VDB

RHSA-2024%3A0641

RHSA-2024%3A0641 PUBLISHED CVSS 7.5 HIGH

A memory leak was found in the otelhttp handler of open-telemetry. This flaw allows a remote, unauthenticated attacker to exhaust the server's memory by sending many malicious requests, affecting the availability.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-ansible-operator@sha256:eb8b6b435cbc5231744509cd5e42bdb0da78f48dfcf71c3285061cd04bea41ba_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-ansible-operator@sha256:eb8b6b435cbc5231744509cd5e42bdb0da78f48dfcf71c3285061cd04bea41ba_amd64, openshift4/ose-ansible-operator@sha256:eb8b6b435cbc5231744509cd5e42bdb0da78f48dfcf71c3285061cd04bea41ba_amd64
Red Hatopenshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:f34eafcacfbb900a721214cc41b4edcffb212b10ec01cb28dcff06fc2de362f5_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:f34eafcacfbb900a721214cc41b4edcffb212b10ec01cb28dcff06fc2de362f5_arm64, *
Red Hatopenshift4/ose-ptp-operator@sha256:5b5fd9a8603ac2764ce38db99f059f4197ba4d06205babc7dda02d3b298fe1fb_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-ptp-operator@sha256:5b5fd9a8603ac2764ce38db99f059f4197ba4d06205babc7dda02d3b298fe1fb_amd64, openshift4/ose-ptp-operator@sha256:5b5fd9a8603ac2764ce38db99f059f4197ba4d06205babc7dda02d3b298fe1fb_amd64
Red Hatopenshift4/ose-sriov-network-device-plugin@sha256:37d102bfd2a60ef1a5f68ce1d485d1db7f4bef1ab2fc3917c533625027de7cd6_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-sriov-network-device-plugin@sha256:37d102bfd2a60ef1a5f68ce1d485d1db7f4bef1ab2fc3917c533625027de7cd6_arm64, openshift4/ose-sriov-network-device-plugin@sha256:37d102bfd2a60ef1a5f68ce1d485d1db7f4bef1ab2fc3917c533625027de7cd6_arm64
Red Hatopenshift4/ose-sriov-network-device-plugin@sha256:6e13bd66e9f157319a23a2d3417fd7430a279b0449ed7208dd5127b2cab9974e_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-sriov-network-device-plugin@sha256:6e13bd66e9f157319a23a2d3417fd7430a279b0449ed7208dd5127b2cab9974e_ppc64le, *, openshift4/ose-sriov-network-device-plugin@sha256:6e13bd66e9f157319a23a2d3417fd7430a279b0449ed7208dd5127b2cab9974e_ppc64le
Red Hatopenshift4/sriov-cni-rhel9@sha256:899cd75bb9746cf49115ab1c5dce5484f8d9e79c0cc34efe94f948489f9a11e7_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/sriov-cni-rhel9@sha256:899cd75bb9746cf49115ab1c5dce5484f8d9e79c0cc34efe94f948489f9a11e7_amd64, openshift4/sriov-cni-rhel9@sha256:899cd75bb9746cf49115ab1c5dce5484f8d9e79c0cc34efe94f948489f9a11e7_amd64
Red Hatopenshift4/ose-secrets-store-csi-mustgather-rhel8@sha256:4d78b266b4503d5f579f1bd70af7c676ce87874b4ecf74d0fab8a4931c311430_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-secrets-store-csi-mustgather-rhel8@sha256:4d78b266b4503d5f579f1bd70af7c676ce87874b4ecf74d0fab8a4931c311430_s390x, openshift4/ose-secrets-store-csi-mustgather-rhel8@sha256:4d78b266b4503d5f579f1bd70af7c676ce87874b4ecf74d0fab8a4931c311430_s390x
Red Hatopenshift4/nmstate-console-plugin-rhel8@sha256:63059a01d26f2f444b8d8d3a08d9f60c633abff33a139e92be68ffb46c7305f0_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/nmstate-console-plugin-rhel8@sha256:63059a01d26f2f444b8d8d3a08d9f60c633abff33a139e92be68ffb46c7305f0_arm64, *, openshift4/nmstate-console-plugin-rhel8@sha256:63059a01d26f2f444b8d8d3a08d9f60c633abff33a139e92be68ffb46c7305f0_arm64
Red Hatopenshift4/ose-node-feature-discovery@sha256:aac4730ccd65f74f30fe86c96e28f7dcff9e1ecf5b5832c277d26fe6dd8e7846_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-node-feature-discovery@sha256:aac4730ccd65f74f30fe86c96e28f7dcff9e1ecf5b5832c277d26fe6dd8e7846_s390x, openshift4/ose-node-feature-discovery@sha256:aac4730ccd65f74f30fe86c96e28f7dcff9e1ecf5b5832c277d26fe6dd8e7846_s390x
Red Hatopenshift4/ingress-node-firewall-rhel9@sha256:0a4146e656997ae3bc53d5dd66bb0437f0fcb406216cd20819ec39d0dbd19fe8_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ingress-node-firewall-rhel9@sha256:0a4146e656997ae3bc53d5dd66bb0437f0fcb406216cd20819ec39d0dbd19fe8_arm64, *, *
Red Hatopenshift4/ose-sriov-network-config-daemon@sha256:1b727ec88c9e2c7058e36e7b494fd23af1a9016432bb1fd7cf12e96cbc007bc3_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-sriov-network-config-daemon@sha256:1b727ec88c9e2c7058e36e7b494fd23af1a9016432bb1fd7cf12e96cbc007bc3_ppc64le, *
Red Hatopenshift4/ose-local-storage-diskmaker@sha256:c169f1bc4d092b59c2ae38593e63c9947379b9612df6cfcde9c91d517aff4ce0_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, *, *
Red Hatopenshift4/ose-vertical-pod-autoscaler-rhel8@sha256:bfc45b003415215a9b25cde8cff2e407d63e082c2d391cd08db8856a83f682fa_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:bfc45b003415215a9b25cde8cff2e407d63e082c2d391cd08db8856a83f682fa_ppc64le, openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:bfc45b003415215a9b25cde8cff2e407d63e082c2d391cd08db8856a83f682fa_ppc64le
Red Hatopenshift4/ose-local-storage-diskmaker@sha256:c78c2fb1132487e1f4953d2c32b3a93435d4f9fd2967c3279afaa3bb1e93f6c0_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-local-storage-diskmaker@sha256:c78c2fb1132487e1f4953d2c32b3a93435d4f9fd2967c3279afaa3bb1e93f6c0_arm64, openshift4/ose-local-storage-diskmaker@sha256:c78c2fb1132487e1f4953d2c32b3a93435d4f9fd2967c3279afaa3bb1e93f6c0_arm64
Red Hatopenshift4/ose-vertical-pod-autoscaler-rhel8@sha256:2905e47e145ea3f727aa78cd1be5d0b540e18c34d71df771c7474958c339e1ad_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:2905e47e145ea3f727aa78cd1be5d0b540e18c34d71df771c7474958c339e1ad_s390x, openshift4/ose-vertical-pod-autoscaler-rhel8@sha256:2905e47e145ea3f727aa78cd1be5d0b540e18c34d71df771c7474958c339e1ad_s390x
Red Hatopenshift4/ose-secrets-store-csi-driver-rhel8-operator@sha256:7a53fb1b9386874e458733c66d46fcf3b12a30cf895b64fbf02d996a71db4e93_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-secrets-store-csi-driver-rhel8-operator@sha256:7a53fb1b9386874e458733c66d46fcf3b12a30cf895b64fbf02d996a71db4e93_amd64, *, openshift4/ose-secrets-store-csi-driver-rhel8-operator@sha256:7a53fb1b9386874e458733c66d46fcf3b12a30cf895b64fbf02d996a71db4e93_amd64
Red Hatopenshift4/ose-ptp-rhel9@sha256:0e769e1a551458acfe037010464307041b141295716c5570be3592a7f8dfc096_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, *, openshift4/ose-ptp-rhel9@sha256:0e769e1a551458acfe037010464307041b141295716c5570be3592a7f8dfc096_arm64
Red Hatopenshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:d7089546228031397433d3722290c8f0b1ecaee2d3096bbdfe542a3aae2191f7_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:d7089546228031397433d3722290c8f0b1ecaee2d3096bbdfe542a3aae2191f7_arm64, openshift4/ose-gcp-filestore-csi-driver-rhel8@sha256:d7089546228031397433d3722290c8f0b1ecaee2d3096bbdfe542a3aae2191f7_arm64
Red Hatopenshift4/ose-descheduler@sha256:c02a1d5af08f99b9a1e7635612b1830419c569ff5492c4647ecca3331f188939_s390x as a component of Red Hat OpenShift Container Platform 4.14*, *, *
Red Hatopenshift4/ose-sriov-network-device-plugin@sha256:4bc2642819633c3117d26f75defedc2e40e3f75592ac45eb77e916adfaff307c_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-sriov-network-device-plugin@sha256:4bc2642819633c3117d26f75defedc2e40e3f75592ac45eb77e916adfaff307c_amd64

…and 328 more

Timeline

  • Feb 7, 2024 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 15, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›