VDB
RHSA-2023%3A4225
RHSA-2023%3A4225
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-ansible-operator@sha256:289bc382e8cd7a297b656500e82a3274176df27bf30283e3848edbcfdfa91f13_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ansible-operator@sha256:289bc382e8cd7a297b656500e82a3274176df27bf30283e3848edbcfdfa91f13_amd64, openshift4/ose-ansible-operator@sha256:289bc382e8cd7a297b656500e82a3274176df27bf30283e3848edbcfdfa91f13_amd64, openshift4/ose-ansible-operator@sha256:289bc382e8cd7a297b656500e82a3274176df27bf30283e3848edbcfdfa91f13_amd64 |
| Red Hat | openshift4/ose-node-feature-discovery@sha256:22e3e82e8ec850e0ed514f3bbbd315962b5c8eb6e4cc596eb91b7101cd444b08_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-node-feature-discovery@sha256:22e3e82e8ec850e0ed514f3bbbd315962b5c8eb6e4cc596eb91b7101cd444b08_arm64 |
| Red Hat | openshift4/kubernetes-nmstate-rhel8-operator@sha256:fea2d362d6236a735ea5147ab730f5de92049fc8f9d90fc29ac9c1c52ffdb1a4_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/kubernetes-nmstate-rhel8-operator@sha256:fea2d362d6236a735ea5147ab730f5de92049fc8f9d90fc29ac9c1c52ffdb1a4_amd64, openshift4/kubernetes-nmstate-rhel8-operator@sha256:fea2d362d6236a735ea5147ab730f5de92049fc8f9d90fc29ac9c1c52ffdb1a4_amd64, * |
| Red Hat | openshift4/ose-sriov-dp-admission-controller@sha256:8b0a8586ab53edcdacab2fd250ce0c209bb493bceaa001efda5d0afac91a7add_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-sriov-dp-admission-controller@sha256:8b0a8586ab53edcdacab2fd250ce0c209bb493bceaa001efda5d0afac91a7add_ppc64le, *, openshift4/ose-sriov-dp-admission-controller@sha256:8b0a8586ab53edcdacab2fd250ce0c209bb493bceaa001efda5d0afac91a7add_ppc64le |
| Red Hat | openshift4/ose-ptp-operator@sha256:ebc2cd04312e4ebe02df00d0b340f43ecb44fb532e32d528d5e7619f723aa8bf_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ptp-operator@sha256:ebc2cd04312e4ebe02df00d0b340f43ecb44fb532e32d528d5e7619f723aa8bf_arm64, openshift4/ose-ptp-operator@sha256:ebc2cd04312e4ebe02df00d0b340f43ecb44fb532e32d528d5e7619f723aa8bf_arm64, * |
| Red Hat | openshift4/ose-sriov-infiniband-cni@sha256:7a40993fbec0a546dca16586f560f23dfa5f460b29ae411abcb215202283842f_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-sriov-infiniband-cni@sha256:7a40993fbec0a546dca16586f560f23dfa5f460b29ae411abcb215202283842f_amd64, *, * |
| Red Hat | openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:dd5757fd5619636253e3257fec2521b98d9a04b631b77582546ff5cce75e40d6_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:dd5757fd5619636253e3257fec2521b98d9a04b631b77582546ff5cce75e40d6_arm64, openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:dd5757fd5619636253e3257fec2521b98d9a04b631b77582546ff5cce75e40d6_arm64, openshift4/ose-csi-driver-shared-resource-mustgather-rhel8@sha256:dd5757fd5619636253e3257fec2521b98d9a04b631b77582546ff5cce75e40d6_arm64 |
| Red Hat | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:dad1f14949540b105cf75ccf6b4a87148ad3360b9a30b6e192f3dcdd0ab91c2f_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:dad1f14949540b105cf75ccf6b4a87148ad3360b9a30b6e192f3dcdd0ab91c2f_ppc64le, openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:dad1f14949540b105cf75ccf6b4a87148ad3360b9a30b6e192f3dcdd0ab91c2f_ppc64le, openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:dad1f14949540b105cf75ccf6b4a87148ad3360b9a30b6e192f3dcdd0ab91c2f_ppc64le |
| Red Hat | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:5d79c8f8ee06c7bdffa8de83ddaa0ecd781e33f6a2b4e880cb2e09d8de6ef5c1_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:5d79c8f8ee06c7bdffa8de83ddaa0ecd781e33f6a2b4e880cb2e09d8de6ef5c1_arm64, *, openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:5d79c8f8ee06c7bdffa8de83ddaa0ecd781e33f6a2b4e880cb2e09d8de6ef5c1_arm64 |
| Red Hat | openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:bc7c860af43fd06aa1bc85caf149487bcfa95fff49edeb4823aecf7b98a0bec2_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:bc7c860af43fd06aa1bc85caf149487bcfa95fff49edeb4823aecf7b98a0bec2_ppc64le, openshift4/ose-gcp-filestore-csi-driver-rhel8-operator@sha256:bc7c860af43fd06aa1bc85caf149487bcfa95fff49edeb4823aecf7b98a0bec2_ppc64le |
| Red Hat | openshift4/ose-ptp@sha256:25e1c6879e9fd45eff2e9920ee72297d933d4e83f2f31f8d760c385cba42c26d_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ptp@sha256:25e1c6879e9fd45eff2e9920ee72297d933d4e83f2f31f8d760c385cba42c26d_arm64, *, openshift4/ose-ptp@sha256:25e1c6879e9fd45eff2e9920ee72297d933d4e83f2f31f8d760c385cba42c26d_arm64 |
| Red Hat | openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:af122f1bb6c5e98952377a42c16dcbabb1ec8d1c91e07ee13beba81e31bf97c5_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:af122f1bb6c5e98952377a42c16dcbabb1ec8d1c91e07ee13beba81e31bf97c5_s390x, openshift4/ose-kubernetes-nmstate-handler-rhel8@sha256:af122f1bb6c5e98952377a42c16dcbabb1ec8d1c91e07ee13beba81e31bf97c5_s390x |
| Red Hat | openshift4/ose-local-storage-mustgather-rhel8@sha256:c59beeaeaa258c94f1158ead24bd8f3994081c830d244b75fa840a5cdcb64a7e_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-local-storage-mustgather-rhel8@sha256:c59beeaeaa258c94f1158ead24bd8f3994081c830d244b75fa840a5cdcb64a7e_s390x |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8@sha256:9c74cc60b8c6b12b5f63554bfe826ca550a31b8df88ee669e1ff58351196b6a4_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-clusterresourceoverride-rhel8@sha256:9c74cc60b8c6b12b5f63554bfe826ca550a31b8df88ee669e1ff58351196b6a4_arm64, openshift4/ose-clusterresourceoverride-rhel8@sha256:9c74cc60b8c6b12b5f63554bfe826ca550a31b8df88ee669e1ff58351196b6a4_arm64, openshift4/ose-clusterresourceoverride-rhel8@sha256:9c74cc60b8c6b12b5f63554bfe826ca550a31b8df88ee669e1ff58351196b6a4_arm64 |
| Red Hat | openshift4/ose-cluster-capacity@sha256:3dfa7932299c03aad4652540604225b0d9383f41d2b8ee7f4e0a015b618e696c_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-capacity@sha256:3dfa7932299c03aad4652540604225b0d9383f41d2b8ee7f4e0a015b618e696c_amd64, *, * |
| Red Hat | openshift4/ose-egress-http-proxy@sha256:b091617a859ed1cc067def8e6ec579009b799ec39ffe94aec274a4d7b5c74978_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/dpu-network-rhel8-operator@sha256:de78228115cc69acd6d6742f6be1f60f183381bd7a8901acc194b5c282e1acaf_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/dpu-network-rhel8-operator@sha256:de78228115cc69acd6d6742f6be1f60f183381bd7a8901acc194b5c282e1acaf_arm64, openshift4/dpu-network-rhel8-operator@sha256:de78228115cc69acd6d6742f6be1f60f183381bd7a8901acc194b5c282e1acaf_arm64, openshift4/dpu-network-rhel8-operator@sha256:de78228115cc69acd6d6742f6be1f60f183381bd7a8901acc194b5c282e1acaf_arm64 |
| Red Hat | openshift4/ose-sriov-dp-admission-controller@sha256:8b0a8586ab53edcdacab2fd250ce0c209bb493bceaa001efda5d0afac91a7add_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-sriov-dp-admission-controller@sha256:8b0a8586ab53edcdacab2fd250ce0c209bb493bceaa001efda5d0afac91a7add_ppc64le, *, * |
| Red Hat | openshift4/ose-local-storage-mustgather-rhel8@sha256:de39c67cc31ebfb9e4d423ca86bf3bcbe6e2a51aba7f9992ad762b57eeadcc43_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-local-storage-mustgather-rhel8@sha256:de39c67cc31ebfb9e4d423ca86bf3bcbe6e2a51aba7f9992ad762b57eeadcc43_ppc64le |
| Red Hat | openshift4/ose-egress-router@sha256:c309ff3ce13c29c84b054704aa62a1e14d17612240e92e34435647a92c3eb5a9_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-egress-router@sha256:c309ff3ce13c29c84b054704aa62a1e14d17612240e92e34435647a92c3eb5a9_arm64, openshift4/ose-egress-router@sha256:c309ff3ce13c29c84b054704aa62a1e14d17612240e92e34435647a92c3eb5a9_arm64, openshift4/ose-egress-router@sha256:c309ff3ce13c29c84b054704aa62a1e14d17612240e92e34435647a92c3eb5a9_arm64 |
…and 272 more
Timeline
- Jul 27, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 20, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:4225 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2178358 issue
- https://issues.redhat.com/browse/OCPBUGS-16170 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4225.json advisory
- https://access.redhat.com/security/cve/CVE-2022-41723 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-41723 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-41723 advisory
- https://github.com/advisories/GHSA-vvpx-j8f3-3w6h advisory
- https://go.dev/cl/468135 advisory
- https://go.dev/cl/468295 advisory
- https://go.dev/issue/57855 advisory
- https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E advisory
- https://pkg.go.dev/vuln/GO-2023-1571 advisory
- https://vuln.go.dev/ID/GO-2023-1571.json advisory