VDB
RHSA-2023%3A4226
RHSA-2023%3A4226
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:c72245ad296420026aa75658cb4fa1a66c7750150c1e83a695843329fe9a8cda_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:c72245ad296420026aa75658cb4fa1a66c7750150c1e83a695843329fe9a8cda_s390x, openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:c72245ad296420026aa75658cb4fa1a66c7750150c1e83a695843329fe9a8cda_s390x |
| Red Hat | openshift4/ose-csi-livenessprobe@sha256:189a23ac6bef43155a991149a4821a07e3d8d5715edfb631cf475dfc6f6f26b8_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-csi-livenessprobe@sha256:189a23ac6bef43155a991149a4821a07e3d8d5715edfb631cf475dfc6f6f26b8_ppc64le, openshift4/ose-csi-livenessprobe@sha256:189a23ac6bef43155a991149a4821a07e3d8d5715edfb631cf475dfc6f6f26b8_ppc64le, openshift4/ose-csi-livenessprobe@sha256:189a23ac6bef43155a991149a4821a07e3d8d5715edfb631cf475dfc6f6f26b8_ppc64le |
| Red Hat | openshift4/ose-operator-marketplace@sha256:6132418d94ead8750a7a7d31e3c7b87e6b8cf2be550588cb3b96058ed422e68f_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-operator-marketplace@sha256:6132418d94ead8750a7a7d31e3c7b87e6b8cf2be550588cb3b96058ed422e68f_ppc64le, openshift4/ose-operator-marketplace@sha256:6132418d94ead8750a7a7d31e3c7b87e6b8cf2be550588cb3b96058ed422e68f_ppc64le, openshift4/ose-operator-marketplace@sha256:6132418d94ead8750a7a7d31e3c7b87e6b8cf2be550588cb3b96058ed422e68f_ppc64le |
| Red Hat | openshift4/ose-machine-api-operator@sha256:734cfc62a8254117380d4df01cd62b9f4b107abdd7bf57023b8c29dda32fe66e_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-machine-api-operator@sha256:734cfc62a8254117380d4df01cd62b9f4b107abdd7bf57023b8c29dda32fe66e_ppc64le, openshift4/ose-machine-api-operator@sha256:734cfc62a8254117380d4df01cd62b9f4b107abdd7bf57023b8c29dda32fe66e_ppc64le, * |
| Red Hat | openshift4/ose-csi-external-provisioner-rhel8@sha256:0fb505c6ab7f7d32fd3c412b419911b35a956e5e6e5ea35865b662a9821ec05e_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-csi-external-provisioner-rhel8@sha256:0fb505c6ab7f7d32fd3c412b419911b35a956e5e6e5ea35865b662a9821ec05e_arm64, *, openshift4/ose-csi-external-provisioner-rhel8@sha256:0fb505c6ab7f7d32fd3c412b419911b35a956e5e6e5ea35865b662a9821ec05e_arm64 |
| Red Hat | openshift4/ose-operator-lifecycle-manager@sha256:8dcffb66b9d571792be4dda27e14f723664fea26d626ea3fe0fda398f50c59d8_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-operator-lifecycle-manager@sha256:8dcffb66b9d571792be4dda27e14f723664fea26d626ea3fe0fda398f50c59d8_s390x, openshift4/ose-operator-lifecycle-manager@sha256:8dcffb66b9d571792be4dda27e14f723664fea26d626ea3fe0fda398f50c59d8_s390x, openshift4/ose-operator-lifecycle-manager@sha256:8dcffb66b9d571792be4dda27e14f723664fea26d626ea3fe0fda398f50c59d8_s390x |
| Red Hat | openshift4/ose-must-gather@sha256:c49863d29684102fd19cbd437fdf2d92d6ea9ce1cbec0abfcb084c00dcca75ac_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-must-gather@sha256:c49863d29684102fd19cbd437fdf2d92d6ea9ce1cbec0abfcb084c00dcca75ac_amd64, openshift4/ose-must-gather@sha256:c49863d29684102fd19cbd437fdf2d92d6ea9ce1cbec0abfcb084c00dcca75ac_amd64, * |
| Red Hat | openshift4/ose-cluster-dns-operator@sha256:6c684e4f522d0c1961ab20bb5642312b03c4f3d41d776d31b850ec4233c8329f_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-dns-operator@sha256:6c684e4f522d0c1961ab20bb5642312b03c4f3d41d776d31b850ec4233c8329f_arm64, openshift4/ose-cluster-dns-operator@sha256:6c684e4f522d0c1961ab20bb5642312b03c4f3d41d776d31b850ec4233c8329f_arm64, * |
| Red Hat | openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:f0a32ecd14019caef15048d9e34bcdbfaaabc86e22cba18509050dd6eb6f0ff2_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:f0a32ecd14019caef15048d9e34bcdbfaaabc86e22cba18509050dd6eb6f0ff2_arm64, openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:f0a32ecd14019caef15048d9e34bcdbfaaabc86e22cba18509050dd6eb6f0ff2_arm64 |
| Red Hat | openshift4/ose-csi-node-driver-registrar@sha256:f9017e0f8635ecd3ff2ad8f373c104b7c424bd838c1cb3fed5a70d235fd9644a_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-cluster-etcd-rhel8-operator@sha256:637373403bf958b7deca64c44b10757992021ee740a240920d8ab6c3d1aba0b4_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-cli@sha256:b0da28d38be29639780c4c1404faea27404d4991b9b4d4575f3a88f2154a97cb_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cli@sha256:b0da28d38be29639780c4c1404faea27404d4991b9b4d4575f3a88f2154a97cb_arm64, *, openshift4/ose-cli@sha256:b0da28d38be29639780c4c1404faea27404d4991b9b4d4575f3a88f2154a97cb_arm64 |
| Red Hat | openshift4/ose-console@sha256:ede67a33332b8886caaa111941ab3f7e96791ff62460e00421dafa14b0e9d2e0_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-console@sha256:ede67a33332b8886caaa111941ab3f7e96791ff62460e00421dafa14b0e9d2e0_arm64, openshift4/ose-console@sha256:ede67a33332b8886caaa111941ab3f7e96791ff62460e00421dafa14b0e9d2e0_arm64, openshift4/ose-console@sha256:ede67a33332b8886caaa111941ab3f7e96791ff62460e00421dafa14b0e9d2e0_arm64 |
| Red Hat | openshift4/cloud-network-config-controller-rhel8@sha256:6f919097747367e3c94fba66cd57d66544f7ff950708e0a04de1064f7f473a9f_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/cloud-network-config-controller-rhel8@sha256:6f919097747367e3c94fba66cd57d66544f7ff950708e0a04de1064f7f473a9f_s390x, openshift4/cloud-network-config-controller-rhel8@sha256:6f919097747367e3c94fba66cd57d66544f7ff950708e0a04de1064f7f473a9f_s390x |
| Red Hat | openshift4/ose-kuryr-cni-rhel8@sha256:086170fae8a2d5a319803bcc156e56907a1f07b7e318756da55fcda930aebd56_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-kuryr-cni-rhel8@sha256:086170fae8a2d5a319803bcc156e56907a1f07b7e318756da55fcda930aebd56_ppc64le, *, * |
| Red Hat | openshift4/ose-pod@sha256:33a0afb45e8657225be6928b0a361dfc77f6cedacd1a2a2304a6f69100169c72_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-pod@sha256:33a0afb45e8657225be6928b0a361dfc77f6cedacd1a2a2304a6f69100169c72_amd64, openshift4/ose-pod@sha256:33a0afb45e8657225be6928b0a361dfc77f6cedacd1a2a2304a6f69100169c72_amd64, openshift4/ose-pod@sha256:33a0afb45e8657225be6928b0a361dfc77f6cedacd1a2a2304a6f69100169c72_amd64 |
| Red Hat | openshift4/ose-ovn-kubernetes@sha256:ab973d8b49d3fa0a684aec2867612ed1cf36fb8a6a9c62941c024817135036e0_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-ovn-kubernetes@sha256:ab973d8b49d3fa0a684aec2867612ed1cf36fb8a6a9c62941c024817135036e0_ppc64le, openshift4/ose-ovn-kubernetes@sha256:ab973d8b49d3fa0a684aec2867612ed1cf36fb8a6a9c62941c024817135036e0_ppc64le |
| Red Hat | openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:fd8b83a74493e23cf984460fc131eb3aa85697f266cbc91f22d180934e48b4e1_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-aws-cluster-api-controllers-rhel8@sha256:fd8b83a74493e23cf984460fc131eb3aa85697f266cbc91f22d180934e48b4e1_arm64 |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:4019e57ce0add5546a75a33916344c88559ff79ab45ec39b085db3dffe7a31bb_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-node-tuning-operator@sha256:4019e57ce0add5546a75a33916344c88559ff79ab45ec39b085db3dffe7a31bb_ppc64le, openshift4/ose-cluster-node-tuning-operator@sha256:4019e57ce0add5546a75a33916344c88559ff79ab45ec39b085db3dffe7a31bb_ppc64le, openshift4/ose-cluster-node-tuning-operator@sha256:4019e57ce0add5546a75a33916344c88559ff79ab45ec39b085db3dffe7a31bb_ppc64le |
| Red Hat | openshift4/ose-ironic-static-ip-manager-rhel9@sha256:19e268780b4e107451f735bafe825620e2a48d53e6882582891cadfb561ef7f7_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-ironic-static-ip-manager-rhel9@sha256:19e268780b4e107451f735bafe825620e2a48d53e6882582891cadfb561ef7f7_arm64 |
…and 1209 more
Timeline
- Jul 27, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 20, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:4226 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2174485 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2178358 issue
- https://issues.redhat.com/browse/OCPBUGS-11539 advisory
- https://issues.redhat.com/browse/OCPBUGS-15194 advisory
- https://issues.redhat.com/browse/OCPBUGS-15368 advisory
- https://issues.redhat.com/browse/OCPBUGS-15378 advisory
- https://issues.redhat.com/browse/OCPBUGS-15982 advisory
- https://issues.redhat.com/browse/OCPBUGS-16171 advisory
- https://issues.redhat.com/browse/OCPBUGS-16172 advisory
- https://issues.redhat.com/browse/OCPBUGS-16244 advisory
- https://issues.redhat.com/browse/OCPBUGS-16372 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4226.json advisory
- https://access.redhat.com/security/cve/CVE-2022-41723 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-41723 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-41723 advisory
- https://github.com/advisories/GHSA-vvpx-j8f3-3w6h advisory
- https://go.dev/cl/468135 advisory
- https://go.dev/cl/468295 advisory
…and 12 more