VDB

RHSA-2023%3A5233

RHSA-2023%3A5233 PUBLISHED CVSS 7.5 HIGH

A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9@sha256:d45085a8ff216f9e6ab0aa6c499dbf48e7e915bec88c5f88dd556ba5a111f8cf_arm64 as a component of CNV 4.13 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-copy-template-rhel9@sha256:e95a5aeaa3ecdb1b8b9eb73deb4fe9202658799319f949ebf7de4577613f0615_arm64 as a component of CNV 4.13 for RHEL 9*, container-native-virtualization/kubevirt-tekton-tasks-copy-template-rhel9@sha256:e95a5aeaa3ecdb1b8b9eb73deb4fe9202658799319f949ebf7de4577613f0615_arm64, container-native-virtualization/kubevirt-tekton-tasks-copy-template-rhel9@sha256:e95a5aeaa3ecdb1b8b9eb73deb4fe9202658799319f949ebf7de4577613f0615_arm64
Red Hatcontainer-native-virtualization/hyperconverged-cluster-operator-rhel9@sha256:663f64400079c641cf3e7fc0c7bb20dbbfe6530fe9375642009bc8aaea5fc1ed_amd64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/hyperconverged-cluster-operator-rhel9@sha256:663f64400079c641cf3e7fc0c7bb20dbbfe6530fe9375642009bc8aaea5fc1ed_amd64, container-native-virtualization/hyperconverged-cluster-operator-rhel9@sha256:663f64400079c641cf3e7fc0c7bb20dbbfe6530fe9375642009bc8aaea5fc1ed_amd64, container-native-virtualization/hyperconverged-cluster-operator-rhel9@sha256:663f64400079c641cf3e7fc0c7bb20dbbfe6530fe9375642009bc8aaea5fc1ed_amd64
Red Hatcontainer-native-virtualization/libguestfs-tools-rhel9@sha256:cb2570e30aed972c13fb81de6f05e4ee12be38bf0e01e98688dd734942b4a63f_amd64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/libguestfs-tools-rhel9@sha256:cb2570e30aed972c13fb81de6f05e4ee12be38bf0e01e98688dd734942b4a63f_amd64, container-native-virtualization/libguestfs-tools-rhel9@sha256:cb2570e30aed972c13fb81de6f05e4ee12be38bf0e01e98688dd734942b4a63f_amd64, container-native-virtualization/libguestfs-tools-rhel9@sha256:cb2570e30aed972c13fb81de6f05e4ee12be38bf0e01e98688dd734942b4a63f_amd64
Red Hatcontainer-native-virtualization/cnv-must-gather-rhel9@sha256:fbef3e3964432a5cb68dbdde80d44c0ae34a0be9b78c1f39226b4ec45b427d79_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/cnv-must-gather-rhel9@sha256:fbef3e3964432a5cb68dbdde80d44c0ae34a0be9b78c1f39226b4ec45b427d79_arm64, *, *
Red Hatcontainer-native-virtualization/kubesecondarydns-rhel9@sha256:4bfc75011d41696cf2d68094f5437dfe3b4fcd9b315ff838aa3c2130e21484b7_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/kubesecondarydns-rhel9@sha256:4bfc75011d41696cf2d68094f5437dfe3b4fcd9b315ff838aa3c2130e21484b7_arm64, container-native-virtualization/kubesecondarydns-rhel9@sha256:4bfc75011d41696cf2d68094f5437dfe3b4fcd9b315ff838aa3c2130e21484b7_arm64, *
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status-rhel9@sha256:e97dfdc10169fbc3ea392687ce9ed9df4b38e2b8f08fcd7c83f0bb6baf339e97_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status-rhel9@sha256:e97dfdc10169fbc3ea392687ce9ed9df4b38e2b8f08fcd7c83f0bb6baf339e97_arm64, *, container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status-rhel9@sha256:e97dfdc10169fbc3ea392687ce9ed9df4b38e2b8f08fcd7c83f0bb6baf339e97_arm64
Red Hatcontainer-native-virtualization/virtio-win-rhel9@sha256:c35c5414ea1e8394c7e3fde9c740b19057a6e3639b3678ef4ade192e2d3f94cc_amd64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/virtio-win-rhel9@sha256:c35c5414ea1e8394c7e3fde9c740b19057a6e3639b3678ef4ade192e2d3f94cc_amd64, container-native-virtualization/virtio-win-rhel9@sha256:c35c5414ea1e8394c7e3fde9c740b19057a6e3639b3678ef4ade192e2d3f94cc_amd64, container-native-virtualization/virtio-win-rhel9@sha256:c35c5414ea1e8394c7e3fde9c740b19057a6e3639b3678ef4ade192e2d3f94cc_amd64
Red Hatcontainer-native-virtualization/hco-bundle-registry-rhel9@sha256:54197a68563a943f71f8183b9ea0793d91c5aae82a16618d6bcde732a7abace5_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/hco-bundle-registry-rhel9@sha256:54197a68563a943f71f8183b9ea0793d91c5aae82a16618d6bcde732a7abace5_arm64, container-native-virtualization/hco-bundle-registry-rhel9@sha256:54197a68563a943f71f8183b9ea0793d91c5aae82a16618d6bcde732a7abace5_arm64, container-native-virtualization/hco-bundle-registry-rhel9@sha256:54197a68563a943f71f8183b9ea0793d91c5aae82a16618d6bcde732a7abace5_arm64
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-operator-rhel9@sha256:f8fa3852313b4a99c304d1cc1a33954a85ae8328c9cf9064026a4288769f3346_amd64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/kubevirt-tekton-tasks-operator-rhel9@sha256:f8fa3852313b4a99c304d1cc1a33954a85ae8328c9cf9064026a4288769f3346_amd64, container-native-virtualization/kubevirt-tekton-tasks-operator-rhel9@sha256:f8fa3852313b4a99c304d1cc1a33954a85ae8328c9cf9064026a4288769f3346_amd64, container-native-virtualization/kubevirt-tekton-tasks-operator-rhel9@sha256:f8fa3852313b4a99c304d1cc1a33954a85ae8328c9cf9064026a4288769f3346_amd64
Red Hatcontainer-native-virtualization/virt-cdi-apiserver-rhel9@sha256:2b3c4c2f0cffafec53ba9e71f89f56a4570d04dbf58dfcba8094be825a2cb10b_arm64 as a component of CNV 4.13 for RHEL 9*, *, container-native-virtualization/virt-cdi-apiserver-rhel9@sha256:2b3c4c2f0cffafec53ba9e71f89f56a4570d04dbf58dfcba8094be825a2cb10b_arm64
Red Hatcontainer-native-virtualization/virt-api-rhel9@sha256:b652adf09f8684725dfaefab837850964feb813d44ae4b0633662a0da5ca8864_amd64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/virt-api-rhel9@sha256:b652adf09f8684725dfaefab837850964feb813d44ae4b0633662a0da5ca8864_amd64, container-native-virtualization/virt-api-rhel9@sha256:b652adf09f8684725dfaefab837850964feb813d44ae4b0633662a0da5ca8864_amd64, container-native-virtualization/virt-api-rhel9@sha256:b652adf09f8684725dfaefab837850964feb813d44ae4b0633662a0da5ca8864_amd64
Red Hatcontainer-native-virtualization/virt-handler-rhel9@sha256:e6c87135b37e2fe244c80b14f92b5977cb5f2118238aebefba896cabee62fb7b_arm64 as a component of CNV 4.13 for RHEL 9*, *, *
Red Hatcontainer-native-virtualization/kubevirt-template-validator-rhel9@sha256:c734a89b61052bea0a5bf793a88eaaa504bababfad366b89a3660ea1912770ed_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/kubevirt-template-validator-rhel9@sha256:c734a89b61052bea0a5bf793a88eaaa504bababfad366b89a3660ea1912770ed_arm64, container-native-virtualization/kubevirt-template-validator-rhel9@sha256:c734a89b61052bea0a5bf793a88eaaa504bababfad366b89a3660ea1912770ed_arm64, container-native-virtualization/kubevirt-template-validator-rhel9@sha256:c734a89b61052bea0a5bf793a88eaaa504bababfad366b89a3660ea1912770ed_arm64
Red Hatcontainer-native-virtualization/virt-exportserver-rhel9@sha256:89d4d3e0f821b2ad8e9b27b314aaa1edda37e963fa95e6927b4e707da00d4041_arm64 as a component of CNV 4.13 for RHEL 9*, container-native-virtualization/virt-exportserver-rhel9@sha256:89d4d3e0f821b2ad8e9b27b314aaa1edda37e963fa95e6927b4e707da00d4041_arm64, container-native-virtualization/virt-exportserver-rhel9@sha256:89d4d3e0f821b2ad8e9b27b314aaa1edda37e963fa95e6927b4e707da00d4041_arm64
Red Hatcontainer-native-virtualization/vm-console-proxy-rhel9@sha256:155a5df0e94392ab809573b2f627fc614ae63a65b3afc448d52ba1c3117839e7_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/vm-console-proxy-rhel9@sha256:155a5df0e94392ab809573b2f627fc614ae63a65b3afc448d52ba1c3117839e7_arm64, *, *
Red Hatcontainer-native-virtualization/virt-operator-rhel9@sha256:089e13937ddd27ff0326a08056c5dd2b7f3641676be952ed36307c03b0ae1195_arm64 as a component of CNV 4.13 for RHEL 9*, container-native-virtualization/virt-operator-rhel9@sha256:089e13937ddd27ff0326a08056c5dd2b7f3641676be952ed36307c03b0ae1195_arm64, container-native-virtualization/virt-operator-rhel9@sha256:089e13937ddd27ff0326a08056c5dd2b7f3641676be952ed36307c03b0ae1195_arm64
Red Hatcontainer-native-virtualization/hco-bundle-registry-rhel9@sha256:54197a68563a943f71f8183b9ea0793d91c5aae82a16618d6bcde732a7abace5_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/hco-bundle-registry-rhel9@sha256:54197a68563a943f71f8183b9ea0793d91c5aae82a16618d6bcde732a7abace5_arm64, container-native-virtualization/hco-bundle-registry-rhel9@sha256:54197a68563a943f71f8183b9ea0793d91c5aae82a16618d6bcde732a7abace5_arm64, container-native-virtualization/hco-bundle-registry-rhel9@sha256:54197a68563a943f71f8183b9ea0793d91c5aae82a16618d6bcde732a7abace5_arm64
Red Hatcontainer-native-virtualization/vm-network-latency-checkup-rhel9@sha256:feebe20aa9cf8b0e93dc745059342497760c077dc0f45b550f6d4934e7f2804a_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/vm-network-latency-checkup-rhel9@sha256:feebe20aa9cf8b0e93dc745059342497760c077dc0f45b550f6d4934e7f2804a_arm64, *, *
Red Hatcontainer-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:3c78ccc9990f4c599d95b8a0b6100601898986e2cac17eb0ed448eab42690173_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:3c78ccc9990f4c599d95b8a0b6100601898986e2cac17eb0ed448eab42690173_arm64, container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:3c78ccc9990f4c599d95b8a0b6100601898986e2cac17eb0ed448eab42690173_arm64, container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:3c78ccc9990f4c599d95b8a0b6100601898986e2cac17eb0ed448eab42690173_arm64

…and 165 more

Timeline

  • Sep 19, 2023 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 20, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›