RHSA-2023%3A5314 — Vulnetix

RHSA-2023%3A5314 PUBLISHED CVSS 7.5 HIGH

A denial of service attack was found in prometheus/client_golang. This flaw allows an attacker to produce a denial of service attack on an HTTP server by exploiting the InstrumentHandlerCounter function in the version below 1.11.1, resulting in a loss of availability.

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

…and 53 more

Timeline

Sep 20, 2023 CVE Published
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
May 20, 2026 CVE Updated

References

https://access.redhat.com/errata/RHSA-2023:5314 advisory
https://access.redhat.com/security/updates/classification/#moderate advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2045880 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2174485 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2178358 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2189886 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2223355 issue
https://issues.redhat.com/browse/OADP-2420 advisory
https://issues.redhat.com/browse/OADP-2530 advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5314.json advisory
https://access.redhat.com/security/cve/CVE-2022-21698 advisory
https://www.cve.org/CVERecord?id=CVE-2022-21698 advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-21698 advisory
https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p advisory
https://access.redhat.com/security/cve/CVE-2022-41723 advisory
https://www.cve.org/CVERecord?id=CVE-2022-41723 advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-41723 advisory
https://github.com/advisories/GHSA-vvpx-j8f3-3w6h advisory
https://go.dev/cl/468135 advisory
https://go.dev/cl/468295 advisory

…and 23 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	oadp/oadp-velero-plugin-for-microsoft-azure-rhel8@sha256:36cb4beaf4e5720c309235d8498367c6513660f52e219f944fa4d8e388cb5c9c_s390x as a component of 8Base-OADP-1.1	, , oadp/oadp-velero-plugin-for-microsoft-azure-rhel8@sha256:36cb4beaf4e5720c309235d8498367c6513660f52e219f944fa4d8e388cb5c9c_s390x
Red Hat	oadp/oadp-operator-bundle@sha256:40e6807ca08bd03a80e42f2c49dcb001d52d8f1479ca55afcaa93c1766dda8a8_ppc64le as a component of 8Base-OADP-1.1	oadp/oadp-operator-bundle@sha256:40e6807ca08bd03a80e42f2c49dcb001d52d8f1479ca55afcaa93c1766dda8a8_ppc64le, ,
Red Hat	oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:1dfac6fee0781915e4ebb373c70046362000d67346b375c4d441990c534a36e0_amd64 as a component of 8Base-OADP-1.1	oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:1dfac6fee0781915e4ebb373c70046362000d67346b375c4d441990c534a36e0_amd64, ,
Red Hat	oadp/oadp-velero-rhel8@sha256:4f7fb098cc236efccc1b6a8192c83f48e43043484d4c2056aca253012c4cc111_amd64 as a component of 8Base-OADP-1.1	oadp/oadp-velero-rhel8@sha256:4f7fb098cc236efccc1b6a8192c83f48e43043484d4c2056aca253012c4cc111_amd64, ,
Red Hat	oadp/oadp-velero-rhel8@sha256:4f7fb098cc236efccc1b6a8192c83f48e43043484d4c2056aca253012c4cc111_amd64 as a component of 8Base-OADP-1.1	oadp/oadp-velero-rhel8@sha256:4f7fb098cc236efccc1b6a8192c83f48e43043484d4c2056aca253012c4cc111_amd64, oadp/oadp-velero-rhel8@sha256:4f7fb098cc236efccc1b6a8192c83f48e43043484d4c2056aca253012c4cc111_amd64, oadp/oadp-velero-rhel8@sha256:4f7fb098cc236efccc1b6a8192c83f48e43043484d4c2056aca253012c4cc111_amd64
Red Hat	oadp/oadp-velero-plugin-for-csi-rhel8@sha256:928d7fce65e9a53d50de03c2bf84407d2ecea6515ec51be2054dc3077f0dec96_amd64 as a component of 8Base-OADP-1.1	*, oadp/oadp-velero-plugin-for-csi-rhel8@sha256:928d7fce65e9a53d50de03c2bf84407d2ecea6515ec51be2054dc3077f0dec96_amd64, oadp/oadp-velero-plugin-for-csi-rhel8@sha256:928d7fce65e9a53d50de03c2bf84407d2ecea6515ec51be2054dc3077f0dec96_amd64
Red Hat	oadp/oadp-velero-plugin-for-gcp-rhel8@sha256:450e62f4512093e316afbbeb35a8a5d70dbfc802886833a43993ee33aa9ad674_ppc64le as a component of 8Base-OADP-1.1	, oadp/oadp-velero-plugin-for-gcp-rhel8@sha256:450e62f4512093e316afbbeb35a8a5d70dbfc802886833a43993ee33aa9ad674_ppc64le,
Red Hat	oadp/oadp-velero-plugin-for-gcp-rhel8@sha256:0530768bd486887490ffdbd7a3121d64a53ab15b11772a5778145ded9b8ce020_amd64 as a component of 8Base-OADP-1.1	oadp/oadp-velero-plugin-for-gcp-rhel8@sha256:0530768bd486887490ffdbd7a3121d64a53ab15b11772a5778145ded9b8ce020_amd64, *, oadp/oadp-velero-plugin-for-gcp-rhel8@sha256:0530768bd486887490ffdbd7a3121d64a53ab15b11772a5778145ded9b8ce020_amd64
Red Hat	oadp/oadp-rhel8-operator@sha256:b938a900623bdf738a364e1181a72ec3e2d22dc94fd4e89bf6297a7f61bc6cc4_s390x as a component of 8Base-OADP-1.1	*, oadp/oadp-rhel8-operator@sha256:b938a900623bdf738a364e1181a72ec3e2d22dc94fd4e89bf6297a7f61bc6cc4_s390x, oadp/oadp-rhel8-operator@sha256:b938a900623bdf738a364e1181a72ec3e2d22dc94fd4e89bf6297a7f61bc6cc4_s390x
Red Hat	oadp/oadp-mustgather-rhel8@sha256:2446b2e974d79e84550fd1f427734baea05304403e6c1fe4b1da20fe1336869c_ppc64le as a component of 8Base-OADP-1.1	*, oadp/oadp-mustgather-rhel8@sha256:2446b2e974d79e84550fd1f427734baea05304403e6c1fe4b1da20fe1336869c_ppc64le, oadp/oadp-mustgather-rhel8@sha256:2446b2e974d79e84550fd1f427734baea05304403e6c1fe4b1da20fe1336869c_ppc64le
Red Hat	oadp/oadp-rhel8-operator@sha256:b938a900623bdf738a364e1181a72ec3e2d22dc94fd4e89bf6297a7f61bc6cc4_s390x as a component of 8Base-OADP-1.1	oadp/oadp-rhel8-operator@sha256:b938a900623bdf738a364e1181a72ec3e2d22dc94fd4e89bf6297a7f61bc6cc4_s390x, oadp/oadp-rhel8-operator@sha256:b938a900623bdf738a364e1181a72ec3e2d22dc94fd4e89bf6297a7f61bc6cc4_s390x, oadp/oadp-rhel8-operator@sha256:b938a900623bdf738a364e1181a72ec3e2d22dc94fd4e89bf6297a7f61bc6cc4_s390x
Red Hat	oadp/oadp-velero-restic-restore-helper-rhel8@sha256:c6fb44b2d571ba3a7d24fffe83935d89b7ec795e638708dfb3231a7a39e57117_amd64 as a component of 8Base-OADP-1.1	oadp/oadp-velero-restic-restore-helper-rhel8@sha256:c6fb44b2d571ba3a7d24fffe83935d89b7ec795e638708dfb3231a7a39e57117_amd64, oadp/oadp-velero-restic-restore-helper-rhel8@sha256:c6fb44b2d571ba3a7d24fffe83935d89b7ec795e638708dfb3231a7a39e57117_amd64, oadp/oadp-velero-restic-restore-helper-rhel8@sha256:c6fb44b2d571ba3a7d24fffe83935d89b7ec795e638708dfb3231a7a39e57117_amd64
Red Hat	oadp/oadp-velero-plugin-for-csi-rhel8@sha256:e9ec1c8592f1e9d8aa9c69d998dc4815ba8c993b8ebe3e1c631d08ce457906c0_ppc64le as a component of 8Base-OADP-1.1	oadp/oadp-velero-plugin-for-csi-rhel8@sha256:e9ec1c8592f1e9d8aa9c69d998dc4815ba8c993b8ebe3e1c631d08ce457906c0_ppc64le, ,
Red Hat	oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:5d6a3595262d1f631d5ca6de5a64d4fbfc4a5fd2173d1ef2ccc57c31d7837ba1_s390x as a component of 8Base-OADP-1.1	, , oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:5d6a3595262d1f631d5ca6de5a64d4fbfc4a5fd2173d1ef2ccc57c31d7837ba1_s390x
Red Hat	oadp/oadp-velero-plugin-rhel8@sha256:5ad1cde5f4b1caffada50eb288c502c03c41e64ddd01c36f6f2f4f5165d2f22c_s390x as a component of 8Base-OADP-1.1	oadp/oadp-velero-plugin-rhel8@sha256:5ad1cde5f4b1caffada50eb288c502c03c41e64ddd01c36f6f2f4f5165d2f22c_s390x, oadp/oadp-velero-plugin-rhel8@sha256:5ad1cde5f4b1caffada50eb288c502c03c41e64ddd01c36f6f2f4f5165d2f22c_s390x, oadp/oadp-velero-plugin-rhel8@sha256:5ad1cde5f4b1caffada50eb288c502c03c41e64ddd01c36f6f2f4f5165d2f22c_s390x
Red Hat	oadp/oadp-velero-plugin-rhel8@sha256:6e04ef6736c65fed1502a934b8e4b53e8cbd2fefa934d337e2e9872db47a5d6e_ppc64le as a component of 8Base-OADP-1.1	oadp/oadp-velero-plugin-rhel8@sha256:6e04ef6736c65fed1502a934b8e4b53e8cbd2fefa934d337e2e9872db47a5d6e_ppc64le, oadp/oadp-velero-plugin-rhel8@sha256:6e04ef6736c65fed1502a934b8e4b53e8cbd2fefa934d337e2e9872db47a5d6e_ppc64le, *
Red Hat	oadp/oadp-rhel8-operator@sha256:3baae16070db22fecbbec513d9b96a915fd14708d4d87ea434899c3b20c7ff49_amd64 as a component of 8Base-OADP-1.1	, , *
Red Hat	oadp/oadp-volume-snapshot-mover-rhel8@sha256:c9504c54cef27a3afecbf7fcca10a18a206dc7949d58eda6de86b5b25aaf383e_s390x as a component of 8Base-OADP-1.1	oadp/oadp-volume-snapshot-mover-rhel8@sha256:c9504c54cef27a3afecbf7fcca10a18a206dc7949d58eda6de86b5b25aaf383e_s390x, oadp/oadp-volume-snapshot-mover-rhel8@sha256:c9504c54cef27a3afecbf7fcca10a18a206dc7949d58eda6de86b5b25aaf383e_s390x, *
Red Hat	oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:1dfac6fee0781915e4ebb373c70046362000d67346b375c4d441990c534a36e0_amd64 as a component of 8Base-OADP-1.1	oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:1dfac6fee0781915e4ebb373c70046362000d67346b375c4d441990c534a36e0_amd64, oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:1dfac6fee0781915e4ebb373c70046362000d67346b375c4d441990c534a36e0_amd64, oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:1dfac6fee0781915e4ebb373c70046362000d67346b375c4d441990c534a36e0_amd64
Red Hat	oadp/oadp-velero-plugin-for-csi-rhel8@sha256:e9ec1c8592f1e9d8aa9c69d998dc4815ba8c993b8ebe3e1c631d08ce457906c0_ppc64le as a component of 8Base-OADP-1.1	oadp/oadp-velero-plugin-for-csi-rhel8@sha256:e9ec1c8592f1e9d8aa9c69d998dc4815ba8c993b8ebe3e1c631d08ce457906c0_ppc64le, oadp/oadp-velero-plugin-for-csi-rhel8@sha256:e9ec1c8592f1e9d8aa9c69d998dc4815ba8c993b8ebe3e1c631d08ce457906c0_ppc64le, *