RHSA-2023%3A6235 — Vulnetix

RHSA-2023%3A6235 PUBLISHED CVSS 7.5 HIGH

A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests.

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

…and 165 more

Timeline

Nov 1, 2023 CVE Published
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
May 21, 2026 CVE Updated

References

https://access.redhat.com/errata/RHSA-2023:6235 advisory
https://access.redhat.com/security/updates/classification/#important advisory
https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2178358 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2237872 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2240675 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2242803 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6235.json advisory
https://access.redhat.com/security/cve/CVE-2022-41723 advisory
https://www.cve.org/CVERecord?id=CVE-2022-41723 advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-41723 advisory
https://github.com/advisories/GHSA-vvpx-j8f3-3w6h advisory
https://go.dev/cl/468135 advisory
https://go.dev/cl/468295 advisory
https://go.dev/issue/57855 advisory
https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E advisory
https://pkg.go.dev/vuln/GO-2023-1571 advisory
https://vuln.go.dev/ID/GO-2023-1571.json advisory
https://access.redhat.com/security/cve/CVE-2023-39325 advisory

…and 11 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	container-native-virtualization/kubevirt-dpdk-checkup-rhel9@sha256:74975f1f030959c5ad9067c709b848029d08b74a17297da8666638fc8377f4f5_amd64 as a component of CNV 4.13 for RHEL 9	container-native-virtualization/kubevirt-dpdk-checkup-rhel9@sha256:74975f1f030959c5ad9067c709b848029d08b74a17297da8666638fc8377f4f5_amd64, *, container-native-virtualization/kubevirt-dpdk-checkup-rhel9@sha256:74975f1f030959c5ad9067c709b848029d08b74a17297da8666638fc8377f4f5_amd64
Red Hat	container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:2832fbf13013467ea73c63e5e6ad7ffe94dbbeb052ec8727f6935d41b2c4d25c_amd64 as a component of CNV 4.13 for RHEL 9	container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:2832fbf13013467ea73c63e5e6ad7ffe94dbbeb052ec8727f6935d41b2c4d25c_amd64, container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:2832fbf13013467ea73c63e5e6ad7ffe94dbbeb052ec8727f6935d41b2c4d25c_amd64, *
Red Hat	container-native-virtualization/cluster-network-addons-operator-rhel9@sha256:0723b4c1c3737c07567392abde70c8d0ff41edc628859ab78b4f1db36ce9e908_arm64 as a component of CNV 4.13 for RHEL 9	, , *
Red Hat	container-native-virtualization/virt-exportproxy-rhel9@sha256:1a7a2bb4de8718c225295b70c4d324c35e915e29e9cd01a22164962bf2f6cf15_amd64 as a component of CNV 4.13 for RHEL 9	container-native-virtualization/virt-exportproxy-rhel9@sha256:1a7a2bb4de8718c225295b70c4d324c35e915e29e9cd01a22164962bf2f6cf15_amd64, container-native-virtualization/virt-exportproxy-rhel9@sha256:1a7a2bb4de8718c225295b70c4d324c35e915e29e9cd01a22164962bf2f6cf15_amd64, container-native-virtualization/virt-exportproxy-rhel9@sha256:1a7a2bb4de8718c225295b70c4d324c35e915e29e9cd01a22164962bf2f6cf15_amd64
Red Hat	container-native-virtualization/hco-bundle-registry-rhel9@sha256:7314d53f44b9058a2a41620ea57c8eafef5161218d412b8ad7353fb570b5ae64_amd64 as a component of CNV 4.13 for RHEL 9	container-native-virtualization/hco-bundle-registry-rhel9@sha256:7314d53f44b9058a2a41620ea57c8eafef5161218d412b8ad7353fb570b5ae64_amd64, container-native-virtualization/hco-bundle-registry-rhel9@sha256:7314d53f44b9058a2a41620ea57c8eafef5161218d412b8ad7353fb570b5ae64_amd64, container-native-virtualization/hco-bundle-registry-rhel9@sha256:7314d53f44b9058a2a41620ea57c8eafef5161218d412b8ad7353fb570b5ae64_amd64
Red Hat	container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template-rhel9@sha256:309e43a5a95f95ade124e9e30555d0f2df99a37c606a18aef1e39ba124a37f60_arm64 as a component of CNV 4.13 for RHEL 9	container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template-rhel9@sha256:309e43a5a95f95ade124e9e30555d0f2df99a37c606a18aef1e39ba124a37f60_arm64, *, container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template-rhel9@sha256:309e43a5a95f95ade124e9e30555d0f2df99a37c606a18aef1e39ba124a37f60_arm64
Red Hat	container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9@sha256:ae5fcba31eb7dde0f03a5a947b765b0492a9a805938bdb9075b7c1c3ca7b53c8_amd64 as a component of CNV 4.13 for RHEL 9	container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9@sha256:ae5fcba31eb7dde0f03a5a947b765b0492a9a805938bdb9075b7c1c3ca7b53c8_amd64, container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9@sha256:ae5fcba31eb7dde0f03a5a947b765b0492a9a805938bdb9075b7c1c3ca7b53c8_amd64, *
Red Hat	container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:a549dfc115062d3f9924c4d8527d80de1281d50179d157e6b42699a0535e8449_arm64 as a component of CNV 4.13 for RHEL 9	container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:a549dfc115062d3f9924c4d8527d80de1281d50179d157e6b42699a0535e8449_arm64, *, container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:a549dfc115062d3f9924c4d8527d80de1281d50179d157e6b42699a0535e8449_arm64
Red Hat	container-native-virtualization/virt-controller-rhel9@sha256:5ace580e85dcdbf18ef50362c0dcfe8e24b30301752cb16efd583a346699676c_arm64 as a component of CNV 4.13 for RHEL 9	*, container-native-virtualization/virt-controller-rhel9@sha256:5ace580e85dcdbf18ef50362c0dcfe8e24b30301752cb16efd583a346699676c_arm64, container-native-virtualization/virt-controller-rhel9@sha256:5ace580e85dcdbf18ef50362c0dcfe8e24b30301752cb16efd583a346699676c_arm64
Red Hat	container-native-virtualization/hostpath-provisioner-rhel9@sha256:c3059286198d3a75dd0cab0a8c751f4dde5b0f5e52cc38fe5b258e9324477c62_amd64 as a component of CNV 4.13 for RHEL 9	container-native-virtualization/hostpath-provisioner-rhel9@sha256:c3059286198d3a75dd0cab0a8c751f4dde5b0f5e52cc38fe5b258e9324477c62_amd64, *, container-native-virtualization/hostpath-provisioner-rhel9@sha256:c3059286198d3a75dd0cab0a8c751f4dde5b0f5e52cc38fe5b258e9324477c62_amd64
Red Hat	container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9@sha256:811b9aaefae86a945ca7b2b9e0ca23afe36be3f9ea0728386a3e2b3df79fe376_arm64 as a component of CNV 4.13 for RHEL 9	container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9@sha256:811b9aaefae86a945ca7b2b9e0ca23afe36be3f9ea0728386a3e2b3df79fe376_arm64, *, container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9@sha256:811b9aaefae86a945ca7b2b9e0ca23afe36be3f9ea0728386a3e2b3df79fe376_arm64
Red Hat	container-native-virtualization/ovs-cni-plugin-rhel9@sha256:ffb0c9fe819873c3d923f50aef33f0e253c81df2846a96dbe58516f95080533d_amd64 as a component of CNV 4.13 for RHEL 9	container-native-virtualization/ovs-cni-plugin-rhel9@sha256:ffb0c9fe819873c3d923f50aef33f0e253c81df2846a96dbe58516f95080533d_amd64, container-native-virtualization/ovs-cni-plugin-rhel9@sha256:ffb0c9fe819873c3d923f50aef33f0e253c81df2846a96dbe58516f95080533d_amd64, container-native-virtualization/ovs-cni-plugin-rhel9@sha256:ffb0c9fe819873c3d923f50aef33f0e253c81df2846a96dbe58516f95080533d_amd64
Red Hat	container-native-virtualization/virt-controller-rhel9@sha256:ab0fef9bd51caa62ef0e900c7fbe72a4fe67a48ef913ba33b6d261648342a0f2_amd64 as a component of CNV 4.13 for RHEL 9	container-native-virtualization/virt-controller-rhel9@sha256:ab0fef9bd51caa62ef0e900c7fbe72a4fe67a48ef913ba33b6d261648342a0f2_amd64, container-native-virtualization/virt-controller-rhel9@sha256:ab0fef9bd51caa62ef0e900c7fbe72a4fe67a48ef913ba33b6d261648342a0f2_amd64, container-native-virtualization/virt-controller-rhel9@sha256:ab0fef9bd51caa62ef0e900c7fbe72a4fe67a48ef913ba33b6d261648342a0f2_amd64
Red Hat	container-native-virtualization/virt-artifacts-server-rhel9@sha256:5a0a241bf8b334a5d52b9cefd74146628b7884e31303e9a63d96e52688e88b59_amd64 as a component of CNV 4.13 for RHEL 9	container-native-virtualization/virt-artifacts-server-rhel9@sha256:5a0a241bf8b334a5d52b9cefd74146628b7884e31303e9a63d96e52688e88b59_amd64, container-native-virtualization/virt-artifacts-server-rhel9@sha256:5a0a241bf8b334a5d52b9cefd74146628b7884e31303e9a63d96e52688e88b59_amd64, container-native-virtualization/virt-artifacts-server-rhel9@sha256:5a0a241bf8b334a5d52b9cefd74146628b7884e31303e9a63d96e52688e88b59_amd64
Red Hat	container-native-virtualization/virt-exportproxy-rhel9@sha256:1e675c5c66a08fc992909e2d06913ea8ab1420fc6560c87f048020a5ab9d055f_arm64 as a component of CNV 4.13 for RHEL 9	*, container-native-virtualization/virt-exportproxy-rhel9@sha256:1e675c5c66a08fc992909e2d06913ea8ab1420fc6560c87f048020a5ab9d055f_arm64, container-native-virtualization/virt-exportproxy-rhel9@sha256:1e675c5c66a08fc992909e2d06913ea8ab1420fc6560c87f048020a5ab9d055f_arm64
Red Hat	container-native-virtualization/hco-bundle-registry-rhel9@sha256:7314d53f44b9058a2a41620ea57c8eafef5161218d412b8ad7353fb570b5ae64_amd64 as a component of CNV 4.13 for RHEL 9	, , *
Red Hat	container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:e1f8cb4dba0f3f53b40faa9c32f5a5d98a9bf7b1d25d987ed49abe99be89b561_arm64 as a component of CNV 4.13 for RHEL 9	container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:e1f8cb4dba0f3f53b40faa9c32f5a5d98a9bf7b1d25d987ed49abe99be89b561_arm64, ,
Red Hat	container-native-virtualization/virt-operator-rhel9@sha256:0b7505d513a3a5dec0ceefb1e2337c8f8c7769d1a3a45e21e3ce46f7d87b3b9b_amd64 as a component of CNV 4.13 for RHEL 9	container-native-virtualization/virt-operator-rhel9@sha256:0b7505d513a3a5dec0ceefb1e2337c8f8c7769d1a3a45e21e3ce46f7d87b3b9b_amd64, ,
Red Hat	container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:fae3d9f5dfd142a132fd94f80e8814207aa497459d8942037c383202852ceddd_arm64 as a component of CNV 4.13 for RHEL 9	*, container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:fae3d9f5dfd142a132fd94f80e8814207aa497459d8942037c383202852ceddd_arm64, container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:fae3d9f5dfd142a132fd94f80e8814207aa497459d8942037c383202852ceddd_arm64
Red Hat	container-native-virtualization/hostpath-provisioner-rhel9@sha256:45a08c2561bc304bf62cee9043961c578e4e3c495bec3ad2a57f9e1ac2a62316_arm64 as a component of CNV 4.13 for RHEL 9	container-native-virtualization/hostpath-provisioner-rhel9@sha256:45a08c2561bc304bf62cee9043961c578e4e3c495bec3ad2a57f9e1ac2a62316_arm64, container-native-virtualization/hostpath-provisioner-rhel9@sha256:45a08c2561bc304bf62cee9043961c578e4e3c495bec3ad2a57f9e1ac2a62316_arm64, container-native-virtualization/hostpath-provisioner-rhel9@sha256:45a08c2561bc304bf62cee9043961c578e4e3c495bec3ad2a57f9e1ac2a62316_arm64