VDB
RHSA-2024%3A0695
RHSA-2024%3A0695
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body (up to 1GiB), causing the receiver to fail reading the response, possibly leading to a Denial of Service (DoS).
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/lokistack-gateway-rhel8@sha256:5afbdb16d60c422e59948bf581e1ead31f5ae7b7edc67f328b8ca8739d8ba9f9_s390x as a component of RHOL 5.6 for RHEL 8 | openshift-logging/lokistack-gateway-rhel8@sha256:5afbdb16d60c422e59948bf581e1ead31f5ae7b7edc67f328b8ca8739d8ba9f9_s390x, openshift-logging/lokistack-gateway-rhel8@sha256:5afbdb16d60c422e59948bf581e1ead31f5ae7b7edc67f328b8ca8739d8ba9f9_s390x, openshift-logging/lokistack-gateway-rhel8@sha256:5afbdb16d60c422e59948bf581e1ead31f5ae7b7edc67f328b8ca8739d8ba9f9_s390x |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:c963696c3d048fc9de3968f6bbec2dc47788a9ec44afa53b62db5c9a0148c140_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/elasticsearch-rhel8-operator@sha256:c963696c3d048fc9de3968f6bbec2dc47788a9ec44afa53b62db5c9a0148c140_arm64, *, openshift-logging/elasticsearch-rhel8-operator@sha256:c963696c3d048fc9de3968f6bbec2dc47788a9ec44afa53b62db5c9a0148c140_arm64 |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:a08a6b780e49a49ccb8c97c147a7415187cf04a7b87063eedb8d457553de602d_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/fluentd-rhel8@sha256:a08a6b780e49a49ccb8c97c147a7415187cf04a7b87063eedb8d457553de602d_ppc64le, openshift-logging/fluentd-rhel8@sha256:a08a6b780e49a49ccb8c97c147a7415187cf04a7b87063eedb8d457553de602d_ppc64le, openshift-logging/fluentd-rhel8@sha256:a08a6b780e49a49ccb8c97c147a7415187cf04a7b87063eedb8d457553de602d_ppc64le |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:cf29687e43d4779e549f7d8d499307b3ba21ccf4cc946155de13b0a177f64d5b_amd64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/logging-curator5-rhel8@sha256:cf29687e43d4779e549f7d8d499307b3ba21ccf4cc946155de13b0a177f64d5b_amd64, *, openshift-logging/logging-curator5-rhel8@sha256:cf29687e43d4779e549f7d8d499307b3ba21ccf4cc946155de13b0a177f64d5b_amd64 |
| Red Hat | openshift-logging/opa-openshift-rhel8@sha256:128cb8bf00dfa1c2df0b3112543b84f90c88e3f0306566d5176a4310cd59eaf4_ppc64le as a component of RHOL 5.6 for RHEL 8 | *, openshift-logging/opa-openshift-rhel8@sha256:128cb8bf00dfa1c2df0b3112543b84f90c88e3f0306566d5176a4310cd59eaf4_ppc64le, openshift-logging/opa-openshift-rhel8@sha256:128cb8bf00dfa1c2df0b3112543b84f90c88e3f0306566d5176a4310cd59eaf4_ppc64le |
| Red Hat | openshift-logging/loki-rhel8-operator@sha256:f408d923479b86c5af2139f0354441f912865a5dd140b17f8c9eebf9c2067ebe_amd64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/loki-rhel8-operator@sha256:f408d923479b86c5af2139f0354441f912865a5dd140b17f8c9eebf9c2067ebe_amd64, openshift-logging/loki-rhel8-operator@sha256:f408d923479b86c5af2139f0354441f912865a5dd140b17f8c9eebf9c2067ebe_amd64, * |
| Red Hat | openshift-logging/lokistack-gateway-rhel8@sha256:4fbce7be41454b92475ad7f796060280b557d1c3d9779c4f1eb40ac7c3834e30_amd64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/lokistack-gateway-rhel8@sha256:4fbce7be41454b92475ad7f796060280b557d1c3d9779c4f1eb40ac7c3834e30_amd64, *, openshift-logging/lokistack-gateway-rhel8@sha256:4fbce7be41454b92475ad7f796060280b557d1c3d9779c4f1eb40ac7c3834e30_amd64 |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:542ed6049ce4f6bc7bfe5587d16dccd2f7f1bd7ea049eccc1f8dcb8fb0d8c445_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/eventrouter-rhel8@sha256:542ed6049ce4f6bc7bfe5587d16dccd2f7f1bd7ea049eccc1f8dcb8fb0d8c445_ppc64le, openshift-logging/eventrouter-rhel8@sha256:542ed6049ce4f6bc7bfe5587d16dccd2f7f1bd7ea049eccc1f8dcb8fb0d8c445_ppc64le, openshift-logging/eventrouter-rhel8@sha256:542ed6049ce4f6bc7bfe5587d16dccd2f7f1bd7ea049eccc1f8dcb8fb0d8c445_ppc64le |
| Red Hat | openshift-logging/loki-rhel8-operator@sha256:7ae5c06c24323cd59f14e96f9b473619b831146db67e74855b2527ae81f787ea_s390x as a component of RHOL 5.6 for RHEL 8 | openshift-logging/loki-rhel8-operator@sha256:7ae5c06c24323cd59f14e96f9b473619b831146db67e74855b2527ae81f787ea_s390x, *, * |
| Red Hat | openshift-logging/opa-openshift-rhel8@sha256:985c83b235ee6527463c2619ef8e8bedbbb63c68070f242a32e5211a820c8614_amd64 as a component of RHOL 5.6 for RHEL 8 | *, *, openshift-logging/opa-openshift-rhel8@sha256:985c83b235ee6527463c2619ef8e8bedbbb63c68070f242a32e5211a820c8614_amd64 |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:a08a6b780e49a49ccb8c97c147a7415187cf04a7b87063eedb8d457553de602d_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/fluentd-rhel8@sha256:a08a6b780e49a49ccb8c97c147a7415187cf04a7b87063eedb8d457553de602d_ppc64le, openshift-logging/fluentd-rhel8@sha256:a08a6b780e49a49ccb8c97c147a7415187cf04a7b87063eedb8d457553de602d_ppc64le, * |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:9150f86ff9ff36b88ee8ee89fbc65d985dc7d078fc8b19d190e929e23aa58f45_s390x as a component of RHOL 5.6 for RHEL 8 | *, openshift-logging/kibana6-rhel8@sha256:9150f86ff9ff36b88ee8ee89fbc65d985dc7d078fc8b19d190e929e23aa58f45_s390x, openshift-logging/kibana6-rhel8@sha256:9150f86ff9ff36b88ee8ee89fbc65d985dc7d078fc8b19d190e929e23aa58f45_s390x |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:b229c04cf6b9ac2967aa78f949e36df6c23c8f01d9cda03f467539944c216559_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/elasticsearch-rhel8-operator@sha256:b229c04cf6b9ac2967aa78f949e36df6c23c8f01d9cda03f467539944c216559_ppc64le, openshift-logging/elasticsearch-rhel8-operator@sha256:b229c04cf6b9ac2967aa78f949e36df6c23c8f01d9cda03f467539944c216559_ppc64le, openshift-logging/elasticsearch-rhel8-operator@sha256:b229c04cf6b9ac2967aa78f949e36df6c23c8f01d9cda03f467539944c216559_ppc64le |
| Red Hat | openshift-logging/loki-rhel8-operator@sha256:2c244c57593c6def235b4d56537008c3dc40bdcf69a8ce737169b3ded70b2a87_arm64 as a component of RHOL 5.6 for RHEL 8 | *, openshift-logging/loki-rhel8-operator@sha256:2c244c57593c6def235b4d56537008c3dc40bdcf69a8ce737169b3ded70b2a87_arm64, openshift-logging/loki-rhel8-operator@sha256:2c244c57593c6def235b4d56537008c3dc40bdcf69a8ce737169b3ded70b2a87_arm64 |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:b703a0a0912b7956dbe02da4b6f31ee372b20f94244ed7b8b8ce260dc3833567_s390x as a component of RHOL 5.6 for RHEL 8 | openshift-logging/elasticsearch6-rhel8@sha256:b703a0a0912b7956dbe02da4b6f31ee372b20f94244ed7b8b8ce260dc3833567_s390x, openshift-logging/elasticsearch6-rhel8@sha256:b703a0a0912b7956dbe02da4b6f31ee372b20f94244ed7b8b8ce260dc3833567_s390x, openshift-logging/elasticsearch6-rhel8@sha256:b703a0a0912b7956dbe02da4b6f31ee372b20f94244ed7b8b8ce260dc3833567_s390x |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:0116421b2debc8d42d59e755fdaf0fa7954fbceec5572681b0d7a7ed040a95a7_amd64 as a component of RHOL 5.6 for RHEL 8 | *, openshift-logging/elasticsearch6-rhel8@sha256:0116421b2debc8d42d59e755fdaf0fa7954fbceec5572681b0d7a7ed040a95a7_amd64, * |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:caf95d55e705ffcefa3387822ef0ca0c102e0c4b8c5ac7e7527559822f25a1c8_s390x as a component of RHOL 5.6 for RHEL 8 | *, *, openshift-logging/elasticsearch-rhel8-operator@sha256:caf95d55e705ffcefa3387822ef0ca0c102e0c4b8c5ac7e7527559822f25a1c8_s390x |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:0870ada19aa90a4d4aa485193d6cb3823fac688488d970acabe489d4b40ad9de_arm64 as a component of RHOL 5.6 for RHEL 8 | *, *, openshift-logging/elasticsearch-proxy-rhel8@sha256:0870ada19aa90a4d4aa485193d6cb3823fac688488d970acabe489d4b40ad9de_arm64 |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:b229c04cf6b9ac2967aa78f949e36df6c23c8f01d9cda03f467539944c216559_ppc64le as a component of RHOL 5.6 for RHEL 8 | *, openshift-logging/elasticsearch-rhel8-operator@sha256:b229c04cf6b9ac2967aa78f949e36df6c23c8f01d9cda03f467539944c216559_ppc64le, openshift-logging/elasticsearch-rhel8-operator@sha256:b229c04cf6b9ac2967aa78f949e36df6c23c8f01d9cda03f467539944c216559_ppc64le |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:09d162d94c6ea7d95924b0cdc38c93f227084171259bfda676828ea66ac50fbd_s390x as a component of RHOL 5.6 for RHEL 8 | *, *, openshift-logging/cluster-logging-rhel8-operator@sha256:09d162d94c6ea7d95924b0cdc38c93f227084171259bfda676828ea66ac50fbd_s390x |
…and 106 more
Timeline
- Feb 7, 2024 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 13, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:0695 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2253330 issue
- https://issues.redhat.com/browse/LOG-4967 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0695.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39326 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39326 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39326 advisory
- https://pkg.go.dev/vuln/GO-2023-2382 advisory