VDB

RHSA-2023%3A3614

RHSA-2023%3A3614 PUBLISHED CVSS 7.5 HIGH

A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-coredns@sha256:4b38aa7605b79caef315d944f4dab737b2c46086d87bde0ecb4c64a8fd726b8a_ppc64le as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-coredns@sha256:4b38aa7605b79caef315d944f4dab737b2c46086d87bde0ecb4c64a8fd726b8a_ppc64le, openshift4/ose-coredns@sha256:4b38aa7605b79caef315d944f4dab737b2c46086d87bde0ecb4c64a8fd726b8a_ppc64le, *
Red Hatopenshift4/ose-powervs-block-csi-driver-rhel8@sha256:c366e2847eb0eee769ae3ba8e418cdcaff3860d418bdf8344e286e132b6c4724_ppc64le as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-powervs-block-csi-driver-rhel8@sha256:c366e2847eb0eee769ae3ba8e418cdcaff3860d418bdf8344e286e132b6c4724_ppc64le, openshift4/ose-powervs-block-csi-driver-rhel8@sha256:c366e2847eb0eee769ae3ba8e418cdcaff3860d418bdf8344e286e132b6c4724_ppc64le, openshift4/ose-powervs-block-csi-driver-rhel8@sha256:c366e2847eb0eee769ae3ba8e418cdcaff3860d418bdf8344e286e132b6c4724_ppc64le
Red Hatopenshift4/ose-vsphere-cluster-api-controllers-rhel8@sha256:8b217dcc1c7dab3212f5a28be890d02fe5e5e5e4a1900372979a89117d002a55_amd64 as a component of Red Hat OpenShift Container Platform 4.13*, openshift4/ose-vsphere-cluster-api-controllers-rhel8@sha256:8b217dcc1c7dab3212f5a28be890d02fe5e5e5e4a1900372979a89117d002a55_amd64, openshift4/ose-vsphere-cluster-api-controllers-rhel8@sha256:8b217dcc1c7dab3212f5a28be890d02fe5e5e5e4a1900372979a89117d002a55_amd64
Red Hatopenshift4/ovirt-csi-driver-rhel8-operator@sha256:ff54bbbeb8d3cf501dc4749e9c2d500e3abaac344b8fa95e86d8afefa130c974_amd64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ovirt-csi-driver-rhel8-operator@sha256:ff54bbbeb8d3cf501dc4749e9c2d500e3abaac344b8fa95e86d8afefa130c974_amd64, *, *
Red Hatopenshift4/ose-baremetal-machine-controllers@sha256:7d9f3130d0eed93ffa2cceb6a2c10da8d456f96b9fdfda2d46348ffe8b69f71c_ppc64le as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-baremetal-machine-controllers@sha256:7d9f3130d0eed93ffa2cceb6a2c10da8d456f96b9fdfda2d46348ffe8b69f71c_ppc64le, openshift4/ose-baremetal-machine-controllers@sha256:7d9f3130d0eed93ffa2cceb6a2c10da8d456f96b9fdfda2d46348ffe8b69f71c_ppc64le, openshift4/ose-baremetal-machine-controllers@sha256:7d9f3130d0eed93ffa2cceb6a2c10da8d456f96b9fdfda2d46348ffe8b69f71c_ppc64le
Red Hatopenshift4/ose-cluster-monitoring-operator@sha256:00b91ffe2adfe876c8c021dae7160b9c23f216bd4da3cb7d1c2a4980e8aba680_ppc64le as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-cluster-monitoring-operator@sha256:00b91ffe2adfe876c8c021dae7160b9c23f216bd4da3cb7d1c2a4980e8aba680_ppc64le, *, openshift4/ose-cluster-monitoring-operator@sha256:00b91ffe2adfe876c8c021dae7160b9c23f216bd4da3cb7d1c2a4980e8aba680_ppc64le
Red Hatopenshift4/ose-csi-snapshot-validation-webhook-rhel8@sha256:5de0c06e40caf22992bbc303624b9ee4d4f8ffd0cc0cbf845d2aa2ff60efc911_ppc64le as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-csi-snapshot-validation-webhook-rhel8@sha256:5de0c06e40caf22992bbc303624b9ee4d4f8ffd0cc0cbf845d2aa2ff60efc911_ppc64le, openshift4/ose-csi-snapshot-validation-webhook-rhel8@sha256:5de0c06e40caf22992bbc303624b9ee4d4f8ffd0cc0cbf845d2aa2ff60efc911_ppc64le, openshift4/ose-csi-snapshot-validation-webhook-rhel8@sha256:5de0c06e40caf22992bbc303624b9ee4d4f8ffd0cc0cbf845d2aa2ff60efc911_ppc64le
Red Hatopenshift4/ose-multus-admission-controller@sha256:1d30d8a11d97d4deedab7bb3c84143f19a9f63b2fdad9e84ca4695432f5eafcf_arm64 as a component of Red Hat OpenShift Container Platform 4.13*, openshift4/ose-multus-admission-controller@sha256:1d30d8a11d97d4deedab7bb3c84143f19a9f63b2fdad9e84ca4695432f5eafcf_arm64, openshift4/ose-multus-admission-controller@sha256:1d30d8a11d97d4deedab7bb3c84143f19a9f63b2fdad9e84ca4695432f5eafcf_arm64
Red Hatopenshift4/ose-ironic-rhel9@sha256:cb8ec3e89e57827eca273c3c2554de63f32e140a6a1ddb31f1f810ed956338a7_arm64 as a component of Red Hat OpenShift Container Platform 4.13*, *, openshift4/ose-ironic-rhel9@sha256:cb8ec3e89e57827eca273c3c2554de63f32e140a6a1ddb31f1f810ed956338a7_arm64
Red Hatopenshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:171ae8ea0fa23d985b6b41ff7ed0310b4570c1ab6aea033d34932399c417b106_ppc64le as a component of Red Hat OpenShift Container Platform 4.13*, openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:171ae8ea0fa23d985b6b41ff7ed0310b4570c1ab6aea033d34932399c417b106_ppc64le, openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:171ae8ea0fa23d985b6b41ff7ed0310b4570c1ab6aea033d34932399c417b106_ppc64le
Red Hatopenshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:576f0a95491c8da66f8c05beb411919619db4ae26506d222ba34226cab157ba3_amd64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:576f0a95491c8da66f8c05beb411919619db4ae26506d222ba34226cab157ba3_amd64, *, *
Red Hatopenshift4/ose-openshift-state-metrics-rhel8@sha256:a819ef8136f4157997b1008bdc49ae5ca8507d7103141a2dd47a6d5e215987d6_arm64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-openshift-state-metrics-rhel8@sha256:a819ef8136f4157997b1008bdc49ae5ca8507d7103141a2dd47a6d5e215987d6_arm64, *, openshift4/ose-openshift-state-metrics-rhel8@sha256:a819ef8136f4157997b1008bdc49ae5ca8507d7103141a2dd47a6d5e215987d6_arm64
Red Hatopenshift4/ose-azure-disk-csi-driver-rhel8@sha256:f09e4d51ce050d5369c6d78ac09769eba9cca4c49e507e8266b12879ac625319_arm64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-azure-disk-csi-driver-rhel8@sha256:f09e4d51ce050d5369c6d78ac09769eba9cca4c49e507e8266b12879ac625319_arm64, openshift4/ose-azure-disk-csi-driver-rhel8@sha256:f09e4d51ce050d5369c6d78ac09769eba9cca4c49e507e8266b12879ac625319_arm64, openshift4/ose-azure-disk-csi-driver-rhel8@sha256:f09e4d51ce050d5369c6d78ac09769eba9cca4c49e507e8266b12879ac625319_arm64
Red Hatopenshift4/ose-container-networking-plugins-rhel8@sha256:1cded367da3d5e43504c4e3d36e6d0b3eb6df2a9c0973961a3768d4ae304fba1_ppc64le as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-container-networking-plugins-rhel8@sha256:1cded367da3d5e43504c4e3d36e6d0b3eb6df2a9c0973961a3768d4ae304fba1_ppc64le, *, *
Red Hatopenshift4/ose-cluster-baremetal-operator-rhel8@sha256:5dfbfab0f880ded367ffb87f4b24cb55369b6de4bae49fc84d7f655882a6a4fc_amd64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-cluster-baremetal-operator-rhel8@sha256:5dfbfab0f880ded367ffb87f4b24cb55369b6de4bae49fc84d7f655882a6a4fc_amd64, openshift4/ose-cluster-baremetal-operator-rhel8@sha256:5dfbfab0f880ded367ffb87f4b24cb55369b6de4bae49fc84d7f655882a6a4fc_amd64, openshift4/ose-cluster-baremetal-operator-rhel8@sha256:5dfbfab0f880ded367ffb87f4b24cb55369b6de4bae49fc84d7f655882a6a4fc_amd64
Red Hatopenshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:0b924c34b37259cd4a5611b4ab9d4df8826cd8c2d4f1dc4d9a0ee2f8efd812f0_amd64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:0b924c34b37259cd4a5611b4ab9d4df8826cd8c2d4f1dc4d9a0ee2f8efd812f0_amd64, *, *
Red Hatopenshift4/ose-ovn-kubernetes@sha256:5b280fbffb4856b49738ca8c033795a05ef7ff6d03a8141ab93c30228687cf10_ppc64le as a component of Red Hat OpenShift Container Platform 4.13*, openshift4/ose-ovn-kubernetes@sha256:5b280fbffb4856b49738ca8c033795a05ef7ff6d03a8141ab93c30228687cf10_ppc64le, openshift4/ose-ovn-kubernetes@sha256:5b280fbffb4856b49738ca8c033795a05ef7ff6d03a8141ab93c30228687cf10_ppc64le
Red Hatopenshift4/ose-installer-artifacts@sha256:ecdadf0aa2a9e03bff16005abaa1597e3d344d6f44e4b5be1a6d2bf767ceabea_arm64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-installer-artifacts@sha256:ecdadf0aa2a9e03bff16005abaa1597e3d344d6f44e4b5be1a6d2bf767ceabea_arm64, openshift4/ose-installer-artifacts@sha256:ecdadf0aa2a9e03bff16005abaa1597e3d344d6f44e4b5be1a6d2bf767ceabea_arm64, *
Red Hatopenshift4/ose-cluster-api-rhel8@sha256:82e0ca7ca5c47431509d6d31ef3caa9f549e903ba7cbbc159cc1b4cb03dca69d_arm64 as a component of Red Hat OpenShift Container Platform 4.13*, *, *
Red Hatopenshift4/ose-cluster-csi-snapshot-controller-rhel8-operator@sha256:6487f51dec3474cdea15497cba195d062bff0d35a0050902b2edcfd7f2015363_arm64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator@sha256:6487f51dec3474cdea15497cba195d062bff0d35a0050902b2edcfd7f2015363_arm64, *, openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator@sha256:6487f51dec3474cdea15497cba195d062bff0d35a0050902b2edcfd7f2015363_arm64

…and 1278 more

Timeline

  • Jun 23, 2023 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 20, 2026 CVE Updated

References

…and 19 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›