VDB
RHSA-2024%3A0694
RHSA-2024%3A0694
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body (up to 1GiB), causing the receiver to fail reading the response, possibly leading to a Denial of Service (DoS).
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/kibana6-rhel8@sha256:328a740fee92bd4db54b33851bcdc93d182d1bd5e902e3d0ef95ceb39ac1c422_s390x as a component of RHOL 5.7 for RHEL 8 | openshift-logging/kibana6-rhel8@sha256:328a740fee92bd4db54b33851bcdc93d182d1bd5e902e3d0ef95ceb39ac1c422_s390x, openshift-logging/kibana6-rhel8@sha256:328a740fee92bd4db54b33851bcdc93d182d1bd5e902e3d0ef95ceb39ac1c422_s390x, openshift-logging/kibana6-rhel8@sha256:328a740fee92bd4db54b33851bcdc93d182d1bd5e902e3d0ef95ceb39ac1c422_s390x |
| Red Hat | openshift-logging/elasticsearch-operator-bundle@sha256:4cde2750900bdb3ce183f1b6303da9b741ffad23f37609b8a20a7cd74e101de6_amd64 as a component of RHOL 5.7 for RHEL 8 | openshift-logging/elasticsearch-operator-bundle@sha256:4cde2750900bdb3ce183f1b6303da9b741ffad23f37609b8a20a7cd74e101de6_amd64, openshift-logging/elasticsearch-operator-bundle@sha256:4cde2750900bdb3ce183f1b6303da9b741ffad23f37609b8a20a7cd74e101de6_amd64, openshift-logging/elasticsearch-operator-bundle@sha256:4cde2750900bdb3ce183f1b6303da9b741ffad23f37609b8a20a7cd74e101de6_amd64 |
| Red Hat | openshift-logging/lokistack-gateway-rhel8@sha256:be11956803979052350e3de5a32bd8553fa470c7e484fab658be4499d2c34082_amd64 as a component of RHOL 5.7 for RHEL 8 | openshift-logging/lokistack-gateway-rhel8@sha256:be11956803979052350e3de5a32bd8553fa470c7e484fab658be4499d2c34082_amd64, openshift-logging/lokistack-gateway-rhel8@sha256:be11956803979052350e3de5a32bd8553fa470c7e484fab658be4499d2c34082_amd64, * |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:fc763b948933e00096c5a7d8661e603a3eca431f9a69e7449fc0aacaeb34813a_amd64 as a component of RHOL 5.7 for RHEL 8 | *, openshift-logging/kibana6-rhel8@sha256:fc763b948933e00096c5a7d8661e603a3eca431f9a69e7449fc0aacaeb34813a_amd64, * |
| Red Hat | openshift-logging/lokistack-gateway-rhel8@sha256:031117df1d39d2dc4993008bdac2fa55842261f6cb40e125e4a1aa2de7fe7296_s390x as a component of RHOL 5.7 for RHEL 8 | openshift-logging/lokistack-gateway-rhel8@sha256:031117df1d39d2dc4993008bdac2fa55842261f6cb40e125e4a1aa2de7fe7296_s390x, openshift-logging/lokistack-gateway-rhel8@sha256:031117df1d39d2dc4993008bdac2fa55842261f6cb40e125e4a1aa2de7fe7296_s390x, * |
| Red Hat | openshift-logging/logging-view-plugin-rhel8@sha256:368cc8b5c0730dc3250bab7a62fadb222ac2f0633085f1b8b4eb58d91ee55e3b_ppc64le as a component of RHOL 5.7 for RHEL 8 | openshift-logging/logging-view-plugin-rhel8@sha256:368cc8b5c0730dc3250bab7a62fadb222ac2f0633085f1b8b4eb58d91ee55e3b_ppc64le, openshift-logging/logging-view-plugin-rhel8@sha256:368cc8b5c0730dc3250bab7a62fadb222ac2f0633085f1b8b4eb58d91ee55e3b_ppc64le, openshift-logging/logging-view-plugin-rhel8@sha256:368cc8b5c0730dc3250bab7a62fadb222ac2f0633085f1b8b4eb58d91ee55e3b_ppc64le |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:359013c2769ed4decd9091648bf89fff988bceb6ca92e71e6c8a0c0aef7a9f53_ppc64le as a component of RHOL 5.7 for RHEL 8 | openshift-logging/log-file-metric-exporter-rhel8@sha256:359013c2769ed4decd9091648bf89fff988bceb6ca92e71e6c8a0c0aef7a9f53_ppc64le, *, openshift-logging/log-file-metric-exporter-rhel8@sha256:359013c2769ed4decd9091648bf89fff988bceb6ca92e71e6c8a0c0aef7a9f53_ppc64le |
| Red Hat | openshift-logging/loki-rhel8-operator@sha256:b4f662e7e19cea792f2928636b053879e02eacf68aab0bc79c98df6eb7ab6e1d_arm64 as a component of RHOL 5.7 for RHEL 8 | openshift-logging/loki-rhel8-operator@sha256:b4f662e7e19cea792f2928636b053879e02eacf68aab0bc79c98df6eb7ab6e1d_arm64, openshift-logging/loki-rhel8-operator@sha256:b4f662e7e19cea792f2928636b053879e02eacf68aab0bc79c98df6eb7ab6e1d_arm64, * |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:ef578edda1a905c71e67481937ae272147d86b065a41d8bb94ba5b0cf6a3cf03_arm64 as a component of RHOL 5.7 for RHEL 8 | *, openshift-logging/elasticsearch-proxy-rhel8@sha256:ef578edda1a905c71e67481937ae272147d86b065a41d8bb94ba5b0cf6a3cf03_arm64, openshift-logging/elasticsearch-proxy-rhel8@sha256:ef578edda1a905c71e67481937ae272147d86b065a41d8bb94ba5b0cf6a3cf03_arm64 |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:cd5dacdb9acb3ab8eeb1141e47bf85dd0c198aafbc3fb9893e0599295297c45f_amd64 as a component of RHOL 5.7 for RHEL 8 | openshift-logging/elasticsearch6-rhel8@sha256:cd5dacdb9acb3ab8eeb1141e47bf85dd0c198aafbc3fb9893e0599295297c45f_amd64, openshift-logging/elasticsearch6-rhel8@sha256:cd5dacdb9acb3ab8eeb1141e47bf85dd0c198aafbc3fb9893e0599295297c45f_amd64, * |
| Red Hat | openshift-logging/loki-rhel8-operator@sha256:1e3df16827551bf284967099c8aa1bb461fcc774f0e841e7f033f09870c28202_ppc64le as a component of RHOL 5.7 for RHEL 8 | openshift-logging/loki-rhel8-operator@sha256:1e3df16827551bf284967099c8aa1bb461fcc774f0e841e7f033f09870c28202_ppc64le, *, * |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:bf87a3a3ccfc1bd074d4e8e749be07587841a99c97b72b6f71af78b13bd6f77b_s390x as a component of RHOL 5.7 for RHEL 8 | *, *, openshift-logging/eventrouter-rhel8@sha256:bf87a3a3ccfc1bd074d4e8e749be07587841a99c97b72b6f71af78b13bd6f77b_s390x |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:a2f174857a15ab37bbb5430492603cb1e35707e0798a37f352a6dfc20f291e5e_s390x as a component of RHOL 5.7 for RHEL 8 | openshift-logging/elasticsearch6-rhel8@sha256:a2f174857a15ab37bbb5430492603cb1e35707e0798a37f352a6dfc20f291e5e_s390x, openshift-logging/elasticsearch6-rhel8@sha256:a2f174857a15ab37bbb5430492603cb1e35707e0798a37f352a6dfc20f291e5e_s390x, openshift-logging/elasticsearch6-rhel8@sha256:a2f174857a15ab37bbb5430492603cb1e35707e0798a37f352a6dfc20f291e5e_s390x |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:fd8df632e9cbe5f04026d53fa6cffce94ecb9aa576695a6c07dc33330539ba82_ppc64le as a component of RHOL 5.7 for RHEL 8 | openshift-logging/logging-curator5-rhel8@sha256:fd8df632e9cbe5f04026d53fa6cffce94ecb9aa576695a6c07dc33330539ba82_ppc64le, openshift-logging/logging-curator5-rhel8@sha256:fd8df632e9cbe5f04026d53fa6cffce94ecb9aa576695a6c07dc33330539ba82_ppc64le, openshift-logging/logging-curator5-rhel8@sha256:fd8df632e9cbe5f04026d53fa6cffce94ecb9aa576695a6c07dc33330539ba82_ppc64le |
| Red Hat | openshift-logging/opa-openshift-rhel8@sha256:5fb929029f3b7907dbe1aae13fc82a01fdc1a7ed3cc65376cf059c77e4abdd67_ppc64le as a component of RHOL 5.7 for RHEL 8 | openshift-logging/opa-openshift-rhel8@sha256:5fb929029f3b7907dbe1aae13fc82a01fdc1a7ed3cc65376cf059c77e4abdd67_ppc64le, *, * |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:328a740fee92bd4db54b33851bcdc93d182d1bd5e902e3d0ef95ceb39ac1c422_s390x as a component of RHOL 5.7 for RHEL 8 | openshift-logging/kibana6-rhel8@sha256:328a740fee92bd4db54b33851bcdc93d182d1bd5e902e3d0ef95ceb39ac1c422_s390x, openshift-logging/kibana6-rhel8@sha256:328a740fee92bd4db54b33851bcdc93d182d1bd5e902e3d0ef95ceb39ac1c422_s390x, * |
| Red Hat | openshift-logging/lokistack-gateway-rhel8@sha256:2ca336596ce51aa788fe59f0bd9275f5c8b4aefeb57e7e0cc115a30e6aa2c81b_arm64 as a component of RHOL 5.7 for RHEL 8 | openshift-logging/lokistack-gateway-rhel8@sha256:2ca336596ce51aa788fe59f0bd9275f5c8b4aefeb57e7e0cc115a30e6aa2c81b_arm64, *, openshift-logging/lokistack-gateway-rhel8@sha256:2ca336596ce51aa788fe59f0bd9275f5c8b4aefeb57e7e0cc115a30e6aa2c81b_arm64 |
| Red Hat | openshift-logging/logging-loki-rhel8@sha256:1a287f7a670b0549eb705f6111bc75ddd7b1b42f76e72e4fba5cfe1b507b8f5e_s390x as a component of RHOL 5.7 for RHEL 8 | openshift-logging/logging-loki-rhel8@sha256:1a287f7a670b0549eb705f6111bc75ddd7b1b42f76e72e4fba5cfe1b507b8f5e_s390x, openshift-logging/logging-loki-rhel8@sha256:1a287f7a670b0549eb705f6111bc75ddd7b1b42f76e72e4fba5cfe1b507b8f5e_s390x, * |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:a5209b13fff371044471598deddf0f25153c754a8dbfd9a1569613edda2a9697_amd64 as a component of RHOL 5.7 for RHEL 8 | openshift-logging/elasticsearch-rhel8-operator@sha256:a5209b13fff371044471598deddf0f25153c754a8dbfd9a1569613edda2a9697_amd64, openshift-logging/elasticsearch-rhel8-operator@sha256:a5209b13fff371044471598deddf0f25153c754a8dbfd9a1569613edda2a9697_amd64, openshift-logging/elasticsearch-rhel8-operator@sha256:a5209b13fff371044471598deddf0f25153c754a8dbfd9a1569613edda2a9697_amd64 |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:53e0a0262771abdd94c1e64f635140a61726607266862594e9cf813ba47c7c67_amd64 as a component of RHOL 5.7 for RHEL 8 | *, openshift-logging/log-file-metric-exporter-rhel8@sha256:53e0a0262771abdd94c1e64f635140a61726607266862594e9cf813ba47c7c67_amd64, openshift-logging/log-file-metric-exporter-rhel8@sha256:53e0a0262771abdd94c1e64f635140a61726607266862594e9cf813ba47c7c67_amd64 |
…and 106 more
Timeline
- Feb 7, 2024 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 13, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:0694 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2253330 issue
- https://issues.redhat.com/browse/LOG-4968 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0694.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39326 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39326 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39326 advisory
- https://pkg.go.dev/vuln/GO-2023-2382 advisory