VDB
RHSA-2024%3A0204
RHSA-2024%3A0204
PUBLISHED
CVSS 7.5 HIGH
A memory leak was found in the otelhttp handler of open-telemetry. This flaw allows a remote, unauthenticated attacker to exhaust the server's memory by sending many malicious requests, affecting the availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-operator-registry@sha256:e8f1389bb591f1a2ce7353cb94db4f0279c6ec4b0b16a83c49455e3c905d2ad7_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-operator-registry@sha256:e8f1389bb591f1a2ce7353cb94db4f0279c6ec4b0b16a83c49455e3c905d2ad7_amd64, openshift4/ose-operator-registry@sha256:e8f1389bb591f1a2ce7353cb94db4f0279c6ec4b0b16a83c49455e3c905d2ad7_amd64 |
| Red Hat | openshift4/ose-etcd-rhel9@sha256:d4f781cdba860833fbd47af4efb8d7045a15c544ac2f50c097244c194471b1c8_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-etcd-rhel9@sha256:d4f781cdba860833fbd47af4efb8d7045a15c544ac2f50c097244c194471b1c8_s390x, openshift4/ose-etcd-rhel9@sha256:d4f781cdba860833fbd47af4efb8d7045a15c544ac2f50c097244c194471b1c8_s390x |
| Red Hat | openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:17159a50664b4bedde9549360f9abeb030f27783052539025f37e5180e37ecef_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:17159a50664b4bedde9549360f9abeb030f27783052539025f37e5180e37ecef_amd64 |
| Red Hat | openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8@sha256:5de6828ac1f742c125fe6768e5f95f952a2201447e9c0db09209088cbf88a642_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8@sha256:5de6828ac1f742c125fe6768e5f95f952a2201447e9c0db09209088cbf88a642_amd64 |
| Red Hat | openshift4/ose-tools-rhel8@sha256:21f945621612752010d065c0f4e4a3e8426d118944182d1295a98ff4b8894b95_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-tools-rhel8@sha256:21f945621612752010d065c0f4e4a3e8426d118944182d1295a98ff4b8894b95_arm64, openshift4/ose-tools-rhel8@sha256:21f945621612752010d065c0f4e4a3e8426d118944182d1295a98ff4b8894b95_arm64 |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:5b8ce1c219f3d54224951260551e74f5a75d2b5aef91342721cc8710a4809b07_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:5b8ce1c219f3d54224951260551e74f5a75d2b5aef91342721cc8710a4809b07_s390x, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:5b8ce1c219f3d54224951260551e74f5a75d2b5aef91342721cc8710a4809b07_s390x, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:5b8ce1c219f3d54224951260551e74f5a75d2b5aef91342721cc8710a4809b07_s390x |
| Red Hat | openshift4/ose-ovn-kubernetes@sha256:e7837eed27f0c005bb7b0e8cbd39df53f19aabe134bd4f9d7c315e09f3898b0d_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ovn-kubernetes@sha256:e7837eed27f0c005bb7b0e8cbd39df53f19aabe134bd4f9d7c315e09f3898b0d_s390x, openshift4/ose-ovn-kubernetes@sha256:e7837eed27f0c005bb7b0e8cbd39df53f19aabe134bd4f9d7c315e09f3898b0d_s390x |
| Red Hat | openshift4/ose-cluster-network-operator@sha256:36ee0602a1200019ad3180953ba71464b7a1ca4305da5421391353ff4fc4f4a3_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-network-operator@sha256:36ee0602a1200019ad3180953ba71464b7a1ca4305da5421391353ff4fc4f4a3_arm64, openshift4/ose-cluster-network-operator@sha256:36ee0602a1200019ad3180953ba71464b7a1ca4305da5421391353ff4fc4f4a3_arm64 |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:9b758ea84d81270bd76b4651624bfa27c96ca01d801d447d2e8017b22c326374_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:9b758ea84d81270bd76b4651624bfa27c96ca01d801d447d2e8017b22c326374_s390x, openshift4/ose-agent-installer-csr-approver-rhel8@sha256:9b758ea84d81270bd76b4651624bfa27c96ca01d801d447d2e8017b22c326374_s390x |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e925f0877de6267ad6cdfd0378a3477470f0d5abe5c8ef6dd1d0a92e00b2a7cf_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e925f0877de6267ad6cdfd0378a3477470f0d5abe5c8ef6dd1d0a92e00b2a7cf_arm64, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e925f0877de6267ad6cdfd0378a3477470f0d5abe5c8ef6dd1d0a92e00b2a7cf_arm64 |
| Red Hat | openshift4/ose-operator-registry@sha256:e8f1389bb591f1a2ce7353cb94db4f0279c6ec4b0b16a83c49455e3c905d2ad7_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-operator-registry@sha256:e8f1389bb591f1a2ce7353cb94db4f0279c6ec4b0b16a83c49455e3c905d2ad7_amd64, *, openshift4/ose-operator-registry@sha256:e8f1389bb591f1a2ce7353cb94db4f0279c6ec4b0b16a83c49455e3c905d2ad7_amd64 |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:973f5eae3ec1fcfa775c9e659cab5669bcad165bae477ecfafc131b4651121c8_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/driver-toolkit-rhel9@sha256:973f5eae3ec1fcfa775c9e659cab5669bcad165bae477ecfafc131b4651121c8_amd64, openshift4/driver-toolkit-rhel9@sha256:973f5eae3ec1fcfa775c9e659cab5669bcad165bae477ecfafc131b4651121c8_amd64 |
| Red Hat | openshift4/ose-hypershift-rhel8@sha256:cd603d06b6da4610d3c0e5c9cab466048cbdf7dae6eac3d0e062707db7be29f1_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-hypershift-rhel8@sha256:cd603d06b6da4610d3c0e5c9cab466048cbdf7dae6eac3d0e062707db7be29f1_amd64, openshift4/ose-hypershift-rhel8@sha256:cd603d06b6da4610d3c0e5c9cab466048cbdf7dae6eac3d0e062707db7be29f1_amd64 |
| Red Hat | openshift4/ose-cluster-autoscaler-operator@sha256:3b3807b27c02d12dba9828888afe34cd014aef6df5a34c6c8ba371cfd4f4ec34_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-autoscaler-operator@sha256:3b3807b27c02d12dba9828888afe34cd014aef6df5a34c6c8ba371cfd4f4ec34_arm64, openshift4/ose-cluster-autoscaler-operator@sha256:3b3807b27c02d12dba9828888afe34cd014aef6df5a34c6c8ba371cfd4f4ec34_arm64 |
| Red Hat | rhcos@sha256:c3c9d772550eeba73ae538be56b79cee379626f8f0575ebed65b1ea212916164_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | rhcos@sha256:c3c9d772550eeba73ae538be56b79cee379626f8f0575ebed65b1ea212916164_ppc64le, * |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:58f5d62705884b9a958ea1018b4d604425d5e8d9e8783cd0821438323bdf5b33_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:58f5d62705884b9a958ea1018b4d604425d5e8d9e8783cd0821438323bdf5b33_ppc64le, openshift4/ose-agent-installer-csr-approver-rhel8@sha256:58f5d62705884b9a958ea1018b4d604425d5e8d9e8783cd0821438323bdf5b33_ppc64le, * |
| Red Hat | openshift4/oc-mirror-plugin-rhel8@sha256:2bc0052364a8bba676ae32b9b564563d59a4de788907af1e6727653a17799c46_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/oc-mirror-plugin-rhel8@sha256:2bc0052364a8bba676ae32b9b564563d59a4de788907af1e6727653a17799c46_arm64 |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:9b758ea84d81270bd76b4651624bfa27c96ca01d801d447d2e8017b22c326374_s390x as a component of Red Hat OpenShift Container Platform 4.14 | *, *, openshift4/ose-agent-installer-csr-approver-rhel8@sha256:9b758ea84d81270bd76b4651624bfa27c96ca01d801d447d2e8017b22c326374_s390x |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e8d0063b5fe847cda8a011ee6f313822eaa77727d511ed02332c30308970cef2_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e8d0063b5fe847cda8a011ee6f313822eaa77727d511ed02332c30308970cef2_ppc64le, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:e8d0063b5fe847cda8a011ee6f313822eaa77727d511ed02332c30308970cef2_ppc64le |
| Red Hat | openshift4/ose-cluster-autoscaler-operator@sha256:e19a767ad0aabdba705c69e9917622f357c91c323b188095931a55662506c6a2_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-cluster-autoscaler-operator@sha256:e19a767ad0aabdba705c69e9917622f357c91c323b188095931a55662506c6a2_ppc64le, openshift4/ose-cluster-autoscaler-operator@sha256:e19a767ad0aabdba705c69e9917622f357c91c323b188095931a55662506c6a2_ppc64le |
…and 262 more
Timeline
- Jan 17, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:0204 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2245180 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2251198 issue
- https://issues.redhat.com/browse/OCPBUGS-19431 advisory
- https://issues.redhat.com/browse/OCPBUGS-22360 advisory
- https://issues.redhat.com/browse/OCPBUGS-22788 advisory
- https://issues.redhat.com/browse/OCPBUGS-22895 advisory
- https://issues.redhat.com/browse/OCPBUGS-23936 advisory
- https://issues.redhat.com/browse/OCPBUGS-24037 advisory
- https://issues.redhat.com/browse/OCPBUGS-24640 advisory
- https://issues.redhat.com/browse/OCPBUGS-25595 advisory
- https://issues.redhat.com/browse/OCPBUGS-25804 advisory
- https://issues.redhat.com/browse/OCPBUGS-25997 advisory
- https://issues.redhat.com/browse/OCPBUGS-26006 advisory
- https://issues.redhat.com/browse/OCPBUGS-26044 advisory
- https://issues.redhat.com/browse/OCPBUGS-26065 advisory
- https://issues.redhat.com/browse/OCPBUGS-26171 advisory
- https://issues.redhat.com/browse/OCPBUGS-26207 advisory
- https://issues.redhat.com/browse/OCPBUGS-26214 advisory
…and 10 more