VDB

RHSA-2024%3A1078

RHSA-2024%3A1078 PUBLISHED CVSS 5.300000190734863 MEDIUM

Record from redhat · Published March 5, 2024

A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body (up to 1GiB), causing the receiver to fail reading the response, possibly leading to a Denial of Service (DoS).

Risk scores

CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

VendorProductVersions
Red Hatstf/service-telemetry-operator-bundle@sha256:6107bb292836037afbbf42795c1a1a9839585b3cc50dfcf1d93cd08d1d7a05ae_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8stf/service-telemetry-operator-bundle@sha256:6107bb292836037afbbf42795c1a1a9839585b3cc50dfcf1d93cd08d1d7a05ae_amd64, *
Red Hatstf/sg-bridge-rhel8@sha256:c30aac797b0be81c06209479a86cf2ba4cf8f9f1a8a8639c769643d89498bdbe_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8stf/sg-bridge-rhel8@sha256:c30aac797b0be81c06209479a86cf2ba4cf8f9f1a8a8639c769643d89498bdbe_amd64, *
Red Hatstf/service-telemetry-rhel8-operator@sha256:87d16370c6d55b84f01d2c6f9f808ce29c7419d60c41f00c7e73d95486d9f8db_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8*
Red Hatstf/smart-gateway-rhel8-operator@sha256:cfc9bfd58d7e3e9288ca4dcf333293608b6e24a749ab8c8db208f1914cf9def2_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8*, stf/smart-gateway-rhel8-operator@sha256:cfc9bfd58d7e3e9288ca4dcf333293608b6e24a749ab8c8db208f1914cf9def2_amd64
Red Hatstf/smart-gateway-operator-bundle@sha256:941def64af37960930d9647886d16c62b14017103bcdfb52a0db26c0f3854370_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8stf/smart-gateway-operator-bundle@sha256:941def64af37960930d9647886d16c62b14017103bcdfb52a0db26c0f3854370_amd64
Red Hatstf/smart-gateway-rhel8-operator@sha256:cfc9bfd58d7e3e9288ca4dcf333293608b6e24a749ab8c8db208f1914cf9def2_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8*, stf/smart-gateway-rhel8-operator@sha256:cfc9bfd58d7e3e9288ca4dcf333293608b6e24a749ab8c8db208f1914cf9def2_amd64
Red Hatstf/smart-gateway-operator-bundle@sha256:941def64af37960930d9647886d16c62b14017103bcdfb52a0db26c0f3854370_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8*, stf/smart-gateway-operator-bundle@sha256:941def64af37960930d9647886d16c62b14017103bcdfb52a0db26c0f3854370_amd64
Red Hatstf/sg-core-rhel8@sha256:e575fdd48f036708dca0f59de789284009ec95ee50cbef77d3cd7290bba53f27_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8*, stf/sg-core-rhel8@sha256:e575fdd48f036708dca0f59de789284009ec95ee50cbef77d3cd7290bba53f27_amd64
Red Hatstf/sg-core-rhel8@sha256:e575fdd48f036708dca0f59de789284009ec95ee50cbef77d3cd7290bba53f27_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8*, stf/sg-core-rhel8@sha256:e575fdd48f036708dca0f59de789284009ec95ee50cbef77d3cd7290bba53f27_amd64
Red Hatstf/prometheus-webhook-snmp-rhel8@sha256:e535f6029e1762aaf26dca188a055b69bbb4693eac921c5a701d542f91371652_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8stf/prometheus-webhook-snmp-rhel8@sha256:e535f6029e1762aaf26dca188a055b69bbb4693eac921c5a701d542f91371652_amd64, *
Red Hatstf/service-telemetry-rhel8-operator@sha256:87d16370c6d55b84f01d2c6f9f808ce29c7419d60c41f00c7e73d95486d9f8db_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8stf/service-telemetry-rhel8-operator@sha256:87d16370c6d55b84f01d2c6f9f808ce29c7419d60c41f00c7e73d95486d9f8db_amd64
Red Hatstf/sg-bridge-rhel8@sha256:c30aac797b0be81c06209479a86cf2ba4cf8f9f1a8a8639c769643d89498bdbe_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8*
Red Hatstf/service-telemetry-operator-bundle@sha256:6107bb292836037afbbf42795c1a1a9839585b3cc50dfcf1d93cd08d1d7a05ae_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8*, stf/service-telemetry-operator-bundle@sha256:6107bb292836037afbbf42795c1a1a9839585b3cc50dfcf1d93cd08d1d7a05ae_amd64
Red Hatstf/prometheus-webhook-snmp-rhel8@sha256:e535f6029e1762aaf26dca188a055b69bbb4693eac921c5a701d542f91371652_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8stf/prometheus-webhook-snmp-rhel8@sha256:e535f6029e1762aaf26dca188a055b69bbb4693eac921c5a701d542f91371652_amd64

Timeline

  • Mar 5, 2024 CVE Published
  • Apr 29, 2026 Distribution Patch (2 in total, the first dated here)
  • Apr 29, 2026 Security Advisory (3 in total, the first dated here)
  • May 13, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RHSA-2024%3A1078
vulnetix vdb fixes RHSA-2024%3A1078

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RHSA-2024%253A1078/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›