VDB

RHSA-2023%3A4091

RHSA-2023%3A4091 PUBLISHED CVSS 5.300000190734863 MEDIUM

A flaw was found in the net/http library of the golang package. This flaw allows an attacker to cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Risk Scores

CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-vsphere-csi-driver-operator-rhel8@sha256:4be25a807344bf86ec58d065a1c4b0f5a28436d8cc18eb61a58960e0a91418a7_amd64 as a component of Red Hat OpenShift Container Platform 4.13*, openshift4/ose-vsphere-csi-driver-operator-rhel8@sha256:4be25a807344bf86ec58d065a1c4b0f5a28436d8cc18eb61a58960e0a91418a7_amd64, openshift4/ose-vsphere-csi-driver-operator-rhel8@sha256:4be25a807344bf86ec58d065a1c4b0f5a28436d8cc18eb61a58960e0a91418a7_amd64
Red Hatopenshift4/ose-nutanix-cloud-controller-manager-rhel8@sha256:4238a07e902a0d3b8dde3d7a961e5dbdc5da37f1b2c4c519a5edf0d0ad62037a_amd64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-nutanix-cloud-controller-manager-rhel8@sha256:4238a07e902a0d3b8dde3d7a961e5dbdc5da37f1b2c4c519a5edf0d0ad62037a_amd64, openshift4/ose-nutanix-cloud-controller-manager-rhel8@sha256:4238a07e902a0d3b8dde3d7a961e5dbdc5da37f1b2c4c519a5edf0d0ad62037a_amd64, openshift4/ose-nutanix-cloud-controller-manager-rhel8@sha256:4238a07e902a0d3b8dde3d7a961e5dbdc5da37f1b2c4c519a5edf0d0ad62037a_amd64
Red Hatopenshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:a3548d8de5a187095bc0edae3b3fd03c939e506b0082081bbcae4e9e60c1f2e1_amd64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:a3548d8de5a187095bc0edae3b3fd03c939e506b0082081bbcae4e9e60c1f2e1_amd64, openshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:a3548d8de5a187095bc0edae3b3fd03c939e506b0082081bbcae4e9e60c1f2e1_amd64, *
Red Hatopenshift4/ose-cli-artifacts@sha256:050aed1e0571f4c458840e533aaafd7e5c60ab302adc89f7978406b4a078a3e2_arm64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-cli-artifacts@sha256:050aed1e0571f4c458840e533aaafd7e5c60ab302adc89f7978406b4a078a3e2_arm64, openshift4/ose-cli-artifacts@sha256:050aed1e0571f4c458840e533aaafd7e5c60ab302adc89f7978406b4a078a3e2_arm64, openshift4/ose-cli-artifacts@sha256:050aed1e0571f4c458840e533aaafd7e5c60ab302adc89f7978406b4a078a3e2_arm64
Red Hatopenshift4/ose-network-metrics-daemon-rhel8@sha256:e94c02cfbc261c61bc7ed649ac89243b647b475d63f0e8e8cf23a2a2f35912b0_ppc64le as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-network-metrics-daemon-rhel8@sha256:e94c02cfbc261c61bc7ed649ac89243b647b475d63f0e8e8cf23a2a2f35912b0_ppc64le, openshift4/ose-network-metrics-daemon-rhel8@sha256:e94c02cfbc261c61bc7ed649ac89243b647b475d63f0e8e8cf23a2a2f35912b0_ppc64le, openshift4/ose-network-metrics-daemon-rhel8@sha256:e94c02cfbc261c61bc7ed649ac89243b647b475d63f0e8e8cf23a2a2f35912b0_ppc64le
Red Hatopenshift4/ose-sdn-rhel8@sha256:d82c2eb8a7e50a3e50d267909c01deeeac7e8df94ede7daacd257f11de081e06_s390x as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-sdn-rhel8@sha256:d82c2eb8a7e50a3e50d267909c01deeeac7e8df94ede7daacd257f11de081e06_s390x, *, *
Red Hatopenshift4/ose-hypershift-rhel8@sha256:32175d2d3949ae7b718183e263ea03de00da6f0add4f037510225680b584e379_ppc64le as a component of Red Hat OpenShift Container Platform 4.13*, *, *
Red Hatopenshift4/ose-network-interface-bond-cni-rhel8@sha256:ec7ec1b5a8651678cdddca4e3b37e53c9fcf39f994e1b8b1d36892494b48a259_amd64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-network-interface-bond-cni-rhel8@sha256:ec7ec1b5a8651678cdddca4e3b37e53c9fcf39f994e1b8b1d36892494b48a259_amd64, openshift4/ose-network-interface-bond-cni-rhel8@sha256:ec7ec1b5a8651678cdddca4e3b37e53c9fcf39f994e1b8b1d36892494b48a259_amd64, openshift4/ose-network-interface-bond-cni-rhel8@sha256:ec7ec1b5a8651678cdddca4e3b37e53c9fcf39f994e1b8b1d36892494b48a259_amd64
Red Hatopenshift4/ose-csi-external-snapshotter-rhel8@sha256:b42e2b3fd2135cad8edb97d7b6cbd41523682e38d63e8fce18e01b8a7f7249da_ppc64le as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-csi-external-snapshotter-rhel8@sha256:b42e2b3fd2135cad8edb97d7b6cbd41523682e38d63e8fce18e01b8a7f7249da_ppc64le, openshift4/ose-csi-external-snapshotter-rhel8@sha256:b42e2b3fd2135cad8edb97d7b6cbd41523682e38d63e8fce18e01b8a7f7249da_ppc64le, *
Red Hatopenshift4/ose-cluster-samples-operator@sha256:9e4193f17e794ae804d8c8180b703ac70e4a91c4b3e3c861db5fdee89cbfa84d_s390x as a component of Red Hat OpenShift Container Platform 4.13*, openshift4/ose-cluster-samples-operator@sha256:9e4193f17e794ae804d8c8180b703ac70e4a91c4b3e3c861db5fdee89cbfa84d_s390x, openshift4/ose-cluster-samples-operator@sha256:9e4193f17e794ae804d8c8180b703ac70e4a91c4b3e3c861db5fdee89cbfa84d_s390x
Red Hatopenshift4/ose-olm-rukpak-rhel8@sha256:ea1ab17ee1197e74f30360c378bbdcc84f8c0fc6346dacdc0ae75827281529fb_s390x as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-olm-rukpak-rhel8@sha256:ea1ab17ee1197e74f30360c378bbdcc84f8c0fc6346dacdc0ae75827281529fb_s390x, openshift4/ose-olm-rukpak-rhel8@sha256:ea1ab17ee1197e74f30360c378bbdcc84f8c0fc6346dacdc0ae75827281529fb_s390x, openshift4/ose-olm-rukpak-rhel8@sha256:ea1ab17ee1197e74f30360c378bbdcc84f8c0fc6346dacdc0ae75827281529fb_s390x
Red Hatopenshift4/ose-apiserver-network-proxy-rhel8@sha256:062e5a363788caa67d62a485db24c12a44e6f6874ffcafcf772e75fcaf6e14cf_arm64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-apiserver-network-proxy-rhel8@sha256:062e5a363788caa67d62a485db24c12a44e6f6874ffcafcf772e75fcaf6e14cf_arm64, openshift4/ose-apiserver-network-proxy-rhel8@sha256:062e5a363788caa67d62a485db24c12a44e6f6874ffcafcf772e75fcaf6e14cf_arm64, *
Red Hatopenshift4/ose-csi-snapshot-controller@sha256:3ed582b9d0916e8838b12491990ea96075efe59004f9cd6c145cfad186a4d63a_amd64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-csi-snapshot-controller@sha256:3ed582b9d0916e8838b12491990ea96075efe59004f9cd6c145cfad186a4d63a_amd64, *, openshift4/ose-csi-snapshot-controller@sha256:3ed582b9d0916e8838b12491990ea96075efe59004f9cd6c145cfad186a4d63a_amd64
Red Hatopenshift4/ose-cluster-openshift-controller-manager-operator@sha256:fc323d69f6f47d2b6a7f1a8a3d4fbec35e0e42512fa035417bd374b17a874b0b_amd64 as a component of Red Hat OpenShift Container Platform 4.13*, *, openshift4/ose-cluster-openshift-controller-manager-operator@sha256:fc323d69f6f47d2b6a7f1a8a3d4fbec35e0e42512fa035417bd374b17a874b0b_amd64
Red Hatopenshift4/ose-tests@sha256:e7547a0b19e34acb473ae9430944f41c1f36bc2b3d4c8f7b64b691eb5f76c7d3_ppc64le as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-tests@sha256:e7547a0b19e34acb473ae9430944f41c1f36bc2b3d4c8f7b64b691eb5f76c7d3_ppc64le, *, *
Red Hatopenshift4/ose-baremetal-rhel8-operator@sha256:504401a22675a9f4224275120badb9bf87e4073a85ff3b7977334442a4363939_s390x as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-baremetal-rhel8-operator@sha256:504401a22675a9f4224275120badb9bf87e4073a85ff3b7977334442a4363939_s390x, openshift4/ose-baremetal-rhel8-operator@sha256:504401a22675a9f4224275120badb9bf87e4073a85ff3b7977334442a4363939_s390x, openshift4/ose-baremetal-rhel8-operator@sha256:504401a22675a9f4224275120badb9bf87e4073a85ff3b7977334442a4363939_s390x
Red Hatopenshift4/ose-ibm-cloud-controller-manager-rhel8@sha256:d4e5d70b899d63551567e24a8031458814308b27082b3f2eb8c16c72d1d8c619_amd64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-ibm-cloud-controller-manager-rhel8@sha256:d4e5d70b899d63551567e24a8031458814308b27082b3f2eb8c16c72d1d8c619_amd64, *, openshift4/ose-ibm-cloud-controller-manager-rhel8@sha256:d4e5d70b899d63551567e24a8031458814308b27082b3f2eb8c16c72d1d8c619_amd64
Red Hatopenshift4/ose-kube-state-metrics@sha256:6fb7d64f013a6a452566e0816f9577a393e068830b6f9f969e4f1bf0e6904be0_amd64 as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-kube-state-metrics@sha256:6fb7d64f013a6a452566e0816f9577a393e068830b6f9f969e4f1bf0e6904be0_amd64, *, openshift4/ose-kube-state-metrics@sha256:6fb7d64f013a6a452566e0816f9577a393e068830b6f9f969e4f1bf0e6904be0_amd64
Red Hatopenshift4/ose-cluster-version-operator@sha256:a4b21466fd12d5289567d0eeae373e604472ba623a92a5e8280fb7fbcb610e27_s390x as a component of Red Hat OpenShift Container Platform 4.13openshift4/ose-cluster-version-operator@sha256:a4b21466fd12d5289567d0eeae373e604472ba623a92a5e8280fb7fbcb610e27_s390x, openshift4/ose-cluster-version-operator@sha256:a4b21466fd12d5289567d0eeae373e604472ba623a92a5e8280fb7fbcb610e27_s390x, openshift4/ose-cluster-version-operator@sha256:a4b21466fd12d5289567d0eeae373e604472ba623a92a5e8280fb7fbcb610e27_s390x
Red Hatopenshift4/ose-gcp-cluster-api-controllers-rhel8@sha256:47ac79c7d16b4d61c4efbd8526e934f7593b14cdd648bb5240222340fa5fb442_amd64 as a component of Red Hat OpenShift Container Platform 4.13*, *, *

…and 1281 more

Timeline

  • Jul 20, 2023 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 20, 2026 CVE Updated

References

…and 90 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›