VDB
RHSA-2024%3A0845
RHSA-2024%3A0845
PUBLISHED
CVSS 7.5 HIGH
A denial of service (DoS) vulnerability was found in the go library go-git. This issue may allow an attacker to perform denial of service attacks by providing specially crafted responses from a Git server, which can trigger resource exhaustion in go-git clients.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cluster-kube-apiserver-operator@sha256:d82b1d045c934935f73d7684c3ca9fab3be87b34779dd0b74e5ec25439d927e1_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-kube-apiserver-operator@sha256:d82b1d045c934935f73d7684c3ca9fab3be87b34779dd0b74e5ec25439d927e1_arm64 |
| Red Hat | openshift4/ose-machine-os-images-rhel8@sha256:b0c510772dd4c444524f947fe5ee5b49b51120d6d0baad92e6e5799e8adee0e6_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:d1269e6107de7e364f5fdce0671938f7bced971efdae371bad1c906c6457888c_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:d1269e6107de7e364f5fdce0671938f7bced971efdae371bad1c906c6457888c_s390x |
| Red Hat | openshift4/ose-insights-rhel8-operator@sha256:6cc372bd2e2138f2b5d88c6612b37c076e0d40acade0cbf87ded7fb5e1906031_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-insights-rhel8-operator@sha256:6cc372bd2e2138f2b5d88c6612b37c076e0d40acade0cbf87ded7fb5e1906031_amd64 |
| Red Hat | openshift4/ose-csi-driver-manila-rhel8@sha256:041e87a315a0eb9334392e7dc0472ad12a8b67163717508350db9a25c5262cd3_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-csi-driver-manila-rhel8@sha256:041e87a315a0eb9334392e7dc0472ad12a8b67163717508350db9a25c5262cd3_ppc64le |
| Red Hat | openshift4/network-tools-rhel8@sha256:2a2beb122de1a39fddd1330280f5b64c77c7b58db2b248c5fb4f14ae928c3c03_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/network-tools-rhel8@sha256:2a2beb122de1a39fddd1330280f5b64c77c7b58db2b248c5fb4f14ae928c3c03_amd64 |
| Red Hat | openshift4/ose-csi-external-provisioner-rhel8@sha256:ba0a48d2ceeeabb48ddf85b62ef0b0a2eb659f0f6f0f69e8d3eea891777aa5a1_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-csi-external-provisioner-rhel8@sha256:ba0a48d2ceeeabb48ddf85b62ef0b0a2eb659f0f6f0f69e8d3eea891777aa5a1_amd64 |
| Red Hat | openshift4/ose-csi-external-provisioner@sha256:e90534ec41d1989c0e491bc001cbb2ad4a1cf6403c9482d5e8c7188434fa84ed_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | openshift4/ose-openshift-apiserver-rhel8@sha256:80b92ce3133e5030d398cc9edf609f8301a87287674e3d0402f3fd340c17f8de_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-openshift-apiserver-rhel8@sha256:80b92ce3133e5030d398cc9edf609f8301a87287674e3d0402f3fd340c17f8de_s390x |
| Red Hat | openshift4/ose-ovn-kubernetes@sha256:7a27c2eda11979e81011f1c721fdad34ce02fae53045db244b381c1a2ea836f2_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ovn-kubernetes@sha256:7a27c2eda11979e81011f1c721fdad34ce02fae53045db244b381c1a2ea836f2_amd64 |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:12b69efeefdf74419a88dc241f05e71e1988249911f53bafa146afd337790ca8_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ovn-kubernetes-rhel9@sha256:12b69efeefdf74419a88dc241f05e71e1988249911f53bafa146afd337790ca8_s390x |
| Red Hat | openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:8bdbb66508b0de84608dc8b030806c7b7e1f2de014bae8d08f9504db77071277_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:8bdbb66508b0de84608dc8b030806c7b7e1f2de014bae8d08f9504db77071277_s390x |
| Red Hat | openshift4/ose-cluster-kube-scheduler-operator@sha256:61f1e5989441a68ad704f9a837dd82455956841187cc111e76c1fe38fe8f6471_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-kube-scheduler-operator@sha256:61f1e5989441a68ad704f9a837dd82455956841187cc111e76c1fe38fe8f6471_amd64 |
| Red Hat | openshift4/ose-cluster-storage-operator@sha256:3b9953b08eadef96bc4d152be96cbd462a72fbc50aa5c95b4ae231f4d49ffd3b_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-storage-operator@sha256:3b9953b08eadef96bc4d152be96cbd462a72fbc50aa5c95b4ae231f4d49ffd3b_arm64 |
| Red Hat | openshift4/ose-haproxy-router@sha256:a5622a2b5aee8c1ac8c25b53955c49cdf85ee7c8c0bdf56f1fca8979c5b05fe9_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-haproxy-router@sha256:a5622a2b5aee8c1ac8c25b53955c49cdf85ee7c8c0bdf56f1fca8979c5b05fe9_amd64 |
| Red Hat | openshift4/egress-router-cni-rhel8@sha256:43f3937b9ec236f2e4dd71237420fdc79e8e569290ca356eba34c8fb8a85076b_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/egress-router-cni-rhel8@sha256:43f3937b9ec236f2e4dd71237420fdc79e8e569290ca356eba34c8fb8a85076b_amd64 |
| Red Hat | openshift4/ose-operator-lifecycle-manager@sha256:c7ac29012c98cb624b351f95df0d2c5fa1fe076a758d0f68499e62c77c178f85_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-operator-lifecycle-manager@sha256:c7ac29012c98cb624b351f95df0d2c5fa1fe076a758d0f68499e62c77c178f85_arm64 |
| Red Hat | openshift4/ose-cluster-platform-operators-manager-rhel8@sha256:acdb8fc1d703b77a3297202909fd646a886fd5f98d95d919f237065f1aef36fd_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-platform-operators-manager-rhel8@sha256:acdb8fc1d703b77a3297202909fd646a886fd5f98d95d919f237065f1aef36fd_s390x |
| Red Hat | openshift4/ose-multus-networkpolicy-rhel8@sha256:fcb9517589d2db8240ba759cdee760db1389dd5e993932abf9a7de5aeb520109_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-multus-networkpolicy-rhel8@sha256:fcb9517589d2db8240ba759cdee760db1389dd5e993932abf9a7de5aeb520109_amd64 |
| Red Hat | openshift4/ose-cluster-bootstrap@sha256:299a80934d32f7071278bcddf203e1093f97b18674b4008bda41fc717f1ac801_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-bootstrap@sha256:299a80934d32f7071278bcddf203e1093f97b18674b4008bda41fc717f1ac801_amd64 |
…and 576 more
Timeline
- Feb 21, 2024 CVE Published
- Apr 24, 2026 CVE Updated
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:0845 advisory
- https://access.redhat.com/security/updates/classification/#critical advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2258143 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2258165 issue
- https://issues.redhat.com/browse/OCPBUGS-28740 advisory
- https://issues.redhat.com/browse/OCPBUGS-28899 advisory
- https://issues.redhat.com/browse/OCPBUGS-29190 advisory
- https://issues.redhat.com/browse/OCPBUGS-29243 advisory
- https://issues.redhat.com/browse/OCPBUGS-29301 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0845.json advisory
- https://access.redhat.com/security/cve/CVE-2023-49568 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-49568 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-49568 advisory
- https://github.com/go-git/go-git/security/advisories/GHSA-mw99-9chc-xw7r advisory
- https://access.redhat.com/security/cve/CVE-2023-49569 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-49569 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-49569 advisory
- https://github.com/go-git/go-git/security/advisories/GHSA-449p-3h89-pw88 advisory