941807bd6ee236_ppc64le |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:f5aa8ef1431b96e68feaeff15e0539d89c1d8fa24050688065775bf3cfa7dfdc_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:f5aa8ef1431b96e68feaeff15e0539d89c1d8fa24050688065775bf3cfa7dfdc_ppc64le, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:f5aa8ef1431b96e68feaeff15e0539d89c1d8fa24050688065775bf3cfa7dfdc_ppc64le, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:f5aa8ef1431b96e68feaeff15e0539d89c1d8fa24050688065775bf3cfa7dfdc_ppc64le |
| Red Hat | openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:f97bc483106e8c9209cb5d160e368b25152109747f945dd4d4daf15861dc07a9_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:f97bc483106e8c9209cb5d160e368b25152109747f945dd4d4daf15861dc07a9_amd64, openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:f97bc483106e8c9209cb5d160e368b25152109747f945dd4d4daf15861dc07a9_amd64, * |
| Red Hat | openshift4/ose-powervs-cloud-controller-manager-rhel8@sha256:1d1f5f7332c54a4c81ab6b830cc95ca25f2bc8cc252b8eca9acd62dd713704a1_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-powervs-cloud-controller-manager-rhel8@sha256:1d1f5f7332c54a4c81ab6b830cc95ca25f2bc8cc252b8eca9acd62dd713704a1_ppc64le, openshift4/ose-powervs-cloud-controller-manager-rhel8@sha256:1d1f5f7332c54a4c81ab6b830cc95ca25f2bc8cc252b8eca9acd62dd713704a1_ppc64le |
| Red Hat | openshift4/ose-cluster-kube-controller-manager-operator@sha256:76366611e77f932c80fda8aa1529c928187c21e6de08ceb6d2eb07797b1d0048_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-kube-controller-manager-operator@sha256:76366611e77f932c80fda8aa1529c928187c21e6de08ceb6d2eb07797b1d0048_s390x, openshift4/ose-cluster-kube-controller-manager-operator@sha256:76366611e77f932c80fda8aa1529c928187c21e6de08ceb6d2eb07797b1d0048_s390x, * |
| Red Hat | openshift4/ose-csi-snapshot-validation-webhook-rhel8@sha256:f5837b88f01a68d71a490fac53e1862551dd2822365da909777b23ceee5a1d54_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-csi-snapshot-validation-webhook-rhel8@sha256:f5837b88f01a68d71a490fac53e1862551dd2822365da909777b23ceee5a1d54_arm64 |
| Red Hat | openshift4/ose-csi-driver-manila-rhel8@sha256:e219521b793a7091a46f31ae1d6e80da543e851dd31142969fd366670c435720_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-csi-driver-manila-rhel8@sha256:e219521b793a7091a46f31ae1d6e80da543e851dd31142969fd366670c435720_ppc64le, openshift4/ose-csi-driver-manila-rhel8@sha256:e219521b793a7091a46f31ae1d6e80da543e851dd31142969fd366670c435720_ppc64le, openshift4/ose-csi-driver-manila-rhel8@sha256:e219521b793a7091a46f31ae1d6e80da543e851dd31142969fd366670c435720_ppc64le |
| Red Hat | openshift4/ose-machine-config-operator@sha256:ecd90508ae83f91ab629772a94d994df906f00132c89bd5f5074d61e90b8dd87_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-machine-config-operator@sha256:ecd90508ae83f91ab629772a94d994df906f00132c89bd5f5074d61e90b8dd87_s390x, *, * |
| Red Hat | openshift4/egress-router-cni-rhel8@sha256:5700222139d8e96585df089bb569100302c26c9e4feabe33ceabef941b00ca2a_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/egress-router-cni-rhel8@sha256:5700222139d8e96585df089bb569100302c26c9e4feabe33ceabef941b00ca2a_amd64, openshift4/egress-router-cni-rhel8@sha256:5700222139d8e96585df089bb569100302c26c9e4feabe33ceabef941b00ca2a_amd64 |
| Red Hat | openshift4/ose-powervs-block-csi-driver-rhel8@sha256:7ef76cc3bfd7f578f77b7b57f1118b058d5cfd4cc0241f8e206e8c8157cc1cbf_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-powervs-block-csi-driver-rhel8@sha256:7ef76cc3bfd7f578f77b7b57f1118b058d5cfd4cc0241f8e206e8c8157cc1cbf_ppc64le, openshift4/ose-powervs-block-csi-driver-rhel8@sha256:7ef76cc3bfd7f578f77b7b57f1118b058d5cfd4cc0241f8e206e8c8157cc1cbf_ppc64le, openshift4/ose-powervs-block-csi-driver-rhel8@sha256:7ef76cc3bfd7f578f77b7b57f1118b058d5cfd4cc0241f8e206e8c8157cc1cbf_ppc64le |
| Red Hat | openshift4/ose-kuryr-cni-rhel8@sha256:fb233ac47830507c6cc47f502246e38b60838b364729a129ddc3719d3bef7a03_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-baremetal-machine-controllers@sha256:0f65824837535cc1f92ee921719c16cb2b254048c26aebe0d898b449717775ea_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-baremetal-installer-rhel8@sha256:603b0038688415b359e2f74d78cc2aeb8184bf7070ef9c3ff7db08f93b10752e_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-baremetal-installer-rhel8@sha256:603b0038688415b359e2f74d78cc2aeb8184bf7070ef9c3ff7db08f93b10752e_ppc64le, openshift4/ose-baremetal-installer-rhel8@sha256:603b0038688415b359e2f74d78cc2aeb8184bf7070ef9c3ff7db08f93b10752e_ppc64le, * |
…and 1253 more
Timeline
- Jun 7, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2023:3367 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://docs.openshift.com/container-platform/4.13/release_notes/ocp-4-13-release-notes.html advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2178358 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2184481 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2184482 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2184483 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2184484 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2196026 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2196027 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2196029 issue
- https://issues.redhat.com/browse/OCPBUGS-10493 advisory
- https://issues.redhat.com/browse/OCPBUGS-12864 advisory
- https://issues.redhat.com/browse/OCPBUGS-13334 advisory
- https://issues.redhat.com/browse/OCPBUGS-13927 advisory
- https://issues.redhat.com/browse/OCPBUGS-13974 advisory
- https://issues.redhat.com/browse/OCPBUGS-14027 advisory
- https://issues.redhat.com/browse/OCPBUGS-14048 advisory
- https://issues.redhat.com/browse/OCPBUGS-14091 advisory
- https://issues.redhat.com/browse/OCPBUGS-14108 advisory
…and 44 more