VDB
RHSA-2023%3A4986
RHSA-2023%3A4986
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in Golang Go, where it is vulnerable to a denial of service caused by memory exhaustion in the common function in HTTP and MIME header parsing. By sending a specially crafted request, a remote attacker can cause a denial of service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhosdt/jaeger-operator-bundle@sha256:d220c38ea995ebb78d9df0a8a11c56fcfcc5f26cd6e769cf90c6a703914dcc76_s390x as a component of Red Hat OpenShift distributed tracing 2.9 | * |
| Red Hat | rhosdt/jaeger-rhel8-operator@sha256:e04ca83905b906b2ac22fab5420629a61f9210a3a4779a60966813aaced99541_ppc64le as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/jaeger-rhel8-operator@sha256:e04ca83905b906b2ac22fab5420629a61f9210a3a4779a60966813aaced99541_ppc64le, rhosdt/jaeger-rhel8-operator@sha256:e04ca83905b906b2ac22fab5420629a61f9210a3a4779a60966813aaced99541_ppc64le |
| Red Hat | rhosdt/tempo-query-rhel8@sha256:3f7d332ed5e713cb683919824d63570e10664d3ca88a1e62c36a8f765a541140_amd64 as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/tempo-query-rhel8@sha256:3f7d332ed5e713cb683919824d63570e10664d3ca88a1e62c36a8f765a541140_amd64, rhosdt/tempo-query-rhel8@sha256:3f7d332ed5e713cb683919824d63570e10664d3ca88a1e62c36a8f765a541140_amd64 |
| Red Hat | rhosdt/jaeger-es-index-cleaner-rhel8@sha256:acb3481b4a9640fdcea057098d8bafdc17c80dfea8beff51aae912d31d03fd0d_amd64 as a component of Red Hat OpenShift distributed tracing 2.9 | * |
| Red Hat | rhosdt/jaeger-es-index-cleaner-rhel8@sha256:510f2f64e5e24c527541300ac9349a8e0ebc1a4856fc347aad5f5f5b187d2225_ppc64le as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/jaeger-es-index-cleaner-rhel8@sha256:510f2f64e5e24c527541300ac9349a8e0ebc1a4856fc347aad5f5f5b187d2225_ppc64le, * |
| Red Hat | rhosdt/opentelemetry-rhel8-operator@sha256:7d7bec09d4ab03fd266dcb2f4ba40450d055f3be704367a737ff52ae2d7eb5cf_amd64 as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/opentelemetry-rhel8-operator@sha256:7d7bec09d4ab03fd266dcb2f4ba40450d055f3be704367a737ff52ae2d7eb5cf_amd64 |
| Red Hat | rhosdt/tempo-operator-bundle@sha256:d93d10ed6c15912c8b2dd259e0b9008f7c37706e9b6388a5f1b89a7175b99c55_s390x as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/tempo-operator-bundle@sha256:d93d10ed6c15912c8b2dd259e0b9008f7c37706e9b6388a5f1b89a7175b99c55_s390x, * |
| Red Hat | rhosdt/jaeger-ingester-rhel8@sha256:0e0439a327c78aab214d0f00484fe4dafb1c214dfa63c9d1d520f0becc05ae4f_s390x as a component of Red Hat OpenShift distributed tracing 2.9 | *, rhosdt/jaeger-ingester-rhel8@sha256:0e0439a327c78aab214d0f00484fe4dafb1c214dfa63c9d1d520f0becc05ae4f_s390x |
| Red Hat | rhosdt/jaeger-es-rollover-rhel8@sha256:05c490e65a007d04d9006e9be375dc3015eec3ca0c538d5ff24a1b5129c23752_s390x as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/jaeger-es-rollover-rhel8@sha256:05c490e65a007d04d9006e9be375dc3015eec3ca0c538d5ff24a1b5129c23752_s390x, rhosdt/jaeger-es-rollover-rhel8@sha256:05c490e65a007d04d9006e9be375dc3015eec3ca0c538d5ff24a1b5129c23752_s390x |
| Red Hat | rhosdt/jaeger-agent-rhel8@sha256:d8bc6495463d50293f954ce8dd7f70e0416e78baed86cbd4355693f701593c17_amd64 as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/jaeger-agent-rhel8@sha256:d8bc6495463d50293f954ce8dd7f70e0416e78baed86cbd4355693f701593c17_amd64 |
| Red Hat | rhosdt/jaeger-es-rollover-rhel8@sha256:f35f3b371550adba3276ec9e969b51d26b67380294f3775031cda4b1572be084_ppc64le as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/jaeger-es-rollover-rhel8@sha256:f35f3b371550adba3276ec9e969b51d26b67380294f3775031cda4b1572be084_ppc64le, rhosdt/jaeger-es-rollover-rhel8@sha256:f35f3b371550adba3276ec9e969b51d26b67380294f3775031cda4b1572be084_ppc64le |
| Red Hat | rhosdt/opentelemetry-operator-bundle@sha256:b0890928d9ebc88f1fa059112859c5b5b4139e2ea3542724f76f8c9f9d6044ca_s390x as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/opentelemetry-operator-bundle@sha256:b0890928d9ebc88f1fa059112859c5b5b4139e2ea3542724f76f8c9f9d6044ca_s390x, * |
| Red Hat | rhosdt/jaeger-collector-rhel8@sha256:f48d37bf230ff3b408302004e7e15d6cd0dedab5877d867b3770863a9d38bea6_s390x as a component of Red Hat OpenShift distributed tracing 2.9 | *, * |
| Red Hat | rhosdt/tempo-query-rhel8@sha256:4bfd3efce54c8527d26d9c06ab3e42725d6edb1395ba94c3632b216df7b4948c_s390x as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/tempo-query-rhel8@sha256:4bfd3efce54c8527d26d9c06ab3e42725d6edb1395ba94c3632b216df7b4948c_s390x, rhosdt/tempo-query-rhel8@sha256:4bfd3efce54c8527d26d9c06ab3e42725d6edb1395ba94c3632b216df7b4948c_s390x |
| Red Hat | rhosdt/jaeger-rhel8-operator@sha256:e81105452ece3ccd9d1e7cf9f91d2fbbb06f12b4892289ddc94b0e922321589f_s390x as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/jaeger-rhel8-operator@sha256:e81105452ece3ccd9d1e7cf9f91d2fbbb06f12b4892289ddc94b0e922321589f_s390x |
| Red Hat | rhosdt/tempo-gateway-rhel8@sha256:84e5b718f78e99f5ea97bd72a69d56dd01300dc2d2f23b753de986afb62bb3e3_ppc64le as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/tempo-gateway-rhel8@sha256:84e5b718f78e99f5ea97bd72a69d56dd01300dc2d2f23b753de986afb62bb3e3_ppc64le |
| Red Hat | rhosdt/tempo-gateway-rhel8@sha256:37208be11e9af9009bd8ad16eb591b78d250bb1603f9e67ad9a1aa31a390772d_s390x as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/tempo-gateway-rhel8@sha256:37208be11e9af9009bd8ad16eb591b78d250bb1603f9e67ad9a1aa31a390772d_s390x |
| Red Hat | rhosdt/jaeger-operator-bundle@sha256:d60fd47d90d3195ade9ff821520337dadf4128061a3cbeea2eb7bc28f4647e0a_ppc64le as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/jaeger-operator-bundle@sha256:d60fd47d90d3195ade9ff821520337dadf4128061a3cbeea2eb7bc28f4647e0a_ppc64le, * |
| Red Hat | rhosdt/jaeger-es-index-cleaner-rhel8@sha256:510f2f64e5e24c527541300ac9349a8e0ebc1a4856fc347aad5f5f5b187d2225_ppc64le as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/jaeger-es-index-cleaner-rhel8@sha256:510f2f64e5e24c527541300ac9349a8e0ebc1a4856fc347aad5f5f5b187d2225_ppc64le |
| Red Hat | rhosdt/opentelemetry-collector-rhel8@sha256:0604dab5223b184fe502a493e7d2e96082e17ef3cf9864f37d889ac18aa19876_amd64 as a component of Red Hat OpenShift distributed tracing 2.9 | rhosdt/opentelemetry-collector-rhel8@sha256:0604dab5223b184fe502a493e7d2e96082e17ef3cf9864f37d889ac18aa19876_amd64, * |
…and 88 more
Timeline
- Sep 6, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 10, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:4986 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2184481 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2184482 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2184483 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2184484 issue
- https://issues.redhat.com/browse/TRACING-2968 advisory
- https://issues.redhat.com/browse/TRACING-3091 advisory
- https://issues.redhat.com/browse/TRACING-3142 advisory
- https://issues.redhat.com/browse/TRACING-3143 advisory
- https://issues.redhat.com/browse/TRACING-3147 advisory
- https://issues.redhat.com/browse/TRACING-3173 advisory
- https://issues.redhat.com/browse/TRACING-3204 advisory
- https://issues.redhat.com/browse/TRACING-3213 advisory
- https://issues.redhat.com/browse/TRACING-3243 advisory
- https://issues.redhat.com/browse/TRACING-3312 advisory
- https://issues.redhat.com/browse/TRACING-3322 advisory
- https://issues.redhat.com/browse/TRACING-3396 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4986.json advisory
- https://access.redhat.com/security/cve/CVE-2023-24534 advisory
…and 16 more