VDB

RHSA-2024%3A0198

RHSA-2024%3A0198 PUBLISHED CVSS 7.5 HIGH

A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-csi-node-driver-registrar-rhel8@sha256:9a623736c07c6d25ef913636a1a1245d907ba9d78e5e2ee717e61af5f94f1dc0_amd64 as a component of Red Hat OpenShift Container Platform 4.12*, openshift4/ose-csi-node-driver-registrar-rhel8@sha256:9a623736c07c6d25ef913636a1a1245d907ba9d78e5e2ee717e61af5f94f1dc0_amd64, openshift4/ose-csi-node-driver-registrar-rhel8@sha256:9a623736c07c6d25ef913636a1a1245d907ba9d78e5e2ee717e61af5f94f1dc0_amd64
Red Hatopenshift4/ose-cluster-update-keys@sha256:062ae663b610be38b081db113927250ced51515a2d302e936de7bbe6bdea7ffc_ppc64le as a component of Red Hat OpenShift Container Platform 4.12*, openshift4/ose-cluster-update-keys@sha256:062ae663b610be38b081db113927250ced51515a2d302e936de7bbe6bdea7ffc_ppc64le, openshift4/ose-cluster-update-keys@sha256:062ae663b610be38b081db113927250ced51515a2d302e936de7bbe6bdea7ffc_ppc64le
Red Hatopenshift4/ose-aws-pod-identity-webhook-rhel8@sha256:5e6da208b787932cf0dcd443498d60f40ea28adc4c421aca06d4c7b4564460f8_amd64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:5e6da208b787932cf0dcd443498d60f40ea28adc4c421aca06d4c7b4564460f8_amd64, openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:5e6da208b787932cf0dcd443498d60f40ea28adc4c421aca06d4c7b4564460f8_amd64, openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:5e6da208b787932cf0dcd443498d60f40ea28adc4c421aca06d4c7b4564460f8_amd64
Red Hatopenshift4/ose-csi-node-driver-registrar@sha256:e03ea24c22554543deab4495e0f99765e5f2cd81569587bd10b6483f794444e0_ppc64le as a component of Red Hat OpenShift Container Platform 4.12*, openshift4/ose-csi-node-driver-registrar@sha256:e03ea24c22554543deab4495e0f99765e5f2cd81569587bd10b6483f794444e0_ppc64le, openshift4/ose-csi-node-driver-registrar@sha256:e03ea24c22554543deab4495e0f99765e5f2cd81569587bd10b6483f794444e0_ppc64le
Red Hatopenshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:4fb2137e490f717ff71992ebbfe30d456f26ef2be9a4f852cd971a7bd7df69ac_s390x as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:4fb2137e490f717ff71992ebbfe30d456f26ef2be9a4f852cd971a7bd7df69ac_s390x, *, *
Red Hatopenshift4/ose-cluster-api-rhel8@sha256:4862e74db7d4c85b33f3b8ede35236d1f64b56448155f57c893db51721d1e85e_ppc64le as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-cluster-api-rhel8@sha256:4862e74db7d4c85b33f3b8ede35236d1f64b56448155f57c893db51721d1e85e_ppc64le, *, *
Red Hatopenshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:ed9fe8e77980e5617b6951a0e6f90801dc30e66881f92926860355b11220cb11_amd64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:ed9fe8e77980e5617b6951a0e6f90801dc30e66881f92926860355b11220cb11_amd64, openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:ed9fe8e77980e5617b6951a0e6f90801dc30e66881f92926860355b11220cb11_amd64, openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:ed9fe8e77980e5617b6951a0e6f90801dc30e66881f92926860355b11220cb11_amd64
Red Hatopenshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:c860b1cf36bde376d4a6565fd0d87107cbeaa98a9c55260135fd62697352c21d_arm64 as a component of Red Hat OpenShift Container Platform 4.12*, *, openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:c860b1cf36bde376d4a6565fd0d87107cbeaa98a9c55260135fd62697352c21d_arm64
Red Hatopenshift4/ose-deployer@sha256:707773846f638c285e5c3f09a4a280e625bb692dc880c8caa19ee5e6170ba70b_arm64 as a component of Red Hat OpenShift Container Platform 4.12*, *, openshift4/ose-deployer@sha256:707773846f638c285e5c3f09a4a280e625bb692dc880c8caa19ee5e6170ba70b_arm64
Red Hatopenshift4/ose-oauth-proxy@sha256:7d22fb5d9ddf97e3e9eb443c73638e90f276efd80d581bb207ac38f8dba9e225_amd64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-oauth-proxy@sha256:7d22fb5d9ddf97e3e9eb443c73638e90f276efd80d581bb207ac38f8dba9e225_amd64, openshift4/ose-oauth-proxy@sha256:7d22fb5d9ddf97e3e9eb443c73638e90f276efd80d581bb207ac38f8dba9e225_amd64, openshift4/ose-oauth-proxy@sha256:7d22fb5d9ddf97e3e9eb443c73638e90f276efd80d581bb207ac38f8dba9e225_amd64
Red Hatopenshift4/ose-cluster-openshift-apiserver-operator@sha256:fb08874efdbfd6edf2be62d5db2b724a9b5d2cadee5fc83027d15b11781272d7_amd64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-cluster-openshift-apiserver-operator@sha256:fb08874efdbfd6edf2be62d5db2b724a9b5d2cadee5fc83027d15b11781272d7_amd64, openshift4/ose-cluster-openshift-apiserver-operator@sha256:fb08874efdbfd6edf2be62d5db2b724a9b5d2cadee5fc83027d15b11781272d7_amd64, openshift4/ose-cluster-openshift-apiserver-operator@sha256:fb08874efdbfd6edf2be62d5db2b724a9b5d2cadee5fc83027d15b11781272d7_amd64
Red Hatopenshift4/ose-baremetal-runtimecfg-rhel8@sha256:317fbc5f544bf041e3d8e730ce7a58c503aeea0abf53a1e385b55ead5158962a_s390x as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-baremetal-runtimecfg-rhel8@sha256:317fbc5f544bf041e3d8e730ce7a58c503aeea0abf53a1e385b55ead5158962a_s390x, openshift4/ose-baremetal-runtimecfg-rhel8@sha256:317fbc5f544bf041e3d8e730ce7a58c503aeea0abf53a1e385b55ead5158962a_s390x, openshift4/ose-baremetal-runtimecfg-rhel8@sha256:317fbc5f544bf041e3d8e730ce7a58c503aeea0abf53a1e385b55ead5158962a_s390x
Red Hatopenshift4/ose-openstack-cinder-csi-driver-rhel8-operator@sha256:617b51beb74b0ff95d7308152e251fbc1f1a70c45b98ccb3273b7ef13d7def2c_ppc64le as a component of Red Hat OpenShift Container Platform 4.12*, *, openshift4/ose-openstack-cinder-csi-driver-rhel8-operator@sha256:617b51beb74b0ff95d7308152e251fbc1f1a70c45b98ccb3273b7ef13d7def2c_ppc64le
Red Hatopenshift4/ose-hypershift-rhel8@sha256:fd30759480fea7da4f58f413eea1e31c9508080ad7caa9d8d5f77585a59c27b1_ppc64le as a component of Red Hat OpenShift Container Platform 4.12*, *, openshift4/ose-hypershift-rhel8@sha256:fd30759480fea7da4f58f413eea1e31c9508080ad7caa9d8d5f77585a59c27b1_ppc64le
Red Hatopenshift4/ose-cluster-config-operator@sha256:4b2875d1d3415a2bedd1a1ae674b19cd628c4787b87b77b48ae02ded2a2bdf2f_s390x as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-cluster-config-operator@sha256:4b2875d1d3415a2bedd1a1ae674b19cd628c4787b87b77b48ae02ded2a2bdf2f_s390x, openshift4/ose-cluster-config-operator@sha256:4b2875d1d3415a2bedd1a1ae674b19cd628c4787b87b77b48ae02ded2a2bdf2f_s390x, openshift4/ose-cluster-config-operator@sha256:4b2875d1d3415a2bedd1a1ae674b19cd628c4787b87b77b48ae02ded2a2bdf2f_s390x
Red Hatopenshift4/ose-cluster-etcd-rhel8-operator@sha256:3ace19a770b484623b3e498355425af7e4c81719a68190adfe868546cdd86ff8_ppc64le as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-cluster-etcd-rhel8-operator@sha256:3ace19a770b484623b3e498355425af7e4c81719a68190adfe868546cdd86ff8_ppc64le, openshift4/ose-cluster-etcd-rhel8-operator@sha256:3ace19a770b484623b3e498355425af7e4c81719a68190adfe868546cdd86ff8_ppc64le, openshift4/ose-cluster-etcd-rhel8-operator@sha256:3ace19a770b484623b3e498355425af7e4c81719a68190adfe868546cdd86ff8_ppc64le
Red Hatopenshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:cbe26cb4d00423023f4d7290113016cfafe5f5f6651275a1e145eebb7bf39049_amd64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:cbe26cb4d00423023f4d7290113016cfafe5f5f6651275a1e145eebb7bf39049_amd64, openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:cbe26cb4d00423023f4d7290113016cfafe5f5f6651275a1e145eebb7bf39049_amd64, *
Red Hatopenshift4/cloud-network-config-controller-rhel8@sha256:83d55c6de892438003b1a164e0611d4726ed4df023e38ba408e39bda3b992b5c_ppc64le as a component of Red Hat OpenShift Container Platform 4.12openshift4/cloud-network-config-controller-rhel8@sha256:83d55c6de892438003b1a164e0611d4726ed4df023e38ba408e39bda3b992b5c_ppc64le, *, *
Red Hatopenshift4/ose-cluster-dns-operator@sha256:5374688347cd8d0e194052c985f50b11adca874b24875291e9ecdf92ce6fcf11_s390x as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-cluster-dns-operator@sha256:5374688347cd8d0e194052c985f50b11adca874b24875291e9ecdf92ce6fcf11_s390x, *, *
Red Hatopenshift4/ose-cluster-etcd-rhel8-operator@sha256:3ace19a770b484623b3e498355425af7e4c81719a68190adfe868546cdd86ff8_ppc64le as a component of Red Hat OpenShift Container Platform 4.12*, openshift4/ose-cluster-etcd-rhel8-operator@sha256:3ace19a770b484623b3e498355425af7e4c81719a68190adfe868546cdd86ff8_ppc64le, openshift4/ose-cluster-etcd-rhel8-operator@sha256:3ace19a770b484623b3e498355425af7e4c81719a68190adfe868546cdd86ff8_ppc64le

…and 1249 more

Timeline

  • Jan 17, 2024 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 21, 2026 CVE Updated

References

…and 16 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›