VDB
RHSA-2024%3A1078
RHSA-2024%3A1078
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body (up to 1GiB), causing the receiver to fail reading the response, possibly leading to a Denial of Service (DoS).
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | stf/service-telemetry-operator-bundle@sha256:6107bb292836037afbbf42795c1a1a9839585b3cc50dfcf1d93cd08d1d7a05ae_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8 | *, *, stf/service-telemetry-operator-bundle@sha256:6107bb292836037afbbf42795c1a1a9839585b3cc50dfcf1d93cd08d1d7a05ae_amd64 |
| Red Hat | stf/sg-bridge-rhel8@sha256:c30aac797b0be81c06209479a86cf2ba4cf8f9f1a8a8639c769643d89498bdbe_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8 | stf/sg-bridge-rhel8@sha256:c30aac797b0be81c06209479a86cf2ba4cf8f9f1a8a8639c769643d89498bdbe_amd64, stf/sg-bridge-rhel8@sha256:c30aac797b0be81c06209479a86cf2ba4cf8f9f1a8a8639c769643d89498bdbe_amd64, * |
| Red Hat | stf/service-telemetry-rhel8-operator@sha256:87d16370c6d55b84f01d2c6f9f808ce29c7419d60c41f00c7e73d95486d9f8db_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8 | *, *, * |
| Red Hat | stf/smart-gateway-rhel8-operator@sha256:cfc9bfd58d7e3e9288ca4dcf333293608b6e24a749ab8c8db208f1914cf9def2_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8 | stf/smart-gateway-rhel8-operator@sha256:cfc9bfd58d7e3e9288ca4dcf333293608b6e24a749ab8c8db208f1914cf9def2_amd64, *, stf/smart-gateway-rhel8-operator@sha256:cfc9bfd58d7e3e9288ca4dcf333293608b6e24a749ab8c8db208f1914cf9def2_amd64 |
| Red Hat | stf/smart-gateway-operator-bundle@sha256:941def64af37960930d9647886d16c62b14017103bcdfb52a0db26c0f3854370_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8 | stf/smart-gateway-operator-bundle@sha256:941def64af37960930d9647886d16c62b14017103bcdfb52a0db26c0f3854370_amd64, stf/smart-gateway-operator-bundle@sha256:941def64af37960930d9647886d16c62b14017103bcdfb52a0db26c0f3854370_amd64, stf/smart-gateway-operator-bundle@sha256:941def64af37960930d9647886d16c62b14017103bcdfb52a0db26c0f3854370_amd64 |
| Red Hat | stf/smart-gateway-rhel8-operator@sha256:cfc9bfd58d7e3e9288ca4dcf333293608b6e24a749ab8c8db208f1914cf9def2_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8 | stf/smart-gateway-rhel8-operator@sha256:cfc9bfd58d7e3e9288ca4dcf333293608b6e24a749ab8c8db208f1914cf9def2_amd64, *, * |
| Red Hat | stf/smart-gateway-operator-bundle@sha256:941def64af37960930d9647886d16c62b14017103bcdfb52a0db26c0f3854370_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8 | stf/smart-gateway-operator-bundle@sha256:941def64af37960930d9647886d16c62b14017103bcdfb52a0db26c0f3854370_amd64, *, * |
| Red Hat | stf/sg-core-rhel8@sha256:e575fdd48f036708dca0f59de789284009ec95ee50cbef77d3cd7290bba53f27_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8 | stf/sg-core-rhel8@sha256:e575fdd48f036708dca0f59de789284009ec95ee50cbef77d3cd7290bba53f27_amd64, *, * |
| Red Hat | stf/sg-core-rhel8@sha256:e575fdd48f036708dca0f59de789284009ec95ee50cbef77d3cd7290bba53f27_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8 | stf/sg-core-rhel8@sha256:e575fdd48f036708dca0f59de789284009ec95ee50cbef77d3cd7290bba53f27_amd64, stf/sg-core-rhel8@sha256:e575fdd48f036708dca0f59de789284009ec95ee50cbef77d3cd7290bba53f27_amd64, * |
| Red Hat | stf/prometheus-webhook-snmp-rhel8@sha256:e535f6029e1762aaf26dca188a055b69bbb4693eac921c5a701d542f91371652_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8 | stf/prometheus-webhook-snmp-rhel8@sha256:e535f6029e1762aaf26dca188a055b69bbb4693eac921c5a701d542f91371652_amd64, *, stf/prometheus-webhook-snmp-rhel8@sha256:e535f6029e1762aaf26dca188a055b69bbb4693eac921c5a701d542f91371652_amd64 |
| Red Hat | stf/service-telemetry-rhel8-operator@sha256:87d16370c6d55b84f01d2c6f9f808ce29c7419d60c41f00c7e73d95486d9f8db_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8 | stf/service-telemetry-rhel8-operator@sha256:87d16370c6d55b84f01d2c6f9f808ce29c7419d60c41f00c7e73d95486d9f8db_amd64, stf/service-telemetry-rhel8-operator@sha256:87d16370c6d55b84f01d2c6f9f808ce29c7419d60c41f00c7e73d95486d9f8db_amd64, stf/service-telemetry-rhel8-operator@sha256:87d16370c6d55b84f01d2c6f9f808ce29c7419d60c41f00c7e73d95486d9f8db_amd64 |
| Red Hat | stf/sg-bridge-rhel8@sha256:c30aac797b0be81c06209479a86cf2ba4cf8f9f1a8a8639c769643d89498bdbe_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8 | *, *, * |
| Red Hat | stf/service-telemetry-operator-bundle@sha256:6107bb292836037afbbf42795c1a1a9839585b3cc50dfcf1d93cd08d1d7a05ae_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8 | stf/service-telemetry-operator-bundle@sha256:6107bb292836037afbbf42795c1a1a9839585b3cc50dfcf1d93cd08d1d7a05ae_amd64, stf/service-telemetry-operator-bundle@sha256:6107bb292836037afbbf42795c1a1a9839585b3cc50dfcf1d93cd08d1d7a05ae_amd64, * |
| Red Hat | stf/prometheus-webhook-snmp-rhel8@sha256:e535f6029e1762aaf26dca188a055b69bbb4693eac921c5a701d542f91371652_amd64 as a component of Service Telemetry Framework 1.5 for RHEL 8 | stf/prometheus-webhook-snmp-rhel8@sha256:e535f6029e1762aaf26dca188a055b69bbb4693eac921c5a701d542f91371652_amd64, stf/prometheus-webhook-snmp-rhel8@sha256:e535f6029e1762aaf26dca188a055b69bbb4693eac921c5a701d542f91371652_amd64, stf/prometheus-webhook-snmp-rhel8@sha256:e535f6029e1762aaf26dca188a055b69bbb4693eac921c5a701d542f91371652_amd64 |
Timeline
- Mar 5, 2024 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 13, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:1078 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2253193 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2253330 issue
- https://issues.redhat.com/browse/OSPRH-2140 advisory
- https://issues.redhat.com/browse/OSPRH-2577 advisory
- https://issues.redhat.com/browse/OSPRH-3492 advisory
- https://issues.redhat.com/browse/OSPRH-800 advisory
- https://issues.redhat.com/browse/OSPRH-825 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1078.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39326 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39326 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39326 advisory
- https://pkg.go.dev/vuln/GO-2023-2382 advisory
- https://access.redhat.com/security/cve/CVE-2023-45287 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-45287 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-45287 advisory
- https://pkg.go.dev/vuln/GO-2023-2375 advisory