VDB
RHSA-2024%3A0843
RHSA-2024%3A0843
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the logback package. Affected versions of this package are vulnerable to Uncontrolled Resource Consumption ('Resource Exhaustion') via the logback receiver component. This flaw allows an attacker to mount a denial-of-service attack by sending poisoned data.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-serverless-1/knative-rhel8-operator@sha256:b24c65f32f4d2dae35911820e7695c87e2b9f1f90c9245a2976f5830c3d03543_ppc64le as a component of Red Hat OpenShift Serverless 1.31 | *, openshift-serverless-1/knative-rhel8-operator@sha256:b24c65f32f4d2dae35911820e7695c87e2b9f1f90c9245a2976f5830c3d03543_ppc64le, openshift-serverless-1/knative-rhel8-operator@sha256:b24c65f32f4d2dae35911820e7695c87e2b9f1f90c9245a2976f5830c3d03543_ppc64le |
| Red Hat | openshift-serverless-1/eventing-kafka-broker-webhook-rhel8@sha256:c5ffd229f10899555ec5967620b656092037b39542afb5911d2db303c3c715ed_amd64 as a component of Red Hat OpenShift Serverless 1.31 | openshift-serverless-1/eventing-kafka-broker-webhook-rhel8@sha256:c5ffd229f10899555ec5967620b656092037b39542afb5911d2db303c3c715ed_amd64, openshift-serverless-1/eventing-kafka-broker-webhook-rhel8@sha256:c5ffd229f10899555ec5967620b656092037b39542afb5911d2db303c3c715ed_amd64, openshift-serverless-1/eventing-kafka-broker-webhook-rhel8@sha256:c5ffd229f10899555ec5967620b656092037b39542afb5911d2db303c3c715ed_amd64 |
| Red Hat | openshift-serverless-1/eventing-controller-rhel8@sha256:659ad27b6570fc8c5666f9fa5ad2a3c47e683c68417a3bd487190af707788844_ppc64le as a component of Red Hat OpenShift Serverless 1.31 | openshift-serverless-1/eventing-controller-rhel8@sha256:659ad27b6570fc8c5666f9fa5ad2a3c47e683c68417a3bd487190af707788844_ppc64le, *, openshift-serverless-1/eventing-controller-rhel8@sha256:659ad27b6570fc8c5666f9fa5ad2a3c47e683c68417a3bd487190af707788844_ppc64le |
| Red Hat | openshift-serverless-1/func-utils-rhel8@sha256:4b3189a80899e295c7caea837eef5d1f8d9f5189fd2791e650ebf36745f19021_ppc64le as a component of Red Hat OpenShift Serverless 1.31 | openshift-serverless-1/func-utils-rhel8@sha256:4b3189a80899e295c7caea837eef5d1f8d9f5189fd2791e650ebf36745f19021_ppc64le, *, openshift-serverless-1/func-utils-rhel8@sha256:4b3189a80899e295c7caea837eef5d1f8d9f5189fd2791e650ebf36745f19021_ppc64le |
| Red Hat | openshift-serverless-1/serving-webhook-rhel8@sha256:3dfe50c5ec8788f94b725a6c56b35896ac78c48f9e36bacd2d658701e5d205c4_ppc64le as a component of Red Hat OpenShift Serverless 1.31 | *, openshift-serverless-1/serving-webhook-rhel8@sha256:3dfe50c5ec8788f94b725a6c56b35896ac78c48f9e36bacd2d658701e5d205c4_ppc64le, * |
| Red Hat | openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:84b4f0618e019312c2d4d0b99b6a51d5b4636a140fa784f909021c99f69863bc_s390x as a component of Red Hat OpenShift Serverless 1.31 | openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:84b4f0618e019312c2d4d0b99b6a51d5b4636a140fa784f909021c99f69863bc_s390x, *, * |
| Red Hat | openshift-serverless-1/serving-autoscaler-rhel8@sha256:1c693aa9e457df1f8408993f556eb9f0923898eeb3884e5f9a072b4048bd1a1f_amd64 as a component of Red Hat OpenShift Serverless 1.31 | openshift-serverless-1/serving-autoscaler-rhel8@sha256:1c693aa9e457df1f8408993f556eb9f0923898eeb3884e5f9a072b4048bd1a1f_amd64, openshift-serverless-1/serving-autoscaler-rhel8@sha256:1c693aa9e457df1f8408993f556eb9f0923898eeb3884e5f9a072b4048bd1a1f_amd64, openshift-serverless-1/serving-autoscaler-rhel8@sha256:1c693aa9e457df1f8408993f556eb9f0923898eeb3884e5f9a072b4048bd1a1f_amd64 |
| Red Hat | openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:3c50e6e72081ccc491b77450d06f38c37263e42dd5c26e88f27813c1b7874643_ppc64le as a component of Red Hat OpenShift Serverless 1.31 | openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:3c50e6e72081ccc491b77450d06f38c37263e42dd5c26e88f27813c1b7874643_ppc64le, *, * |
| Red Hat | openshift-serverless-1/serverless-rhel8-operator@sha256:0cc3730d6bf5c921f22509fec73853cf1bdbe216fb8bf8ce248a87eb2ad54a54_ppc64le as a component of Red Hat OpenShift Serverless 1.31 | *, openshift-serverless-1/serverless-rhel8-operator@sha256:0cc3730d6bf5c921f22509fec73853cf1bdbe216fb8bf8ce248a87eb2ad54a54_ppc64le, openshift-serverless-1/serverless-rhel8-operator@sha256:0cc3730d6bf5c921f22509fec73853cf1bdbe216fb8bf8ce248a87eb2ad54a54_ppc64le |
| Red Hat | openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:b1e19465c334ee323f43162aef6bbd165597633d359661c0904958e2878129bc_s390x as a component of Red Hat OpenShift Serverless 1.31 | *, openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:b1e19465c334ee323f43162aef6bbd165597633d359661c0904958e2878129bc_s390x, openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:b1e19465c334ee323f43162aef6bbd165597633d359661c0904958e2878129bc_s390x |
| Red Hat | openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:a542538f5fd71be92fa3aff8625ebc5f9a68981c48436ad1f83fa19ce92bf63e_amd64 as a component of Red Hat OpenShift Serverless 1.31 | *, openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:a542538f5fd71be92fa3aff8625ebc5f9a68981c48436ad1f83fa19ce92bf63e_amd64, openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:a542538f5fd71be92fa3aff8625ebc5f9a68981c48436ad1f83fa19ce92bf63e_amd64 |
| Red Hat | openshift-serverless-1/serving-queue-rhel8@sha256:78eb24a18313a547a6b7ea1fb201467fd7b294a0bbc855e00035bc7a7517d72d_ppc64le as a component of Red Hat OpenShift Serverless 1.31 | openshift-serverless-1/serving-queue-rhel8@sha256:78eb24a18313a547a6b7ea1fb201467fd7b294a0bbc855e00035bc7a7517d72d_ppc64le, openshift-serverless-1/serving-queue-rhel8@sha256:78eb24a18313a547a6b7ea1fb201467fd7b294a0bbc855e00035bc7a7517d72d_ppc64le, openshift-serverless-1/serving-queue-rhel8@sha256:78eb24a18313a547a6b7ea1fb201467fd7b294a0bbc855e00035bc7a7517d72d_ppc64le |
| Red Hat | openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:a183b1a161f779541d91050febd77b21bbff573187118da8809989fc7cafb119_ppc64le as a component of Red Hat OpenShift Serverless 1.31 | openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:a183b1a161f779541d91050febd77b21bbff573187118da8809989fc7cafb119_ppc64le, *, openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:a183b1a161f779541d91050febd77b21bbff573187118da8809989fc7cafb119_ppc64le |
| Red Hat | openshift-serverless-1/eventing-webhook-rhel8@sha256:3278b3c537ad9e6034f35a4c9beb0fc5e16a40f4714783305c7dff060688e7ab_amd64 as a component of Red Hat OpenShift Serverless 1.31 | openshift-serverless-1/eventing-webhook-rhel8@sha256:3278b3c537ad9e6034f35a4c9beb0fc5e16a40f4714783305c7dff060688e7ab_amd64, openshift-serverless-1/eventing-webhook-rhel8@sha256:3278b3c537ad9e6034f35a4c9beb0fc5e16a40f4714783305c7dff060688e7ab_amd64, * |
| Red Hat | openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:00aedcc18ab1a826639e8de161f34fee1eddb1823004c94a1f100711b743b4f0_amd64 as a component of Red Hat OpenShift Serverless 1.31 | *, *, openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:00aedcc18ab1a826639e8de161f34fee1eddb1823004c94a1f100711b743b4f0_amd64 |
| Red Hat | openshift-serverless-1/eventing-mtping-rhel8@sha256:a9749dd06f6cfa11ec4c7ac406c3ed39530733e40bf69b482b563ca7b57dcbdc_ppc64le as a component of Red Hat OpenShift Serverless 1.31 | openshift-serverless-1/eventing-mtping-rhel8@sha256:a9749dd06f6cfa11ec4c7ac406c3ed39530733e40bf69b482b563ca7b57dcbdc_ppc64le, *, * |
| Red Hat | openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:d6153fa924adca9bbf4a68d6ba8316412a386954c70750daec5fd8f9266d6f66_amd64 as a component of Red Hat OpenShift Serverless 1.31 | *, openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:d6153fa924adca9bbf4a68d6ba8316412a386954c70750daec5fd8f9266d6f66_amd64, openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:d6153fa924adca9bbf4a68d6ba8316412a386954c70750daec5fd8f9266d6f66_amd64 |
| Red Hat | openshift-serverless-1/svls-must-gather-rhel8@sha256:8878c29f676c00feb67f95e345d71c5b571b4b4bf7b021bcfcacbcdfe65a5b6d_amd64 as a component of Red Hat OpenShift Serverless 1.31 | openshift-serverless-1/svls-must-gather-rhel8@sha256:8878c29f676c00feb67f95e345d71c5b571b4b4bf7b021bcfcacbcdfe65a5b6d_amd64, openshift-serverless-1/svls-must-gather-rhel8@sha256:8878c29f676c00feb67f95e345d71c5b571b4b4bf7b021bcfcacbcdfe65a5b6d_amd64, openshift-serverless-1/svls-must-gather-rhel8@sha256:8878c29f676c00feb67f95e345d71c5b571b4b4bf7b021bcfcacbcdfe65a5b6d_amd64 |
| Red Hat | openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:42f051ed5e6e3f0e27ea1a448824d3190e1ab4205a814ff5c1918ca645119e47_ppc64le as a component of Red Hat OpenShift Serverless 1.31 | openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:42f051ed5e6e3f0e27ea1a448824d3190e1ab4205a814ff5c1918ca645119e47_ppc64le, openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:42f051ed5e6e3f0e27ea1a448824d3190e1ab4205a814ff5c1918ca645119e47_ppc64le, openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:42f051ed5e6e3f0e27ea1a448824d3190e1ab4205a814ff5c1918ca645119e47_ppc64le |
| Red Hat | openshift-serverless-1/ingress-rhel8-operator@sha256:f442511f6bf6982f878d98b59ebb9791caa779278d34f8c45b94f3253896f01b_amd64 as a component of Red Hat OpenShift Serverless 1.31 | openshift-serverless-1/ingress-rhel8-operator@sha256:f442511f6bf6982f878d98b59ebb9791caa779278d34f8c45b94f3253896f01b_amd64, openshift-serverless-1/ingress-rhel8-operator@sha256:f442511f6bf6982f878d98b59ebb9791caa779278d34f8c45b94f3253896f01b_amd64, * |
…and 216 more
Timeline
- Feb 15, 2024 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 13, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:0843 advisory
- https://access.redhat.com/security/updates/classification/#critical advisory
- https://access.redhat.com/documentation/en-us/red_hat_openshift_serverless/1.31 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2252956 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2253330 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2254210 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2258143 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2258165 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0843.json advisory
- https://access.redhat.com/security/cve/CVE-2023-6481 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-6481 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-6481 advisory
- https://access.redhat.com/security/cve/CVE-2023-39326 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39326 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39326 advisory
- https://pkg.go.dev/vuln/GO-2023-2382 advisory
- https://access.redhat.com/security/cve/CVE-2023-48795 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-48795 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-48795 advisory
- https://access.redhat.com/solutions/7071748 advisory
…and 9 more