VDB
RHSA-2024%3A0728
RHSA-2024%3A0728
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body (up to 1GiB), causing the receiver to fail reading the response, possibly leading to a Denial of Service (DoS).
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/fluentd-rhel9@sha256:4e3e28c9c1ebb9912ac05d44c09917d6a23e82696b835bb81cb3c874d4d94bd0_amd64 as a component of RHOL 5.8 for RHEL 9 | openshift-logging/fluentd-rhel9@sha256:4e3e28c9c1ebb9912ac05d44c09917d6a23e82696b835bb81cb3c874d4d94bd0_amd64, *, openshift-logging/fluentd-rhel9@sha256:4e3e28c9c1ebb9912ac05d44c09917d6a23e82696b835bb81cb3c874d4d94bd0_amd64 |
| Red Hat | openshift-logging/elasticsearch6-rhel9@sha256:2a8c691d5337c0a47ddcc88597106675457b9fb79667d4865d5b82b2eb2a46ea_arm64 as a component of RHOL 5.8 for RHEL 9 | *, openshift-logging/elasticsearch6-rhel9@sha256:2a8c691d5337c0a47ddcc88597106675457b9fb79667d4865d5b82b2eb2a46ea_arm64, openshift-logging/elasticsearch6-rhel9@sha256:2a8c691d5337c0a47ddcc88597106675457b9fb79667d4865d5b82b2eb2a46ea_arm64 |
| Red Hat | openshift-logging/elasticsearch-operator-bundle@sha256:61589304df4c201923648ec7669a1e56fcfa115f6de0026cafb68038e266249e_amd64 as a component of RHOL 5.8 for RHEL 9 | *, *, openshift-logging/elasticsearch-operator-bundle@sha256:61589304df4c201923648ec7669a1e56fcfa115f6de0026cafb68038e266249e_amd64 |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel9@sha256:60c1ef42055b5aac996223e93e45d6322f96ba561e50ddadd456f6e22c060f26_ppc64le as a component of RHOL 5.8 for RHEL 9 | openshift-logging/elasticsearch-proxy-rhel9@sha256:60c1ef42055b5aac996223e93e45d6322f96ba561e50ddadd456f6e22c060f26_ppc64le, *, * |
| Red Hat | openshift-logging/logging-loki-rhel9@sha256:3f18d7b09b9402f46406619e55423daf3c8d6bee68c6f016b8cc56a958a339c9_arm64 as a component of RHOL 5.8 for RHEL 9 | *, openshift-logging/logging-loki-rhel9@sha256:3f18d7b09b9402f46406619e55423daf3c8d6bee68c6f016b8cc56a958a339c9_arm64, openshift-logging/logging-loki-rhel9@sha256:3f18d7b09b9402f46406619e55423daf3c8d6bee68c6f016b8cc56a958a339c9_arm64 |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel9@sha256:7f81d334b3d4da0f5e08d7952d5caca5e30239b4d0bc9f9e6b8a6809b089f396_arm64 as a component of RHOL 5.8 for RHEL 9 | openshift-logging/log-file-metric-exporter-rhel9@sha256:7f81d334b3d4da0f5e08d7952d5caca5e30239b4d0bc9f9e6b8a6809b089f396_arm64, *, openshift-logging/log-file-metric-exporter-rhel9@sha256:7f81d334b3d4da0f5e08d7952d5caca5e30239b4d0bc9f9e6b8a6809b089f396_arm64 |
| Red Hat | openshift-logging/eventrouter-rhel9@sha256:18120633d00e546502cbd9063de1b2e391ee1b80c0f774cd960acf5f72563f38_amd64 as a component of RHOL 5.8 for RHEL 9 | openshift-logging/eventrouter-rhel9@sha256:18120633d00e546502cbd9063de1b2e391ee1b80c0f774cd960acf5f72563f38_amd64, *, openshift-logging/eventrouter-rhel9@sha256:18120633d00e546502cbd9063de1b2e391ee1b80c0f774cd960acf5f72563f38_amd64 |
| Red Hat | openshift-logging/opa-openshift-rhel9@sha256:761341aceff8bc29d4aecf62de7892399e83f105e664cfbd121aac8349d3e799_amd64 as a component of RHOL 5.8 for RHEL 9 | openshift-logging/opa-openshift-rhel9@sha256:761341aceff8bc29d4aecf62de7892399e83f105e664cfbd121aac8349d3e799_amd64, openshift-logging/opa-openshift-rhel9@sha256:761341aceff8bc29d4aecf62de7892399e83f105e664cfbd121aac8349d3e799_amd64, openshift-logging/opa-openshift-rhel9@sha256:761341aceff8bc29d4aecf62de7892399e83f105e664cfbd121aac8349d3e799_amd64 |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel9@sha256:cff2fbc124ffb82f97007ed11cb2ed579cdab269ae657988edd08b09ae151f4b_arm64 as a component of RHOL 5.8 for RHEL 9 | openshift-logging/elasticsearch-proxy-rhel9@sha256:cff2fbc124ffb82f97007ed11cb2ed579cdab269ae657988edd08b09ae151f4b_arm64, openshift-logging/elasticsearch-proxy-rhel9@sha256:cff2fbc124ffb82f97007ed11cb2ed579cdab269ae657988edd08b09ae151f4b_arm64, * |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel9@sha256:b9667e7e4bfb467ac628e042aec1606c153a2675ae0023db7c5a97494b0e978b_s390x as a component of RHOL 5.8 for RHEL 9 | *, openshift-logging/elasticsearch-proxy-rhel9@sha256:b9667e7e4bfb467ac628e042aec1606c153a2675ae0023db7c5a97494b0e978b_s390x, openshift-logging/elasticsearch-proxy-rhel9@sha256:b9667e7e4bfb467ac628e042aec1606c153a2675ae0023db7c5a97494b0e978b_s390x |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel9@sha256:60c1ef42055b5aac996223e93e45d6322f96ba561e50ddadd456f6e22c060f26_ppc64le as a component of RHOL 5.8 for RHEL 9 | openshift-logging/elasticsearch-proxy-rhel9@sha256:60c1ef42055b5aac996223e93e45d6322f96ba561e50ddadd456f6e22c060f26_ppc64le, openshift-logging/elasticsearch-proxy-rhel9@sha256:60c1ef42055b5aac996223e93e45d6322f96ba561e50ddadd456f6e22c060f26_ppc64le, openshift-logging/elasticsearch-proxy-rhel9@sha256:60c1ef42055b5aac996223e93e45d6322f96ba561e50ddadd456f6e22c060f26_ppc64le |
| Red Hat | openshift-logging/loki-rhel9-operator@sha256:0a5c61a3dcf70fa290673a0474dad0d888365493b4d94457502d13d837971dc6_ppc64le as a component of RHOL 5.8 for RHEL 9 | openshift-logging/loki-rhel9-operator@sha256:0a5c61a3dcf70fa290673a0474dad0d888365493b4d94457502d13d837971dc6_ppc64le, openshift-logging/loki-rhel9-operator@sha256:0a5c61a3dcf70fa290673a0474dad0d888365493b4d94457502d13d837971dc6_ppc64le, * |
| Red Hat | openshift-logging/eventrouter-rhel9@sha256:995de53a8c1d6bdcb61b3281475503a2fa8fbad31ee9f991a4fb06d643ca7ae2_arm64 as a component of RHOL 5.8 for RHEL 9 | *, openshift-logging/eventrouter-rhel9@sha256:995de53a8c1d6bdcb61b3281475503a2fa8fbad31ee9f991a4fb06d643ca7ae2_arm64, * |
| Red Hat | openshift-logging/eventrouter-rhel9@sha256:995de53a8c1d6bdcb61b3281475503a2fa8fbad31ee9f991a4fb06d643ca7ae2_arm64 as a component of RHOL 5.8 for RHEL 9 | openshift-logging/eventrouter-rhel9@sha256:995de53a8c1d6bdcb61b3281475503a2fa8fbad31ee9f991a4fb06d643ca7ae2_arm64, *, openshift-logging/eventrouter-rhel9@sha256:995de53a8c1d6bdcb61b3281475503a2fa8fbad31ee9f991a4fb06d643ca7ae2_arm64 |
| Red Hat | openshift-logging/logging-curator5-rhel9@sha256:245772226a6f0797403b45842fa5614e2d20027a89ee62f8ac4d246f3b1233f4_amd64 as a component of RHOL 5.8 for RHEL 9 | openshift-logging/logging-curator5-rhel9@sha256:245772226a6f0797403b45842fa5614e2d20027a89ee62f8ac4d246f3b1233f4_amd64, openshift-logging/logging-curator5-rhel9@sha256:245772226a6f0797403b45842fa5614e2d20027a89ee62f8ac4d246f3b1233f4_amd64, openshift-logging/logging-curator5-rhel9@sha256:245772226a6f0797403b45842fa5614e2d20027a89ee62f8ac4d246f3b1233f4_amd64 |
| Red Hat | openshift-logging/logging-view-plugin-rhel9@sha256:4f07e6114a90af7bf8eef3ec402d91a5909e6c9c661ef199838937845c5bc9ad_s390x as a component of RHOL 5.8 for RHEL 9 | openshift-logging/logging-view-plugin-rhel9@sha256:4f07e6114a90af7bf8eef3ec402d91a5909e6c9c661ef199838937845c5bc9ad_s390x, *, openshift-logging/logging-view-plugin-rhel9@sha256:4f07e6114a90af7bf8eef3ec402d91a5909e6c9c661ef199838937845c5bc9ad_s390x |
| Red Hat | openshift-logging/eventrouter-rhel9@sha256:18120633d00e546502cbd9063de1b2e391ee1b80c0f774cd960acf5f72563f38_amd64 as a component of RHOL 5.8 for RHEL 9 | openshift-logging/eventrouter-rhel9@sha256:18120633d00e546502cbd9063de1b2e391ee1b80c0f774cd960acf5f72563f38_amd64, *, openshift-logging/eventrouter-rhel9@sha256:18120633d00e546502cbd9063de1b2e391ee1b80c0f774cd960acf5f72563f38_amd64 |
| Red Hat | openshift-logging/fluentd-rhel9@sha256:5ee0c39a1f5163e941fd6d94260cfa1b6c71d98777612240663749b629249c53_ppc64le as a component of RHOL 5.8 for RHEL 9 | openshift-logging/fluentd-rhel9@sha256:5ee0c39a1f5163e941fd6d94260cfa1b6c71d98777612240663749b629249c53_ppc64le, openshift-logging/fluentd-rhel9@sha256:5ee0c39a1f5163e941fd6d94260cfa1b6c71d98777612240663749b629249c53_ppc64le, * |
| Red Hat | openshift-logging/vector-rhel9@sha256:de0071bd6853dd747150060aad8cca2cbe5129ececbca6dedfd163a07f947ab6_amd64 as a component of RHOL 5.8 for RHEL 9 | openshift-logging/vector-rhel9@sha256:de0071bd6853dd747150060aad8cca2cbe5129ececbca6dedfd163a07f947ab6_amd64, openshift-logging/vector-rhel9@sha256:de0071bd6853dd747150060aad8cca2cbe5129ececbca6dedfd163a07f947ab6_amd64, openshift-logging/vector-rhel9@sha256:de0071bd6853dd747150060aad8cca2cbe5129ececbca6dedfd163a07f947ab6_amd64 |
| Red Hat | openshift-logging/lokistack-gateway-rhel9@sha256:669c108da2aca1af2d3a718ed69eb44d5e14951315e093a0f5063c97655647d1_amd64 as a component of RHOL 5.8 for RHEL 9 | openshift-logging/lokistack-gateway-rhel9@sha256:669c108da2aca1af2d3a718ed69eb44d5e14951315e093a0f5063c97655647d1_amd64, openshift-logging/lokistack-gateway-rhel9@sha256:669c108da2aca1af2d3a718ed69eb44d5e14951315e093a0f5063c97655647d1_amd64, openshift-logging/lokistack-gateway-rhel9@sha256:669c108da2aca1af2d3a718ed69eb44d5e14951315e093a0f5063c97655647d1_amd64 |
…and 98 more
Timeline
- Feb 8, 2024 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 13, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:0728 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2253330 issue
- https://issues.redhat.com/browse/LOG-4822 advisory
- https://issues.redhat.com/browse/LOG-4893 advisory
- https://issues.redhat.com/browse/LOG-4962 advisory
- https://issues.redhat.com/browse/LOG-4963 advisory
- https://issues.redhat.com/browse/LOG-4969 advisory
- https://issues.redhat.com/browse/OU-319 advisory
- https://issues.redhat.com/browse/OU-320 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0728.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39326 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39326 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39326 advisory
- https://pkg.go.dev/vuln/GO-2023-2382 advisory