VDB
RHSA-2023%3A3624
RHSA-2023%3A3624
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in Golang Go, where it is vulnerable to a denial of service caused by memory exhaustion in the common function in HTTP and MIME header parsing. By sending a specially crafted request, a remote attacker can cause a denial of service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhmtc/openshift-migration-must-gather-rhel8@sha256:fdf17820034efd0f7f76274798518bcea6c9483c8de8804f5a56b651ef77e717_amd64 as a component of 8Base-RHMTC-1.7 | * |
| Red Hat | rhmtc/openshift-migration-legacy-rhel8-operator@sha256:ea7911f8d680f1a827fdd29fc67c5b5d0d5f420fd09baa930809ef4fa38ae6ab_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-legacy-rhel8-operator@sha256:ea7911f8d680f1a827fdd29fc67c5b5d0d5f420fd09baa930809ef4fa38ae6ab_amd64, rhmtc/openshift-migration-legacy-rhel8-operator@sha256:ea7911f8d680f1a827fdd29fc67c5b5d0d5f420fd09baa930809ef4fa38ae6ab_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:1b4eb48d9aa6b63cd6409fa5b77eb769a2ed4bc257a4058d1a07a66ea95039a5_amd64 as a component of 8Base-RHMTC-1.7 | *, rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:1b4eb48d9aa6b63cd6409fa5b77eb769a2ed4bc257a4058d1a07a66ea95039a5_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:6097ccca550816d040055dd4878d17cc0996d47a436f06296fe5d26c5862e1f5_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:6097ccca550816d040055dd4878d17cc0996d47a436f06296fe5d26c5862e1f5_amd64, rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:6097ccca550816d040055dd4878d17cc0996d47a436f06296fe5d26c5862e1f5_amd64 |
| Red Hat | rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:b172c46f467a7813bed75b04dd82c24be0092e1ea2c74a45a8f82ce895876e81_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:b172c46f467a7813bed75b04dd82c24be0092e1ea2c74a45a8f82ce895876e81_amd64, * |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:1b4eb48d9aa6b63cd6409fa5b77eb769a2ed4bc257a4058d1a07a66ea95039a5_amd64 as a component of 8Base-RHMTC-1.7 | * |
| Red Hat | rhmtc/openshift-migration-velero-rhel8@sha256:346fa63bcbdc03896e91b2ee3318e062b4deb7fe9183135c7841d0da69c3690c_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-velero-rhel8@sha256:346fa63bcbdc03896e91b2ee3318e062b4deb7fe9183135c7841d0da69c3690c_amd64, rhmtc/openshift-migration-velero-rhel8@sha256:346fa63bcbdc03896e91b2ee3318e062b4deb7fe9183135c7841d0da69c3690c_amd64 |
| Red Hat | rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:b172c46f467a7813bed75b04dd82c24be0092e1ea2c74a45a8f82ce895876e81_amd64 as a component of 8Base-RHMTC-1.7 | * |
| Red Hat | rhmtc/openshift-migration-velero-rhel8@sha256:346fa63bcbdc03896e91b2ee3318e062b4deb7fe9183135c7841d0da69c3690c_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-velero-rhel8@sha256:346fa63bcbdc03896e91b2ee3318e062b4deb7fe9183135c7841d0da69c3690c_amd64 |
| Red Hat | rhmtc/openshift-migration-controller-rhel8@sha256:fdd27f3cb68a541b704fa014e7ea564583307743a4d31032cad01268dddf55bc_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-controller-rhel8@sha256:fdd27f3cb68a541b704fa014e7ea564583307743a4d31032cad01268dddf55bc_amd64, * |
| Red Hat | rhmtc/openshift-migration-rhel8-operator@sha256:41c5da49059d19beb97ec9d9fd4542120af73d488ffdc1d611c9774bf1f7c79a_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-rhel8-operator@sha256:41c5da49059d19beb97ec9d9fd4542120af73d488ffdc1d611c9774bf1f7c79a_amd64, rhmtc/openshift-migration-rhel8-operator@sha256:41c5da49059d19beb97ec9d9fd4542120af73d488ffdc1d611c9774bf1f7c79a_amd64 |
| Red Hat | rhmtc/openshift-migration-openvpn-rhel8@sha256:edfff81bc56194aea84e3b80fa550b439c266df3fc81c58c111e5972b670f7ae_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-openvpn-rhel8@sha256:edfff81bc56194aea84e3b80fa550b439c266df3fc81c58c111e5972b670f7ae_amd64 |
| Red Hat | rhmtc/openshift-migration-hook-runner-rhel8@sha256:9fea1718dc2fe0dd2735750df6d16921086e2593da3c8de2272584f1b976c6ee_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-hook-runner-rhel8@sha256:9fea1718dc2fe0dd2735750df6d16921086e2593da3c8de2272584f1b976c6ee_amd64, rhmtc/openshift-migration-hook-runner-rhel8@sha256:9fea1718dc2fe0dd2735750df6d16921086e2593da3c8de2272584f1b976c6ee_amd64 |
| Red Hat | rhmtc/openshift-migration-operator-bundle@sha256:20d278777ec6758913a21946f57ea207fd924f84085f6bf9ea51cd94eaae24ca_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-operator-bundle@sha256:20d278777ec6758913a21946f57ea207fd924f84085f6bf9ea51cd94eaae24ca_amd64, rhmtc/openshift-migration-operator-bundle@sha256:20d278777ec6758913a21946f57ea207fd924f84085f6bf9ea51cd94eaae24ca_amd64 |
| Red Hat | rhmtc/openshift-migration-ui-rhel8@sha256:926a4c07b2a4223264fa1455f3f056d94a9dc52885713978ff8586e8caa2eff5_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-ui-rhel8@sha256:926a4c07b2a4223264fa1455f3f056d94a9dc52885713978ff8586e8caa2eff5_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:9ef09a93b6910806b2952b9d50c5a61ae6f2c7284c439f61bf303d2e893c8c22_amd64 as a component of 8Base-RHMTC-1.7 | * |
| Red Hat | rhmtc/openshift-migration-log-reader-rhel8@sha256:d768e09a2ab2d6906d63612488d32180d1c6270804c0bcc9fa6f89bbd7f04193_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-log-reader-rhel8@sha256:d768e09a2ab2d6906d63612488d32180d1c6270804c0bcc9fa6f89bbd7f04193_amd64 |
| Red Hat | rhmtc/openshift-migration-log-reader-rhel8@sha256:d768e09a2ab2d6906d63612488d32180d1c6270804c0bcc9fa6f89bbd7f04193_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-log-reader-rhel8@sha256:d768e09a2ab2d6906d63612488d32180d1c6270804c0bcc9fa6f89bbd7f04193_amd64, rhmtc/openshift-migration-log-reader-rhel8@sha256:d768e09a2ab2d6906d63612488d32180d1c6270804c0bcc9fa6f89bbd7f04193_amd64 |
| Red Hat | rhmtc/openshift-velero-plugin-rhel8@sha256:916d5fd70f5eb58931927d44e05e2287ce85f04ac3bdefde78b6522214a0286e_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-velero-plugin-rhel8@sha256:916d5fd70f5eb58931927d44e05e2287ce85f04ac3bdefde78b6522214a0286e_amd64, rhmtc/openshift-velero-plugin-rhel8@sha256:916d5fd70f5eb58931927d44e05e2287ce85f04ac3bdefde78b6522214a0286e_amd64 |
| Red Hat | rhmtc/openshift-migration-controller-rhel8@sha256:fdd27f3cb68a541b704fa014e7ea564583307743a4d31032cad01268dddf55bc_amd64 as a component of 8Base-RHMTC-1.7 | * |
…and 14 more
Timeline
- Jun 15, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 10, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:3624 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2184481 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2184482 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2184483 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2184484 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2196027 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2204461 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2210565 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2212528 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3624.json advisory
- https://access.redhat.com/security/cve/CVE-2023-24534 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-24534 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-24534 advisory
- https://go.dev/issue/58975 advisory
- https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8 advisory
- https://access.redhat.com/security/cve/CVE-2023-24536 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-24536 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-24536 advisory
- https://go.dev/issue/59153 advisory
…and 13 more