VDB

RHSA-2024%3A10389

RHSA-2024%3A10389 PUBLISHED CVSS 5.900000095367432 MEDIUM

A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service.

Risk Scores

CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatcontainer-native-virtualization/hostpath-csi-driver-rhel9@sha256:00778f97dd392715a4f2734bce8edffcbddd720abbf67b4ea1918a0d57ccf175_amd64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/hostpath-csi-driver-rhel9@sha256:00778f97dd392715a4f2734bce8edffcbddd720abbf67b4ea1918a0d57ccf175_amd64
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-cleanup-vm-rhel9@sha256:4764fe20161fb001ecee9e5271d41d290e075e7c5c3e726f839b3c579145c88f_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm-rhel9@sha256:4764fe20161fb001ecee9e5271d41d290e075e7c5c3e726f839b3c579145c88f_arm64
Red Hatcontainer-native-virtualization/bridge-marker-rhel9@sha256:ddeb7e909587a7137aa9be647dcb8f0ba308d319c0a0c07afdd6688977af96cc_amd64 as a component of CNV 4.13 for RHEL 9*
Red Hatcontainer-native-virtualization/libguestfs-tools-rhel9@sha256:630d20c800a8f8caf114b55708ee69162a90e2bb54bffed35e8bb4455023b50e_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/libguestfs-tools-rhel9@sha256:630d20c800a8f8caf114b55708ee69162a90e2bb54bffed35e8bb4455023b50e_arm64
Red Hatcontainer-native-virtualization/cnv-must-gather-rhel9@sha256:464f3d1be563e741019695a27cbc991b3f3652f00978529806c61789ed916c21_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/cnv-must-gather-rhel9@sha256:464f3d1be563e741019695a27cbc991b3f3652f00978529806c61789ed916c21_arm64
Red Hatcontainer-native-virtualization/cnv-must-gather-rhel9@sha256:e2ade0fa11d6993069c4bd13bd287c015d909f8f0c56154499fb6d4bcc4bb970_amd64 as a component of CNV 4.13 for RHEL 9*
Red Hatcontainer-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:8811abce9181f5ea2e5d41e9566ba8d36b17f245737cb88ad159c9ba3e015ef7_amd64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/cnv-containernetworking-plugins-rhel9@sha256:8811abce9181f5ea2e5d41e9566ba8d36b17f245737cb88ad159c9ba3e015ef7_amd64
Red Hatcontainer-native-virtualization/virtio-win-rhel9@sha256:256b2f1074dabd7a3a6b166c5a418cf6aeab6c2c77e8fd01b193479f5c47cc38_arm64 as a component of CNV 4.13 for RHEL 9*
Red Hatcontainer-native-virtualization/vm-network-latency-checkup-rhel9@sha256:e5b21966959e0602dd1ecd569e992b28fb2abeee1964df41aba898b1106fc2b9_amd64 as a component of CNV 4.13 for RHEL 9*
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template-rhel9@sha256:d95b2bd55fef1c4c9ffc0fd41b7fb29e6f4058c26fd8a3f17d7807f5f757bfd1_amd64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template-rhel9@sha256:d95b2bd55fef1c4c9ffc0fd41b7fb29e6f4058c26fd8a3f17d7807f5f757bfd1_amd64
Red Hatcontainer-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:eb029cf93cd13133204e907af31261613a4f8717f9a2159f8ddabc8d8074a55f_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/virt-cdi-uploadserver-rhel9@sha256:eb029cf93cd13133204e907af31261613a4f8717f9a2159f8ddabc8d8074a55f_arm64
Red Hatcontainer-native-virtualization/kubemacpool-rhel9@sha256:20cc00ba6dbcdf8006212ebde3aab7b6b218cd64978a6adcab941f1d759c3fb8_arm64 as a component of CNV 4.13 for RHEL 9*
Red Hatcontainer-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:3f953e25f07470a22d4b60ef8c35b7abdf40271a94a8d205fade59547861141c_amd64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:3f953e25f07470a22d4b60ef8c35b7abdf40271a94a8d205fade59547861141c_amd64
Red Hatcontainer-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status-rhel9@sha256:ffbc6e5543cdd760ee4fe9aeb209ca8759204edc5284475f58b4a27e5fa923da_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status-rhel9@sha256:ffbc6e5543cdd760ee4fe9aeb209ca8759204edc5284475f58b4a27e5fa923da_arm64
Red Hatcontainer-native-virtualization/virt-exportproxy-rhel9@sha256:08d63e6e3c9165990397bada26792b62eb0b2095154095c1fe6095d5ae5dcac6_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/virt-exportproxy-rhel9@sha256:08d63e6e3c9165990397bada26792b62eb0b2095154095c1fe6095d5ae5dcac6_arm64
Red Hatcontainer-native-virtualization/multus-dynamic-networks-rhel9@sha256:f59208fbc7c03681ec527e98c6e0c1befc6502fe9f153a119186554e8cafaf24_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/multus-dynamic-networks-rhel9@sha256:f59208fbc7c03681ec527e98c6e0c1befc6502fe9f153a119186554e8cafaf24_arm64
Red Hatcontainer-native-virtualization/virt-launcher-rhel9@sha256:68147bc26c5d6be76ebae52b35a350de170243677d1348e9e3ed2711e3f67eb0_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/virt-launcher-rhel9@sha256:68147bc26c5d6be76ebae52b35a350de170243677d1348e9e3ed2711e3f67eb0_arm64
Red Hatcontainer-native-virtualization/virt-exportproxy-rhel9@sha256:b3cea0b9189f3506f08793bab4737812a776397d3912c53e57e17641a8914e4f_amd64 as a component of CNV 4.13 for RHEL 9*
Red Hatcontainer-native-virtualization/vm-console-proxy-rhel9@sha256:243f2cbb078aad1ad91f6522f2adac585d12a9881f200d58614b6550265fbf08_amd64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/vm-console-proxy-rhel9@sha256:243f2cbb078aad1ad91f6522f2adac585d12a9881f200d58614b6550265fbf08_amd64
Red Hatcontainer-native-virtualization/hostpath-provisioner-rhel9@sha256:aa7379960f05371917c83d4ee45226556369980268bdb855b1f22cb5203d121e_arm64 as a component of CNV 4.13 for RHEL 9container-native-virtualization/hostpath-provisioner-rhel9@sha256:aa7379960f05371917c83d4ee45226556369980268bdb855b1f22cb5203d121e_arm64

…and 72 more

Timeline

  • Nov 26, 2024 CVE Published
  • Apr 30, 2026 CVE Updated
  • Apr 30, 2026 Distribution Patch
  • Apr 30, 2026 Distribution Patch
  • Apr 30, 2026 Security Advisory
  • Apr 30, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›