VDB
RHSA-2023%3A7823
RHSA-2023%3A7823
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-tests@sha256:859fcc08b636af5c77e2a8bf148cc1d3a57e51d97ea3a5dbb1df5f636d8e586e_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-tests@sha256:859fcc08b636af5c77e2a8bf148cc1d3a57e51d97ea3a5dbb1df5f636d8e586e_arm64, *, * |
| Red Hat | openshift4/ose-machine-api-provider-azure-rhel8@sha256:5ef8528ba98dcca02284788e09d56937ca78b6423ed4d7cb80617dde0c9bc553_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-machine-api-provider-azure-rhel8@sha256:5ef8528ba98dcca02284788e09d56937ca78b6423ed4d7cb80617dde0c9bc553_arm64, openshift4/ose-machine-api-provider-azure-rhel8@sha256:5ef8528ba98dcca02284788e09d56937ca78b6423ed4d7cb80617dde0c9bc553_arm64, openshift4/ose-machine-api-provider-azure-rhel8@sha256:5ef8528ba98dcca02284788e09d56937ca78b6423ed4d7cb80617dde0c9bc553_arm64 |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:20549668231196e904fb6c8669a6c5ce0eede1ca6c6a93362f76172f2ac5b41b_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-node-tuning-operator@sha256:20549668231196e904fb6c8669a6c5ce0eede1ca6c6a93362f76172f2ac5b41b_arm64, *, openshift4/ose-cluster-node-tuning-operator@sha256:20549668231196e904fb6c8669a6c5ce0eede1ca6c6a93362f76172f2ac5b41b_arm64 |
| Red Hat | openshift4/ose-tools-rhel8@sha256:abac3493c63ce009466fc2a2cdc4bbee328b52401aef35d7562d1d29e13e8909_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-tools-rhel8@sha256:abac3493c63ce009466fc2a2cdc4bbee328b52401aef35d7562d1d29e13e8909_ppc64le, openshift4/ose-tools-rhel8@sha256:abac3493c63ce009466fc2a2cdc4bbee328b52401aef35d7562d1d29e13e8909_ppc64le, openshift4/ose-tools-rhel8@sha256:abac3493c63ce009466fc2a2cdc4bbee328b52401aef35d7562d1d29e13e8909_ppc64le |
| Red Hat | openshift4/ose-baremetal-installer-rhel8@sha256:bf6383c8dacbbcd3058abb6f46f3b4f99f6bedbdeeda78e5ec5b4bb9c30674d3_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | openshift4/ose-installer-artifacts@sha256:bd0957c01bd6fffd1e60d830863aca7d00b8798244c1150e899651ec472cb70e_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-installer-artifacts@sha256:bd0957c01bd6fffd1e60d830863aca7d00b8798244c1150e899651ec472cb70e_amd64, openshift4/ose-installer-artifacts@sha256:bd0957c01bd6fffd1e60d830863aca7d00b8798244c1150e899651ec472cb70e_amd64, * |
| Red Hat | openshift4/ose-installer@sha256:aac919f79ba342a3ec37cf31b5ebbff8b0070cb6fc174e2a21f309993c5190c9_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-installer@sha256:aac919f79ba342a3ec37cf31b5ebbff8b0070cb6fc174e2a21f309993c5190c9_ppc64le, *, openshift4/ose-installer@sha256:aac919f79ba342a3ec37cf31b5ebbff8b0070cb6fc174e2a21f309993c5190c9_ppc64le |
| Red Hat | openshift4/ose-pod@sha256:5fc4f15e9877b72a3ff7c04d67cf0dd7c9ad6e19a009d1b2974b54f8da4efd40_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-pod@sha256:5fc4f15e9877b72a3ff7c04d67cf0dd7c9ad6e19a009d1b2974b54f8da4efd40_ppc64le, openshift4/ose-pod@sha256:5fc4f15e9877b72a3ff7c04d67cf0dd7c9ad6e19a009d1b2974b54f8da4efd40_ppc64le, openshift4/ose-pod@sha256:5fc4f15e9877b72a3ff7c04d67cf0dd7c9ad6e19a009d1b2974b54f8da4efd40_ppc64le |
| Red Hat | openshift4/ose-cli@sha256:667de2d1aecc2a782504a74dce34a506c661980e98563cff4993c9b27daae649_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-cli@sha256:667de2d1aecc2a782504a74dce34a506c661980e98563cff4993c9b27daae649_ppc64le, openshift4/ose-cli@sha256:667de2d1aecc2a782504a74dce34a506c661980e98563cff4993c9b27daae649_ppc64le |
| Red Hat | openshift4/ose-baremetal-rhel8-operator@sha256:13d2f9fd6587d164e595223cea1aab8621bc578440a7d62a914c639d9dc7685f_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-baremetal-rhel8-operator@sha256:13d2f9fd6587d164e595223cea1aab8621bc578440a7d62a914c639d9dc7685f_ppc64le, * |
| Red Hat | openshift4/ose-apiserver-network-proxy-rhel8@sha256:618eca635c2f7d9c272eddbaf7afd415c3a7791c28e63801f47913501a730f45_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-apiserver-network-proxy-rhel8@sha256:618eca635c2f7d9c272eddbaf7afd415c3a7791c28e63801f47913501a730f45_arm64, openshift4/ose-apiserver-network-proxy-rhel8@sha256:618eca635c2f7d9c272eddbaf7afd415c3a7791c28e63801f47913501a730f45_arm64, openshift4/ose-apiserver-network-proxy-rhel8@sha256:618eca635c2f7d9c272eddbaf7afd415c3a7791c28e63801f47913501a730f45_arm64 |
| Red Hat | openshift4/ose-tools-rhel8@sha256:7a9bd47c814287284fcf766a37236f1ec56f91729c7a34324959413087578374_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-tools-rhel8@sha256:7a9bd47c814287284fcf766a37236f1ec56f91729c7a34324959413087578374_amd64, openshift4/ose-tools-rhel8@sha256:7a9bd47c814287284fcf766a37236f1ec56f91729c7a34324959413087578374_amd64, openshift4/ose-tools-rhel8@sha256:7a9bd47c814287284fcf766a37236f1ec56f91729c7a34324959413087578374_amd64 |
| Red Hat | openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:360911d89d7a030fac5b7604dbc80397a7886c5f8c8963316452709c57194de5_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:360911d89d7a030fac5b7604dbc80397a7886c5f8c8963316452709c57194de5_amd64, openshift4/ose-cluster-cloud-controller-manager-operator-rhel8@sha256:360911d89d7a030fac5b7604dbc80397a7886c5f8c8963316452709c57194de5_amd64, * |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:bc44460fe6a56640d2a90d52191e2aa3a5dc60d7b9e2291e2fbc64f94d0c5931_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-node-tuning-operator@sha256:bc44460fe6a56640d2a90d52191e2aa3a5dc60d7b9e2291e2fbc64f94d0c5931_ppc64le, openshift4/ose-cluster-node-tuning-operator@sha256:bc44460fe6a56640d2a90d52191e2aa3a5dc60d7b9e2291e2fbc64f94d0c5931_ppc64le, * |
| Red Hat | openshift4/ose-baremetal-installer-rhel8@sha256:5981c2066b1124ec4187431b4d4e5af5ae6b987768ab787fbdbfb33d0973e474_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-baremetal-installer-rhel8@sha256:5981c2066b1124ec4187431b4d4e5af5ae6b987768ab787fbdbfb33d0973e474_arm64, openshift4/ose-baremetal-installer-rhel8@sha256:5981c2066b1124ec4187431b4d4e5af5ae6b987768ab787fbdbfb33d0973e474_arm64, openshift4/ose-baremetal-installer-rhel8@sha256:5981c2066b1124ec4187431b4d4e5af5ae6b987768ab787fbdbfb33d0973e474_arm64 |
| Red Hat | openshift4/ose-cluster-authentication-operator@sha256:3e942699f6a6f7eca436fbb09059e9de749bc97324a1bb903c46cfc4b270ebfa_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-authentication-operator@sha256:3e942699f6a6f7eca436fbb09059e9de749bc97324a1bb903c46cfc4b270ebfa_ppc64le, openshift4/ose-cluster-authentication-operator@sha256:3e942699f6a6f7eca436fbb09059e9de749bc97324a1bb903c46cfc4b270ebfa_ppc64le, openshift4/ose-cluster-authentication-operator@sha256:3e942699f6a6f7eca436fbb09059e9de749bc97324a1bb903c46cfc4b270ebfa_ppc64le |
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:09e858fd1bcf10aeccd008bc8d4198bd0882b564a74cc5a85a5b9f0eefbfda6a_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-image-registry-operator@sha256:09e858fd1bcf10aeccd008bc8d4198bd0882b564a74cc5a85a5b9f0eefbfda6a_s390x, openshift4/ose-cluster-image-registry-operator@sha256:09e858fd1bcf10aeccd008bc8d4198bd0882b564a74cc5a85a5b9f0eefbfda6a_s390x, openshift4/ose-cluster-image-registry-operator@sha256:09e858fd1bcf10aeccd008bc8d4198bd0882b564a74cc5a85a5b9f0eefbfda6a_s390x |
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:9b84dae300893c573675bc067b2e305aa6c36691743596027a8b8bdc13279818_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, openshift4/ose-cluster-image-registry-operator@sha256:9b84dae300893c573675bc067b2e305aa6c36691743596027a8b8bdc13279818_arm64 |
| Red Hat | openshift4/ose-deployer@sha256:4f91f019b300091ca6781e69886adb7da8419916a66577afee85bbf9a9da92fe_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-deployer@sha256:4f91f019b300091ca6781e69886adb7da8419916a66577afee85bbf9a9da92fe_amd64, openshift4/ose-deployer@sha256:4f91f019b300091ca6781e69886adb7da8419916a66577afee85bbf9a9da92fe_amd64, openshift4/ose-deployer@sha256:4f91f019b300091ca6781e69886adb7da8419916a66577afee85bbf9a9da92fe_amd64 |
| Red Hat | openshift4/ose-installer-artifacts@sha256:bd0957c01bd6fffd1e60d830863aca7d00b8798244c1150e899651ec472cb70e_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-installer-artifacts@sha256:bd0957c01bd6fffd1e60d830863aca7d00b8798244c1150e899651ec472cb70e_amd64, openshift4/ose-installer-artifacts@sha256:bd0957c01bd6fffd1e60d830863aca7d00b8798244c1150e899651ec472cb70e_amd64 |
…and 269 more
Timeline
- Jan 4, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:7823 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2178358 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-22116 advisory
- https://issues.redhat.com/browse/OCPBUGS-22125 advisory
- https://issues.redhat.com/browse/OCPBUGS-23379 advisory
- https://issues.redhat.com/browse/OCPBUGS-23537 advisory
- https://issues.redhat.com/browse/OCPBUGS-23568 advisory
- https://issues.redhat.com/browse/OCPBUGS-23979 advisory
- https://issues.redhat.com/browse/OCPBUGS-24236 advisory
- https://issues.redhat.com/browse/OCPBUGS-24364 advisory
- https://issues.redhat.com/browse/OCPBUGS-24388 advisory
- https://issues.redhat.com/browse/OCPBUGS-24462 advisory
- https://issues.redhat.com/browse/OCPBUGS-24490 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2023_7823.json advisory
- https://access.redhat.com/security/cve/CVE-2022-41723 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-41723 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-41723 advisory
…and 14 more