VDB
RHSA-2024%3A11293
RHSA-2024%3A11293
PUBLISHED
CVSS 7.5 HIGH
A memory exhaustion flaw was found in the otelgrpc handler of open-telemetry. This flaw may allow a remote unauthenticated attacker to flood the peer address and port and exhaust the server's memory by sending multiple malicious requests, affecting the availability of the system.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | multicluster-engine/cluster-api-provider-agent-rhel9@sha256:aeda1a7bffc724f8fb6ecd79846f9a422f1ac128cfb7cccd4535fbc3f8920046_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | *, multicluster-engine/cluster-api-provider-agent-rhel9@sha256:aeda1a7bffc724f8fb6ecd79846f9a422f1ac128cfb7cccd4535fbc3f8920046_s390x |
| Red Hat | multicluster-engine/hypershift-cli-rhel9@sha256:cc5c0e72812a8612b77cacdfaca69f54e16e15eb8e3da62f660792ca61d737b8_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | multicluster-engine/hypershift-cli-rhel9@sha256:cc5c0e72812a8612b77cacdfaca69f54e16e15eb8e3da62f660792ca61d737b8_amd64, * |
| Red Hat | multicluster-engine/provider-credential-controller-rhel9@sha256:6557f1b3561b0d93bbf7dc35d97218f8049631e484ab033fc9cd890d37e0cb5e_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | multicluster-engine/provider-credential-controller-rhel9@sha256:6557f1b3561b0d93bbf7dc35d97218f8049631e484ab033fc9cd890d37e0cb5e_arm64, multicluster-engine/provider-credential-controller-rhel9@sha256:6557f1b3561b0d93bbf7dc35d97218f8049631e484ab033fc9cd890d37e0cb5e_arm64 |
| Red Hat | multicluster-engine/console-mce-rhel9@sha256:6a6ea7a5ade6b9f18e8ce907cca2dd1f2812678165e74a31d2c0673cb120ee5a_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | *, multicluster-engine/console-mce-rhel9@sha256:6a6ea7a5ade6b9f18e8ce907cca2dd1f2812678165e74a31d2c0673cb120ee5a_amd64 |
| Red Hat | multicluster-engine/managedcluster-import-controller-rhel9@sha256:352a44b46149e01e2c20de81f7f4e2dbcd20b63e6f9a408470a4cf72a5e485bc_arm64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | *, * |
| Red Hat | multicluster-engine/must-gather-rhel9@sha256:64cf920e0e70c7189f4ef8a85025d6fb25cdb00afd9b5947748ee297d3562990_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | multicluster-engine/must-gather-rhel9@sha256:64cf920e0e70c7189f4ef8a85025d6fb25cdb00afd9b5947748ee297d3562990_s390x, multicluster-engine/must-gather-rhel9@sha256:64cf920e0e70c7189f4ef8a85025d6fb25cdb00afd9b5947748ee297d3562990_s390x |
| Red Hat | multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c8d0c84e8d887c997004ae6cc1e91fffe014bfe31ac80a26369ae0e0de631a06_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c8d0c84e8d887c997004ae6cc1e91fffe014bfe31ac80a26369ae0e0de631a06_amd64, multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c8d0c84e8d887c997004ae6cc1e91fffe014bfe31ac80a26369ae0e0de631a06_amd64 |
| Red Hat | multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0c5a9e01f417de4d515b3147a8b82dc38ca9d3667e777b2732d3d251d87ba19c_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0c5a9e01f417de4d515b3147a8b82dc38ca9d3667e777b2732d3d251d87ba19c_ppc64le, multicluster-engine/cluster-api-provider-agent-rhel9@sha256:0c5a9e01f417de4d515b3147a8b82dc38ca9d3667e777b2732d3d251d87ba19c_ppc64le |
| Red Hat | multicluster-engine/must-gather-rhel9@sha256:eb0e9bfcf1809dd93fecae791d4f46d1eeb3480fed2a04be16a8071ad37ac38d_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | *, multicluster-engine/must-gather-rhel9@sha256:eb0e9bfcf1809dd93fecae791d4f46d1eeb3480fed2a04be16a8071ad37ac38d_amd64 |
| Red Hat | multicluster-engine/discovery-rhel9@sha256:550c278fb61c94e757ceaf4a994c79d857517e6120e16f1c15203d8e00f85566_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | *, multicluster-engine/discovery-rhel9@sha256:550c278fb61c94e757ceaf4a994c79d857517e6120e16f1c15203d8e00f85566_amd64 |
| Red Hat | multicluster-engine/assisted-installer-controller-rhel8@sha256:c2b1515200945e18121898deba89b997839b38e9efc06a80c77835b8a935f10c_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 8 | multicluster-engine/assisted-installer-controller-rhel8@sha256:c2b1515200945e18121898deba89b997839b38e9efc06a80c77835b8a935f10c_amd64, multicluster-engine/assisted-installer-controller-rhel8@sha256:c2b1515200945e18121898deba89b997839b38e9efc06a80c77835b8a935f10c_amd64 |
| Red Hat | multicluster-engine/hypershift-addon-rhel9-operator@sha256:87a096485adc47b05aaf1e30f2406278d070b084576dbd1c81fdaa3975336672_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | multicluster-engine/hypershift-addon-rhel9-operator@sha256:87a096485adc47b05aaf1e30f2406278d070b084576dbd1c81fdaa3975336672_s390x, multicluster-engine/hypershift-addon-rhel9-operator@sha256:87a096485adc47b05aaf1e30f2406278d070b084576dbd1c81fdaa3975336672_s390x |
| Red Hat | multicluster-engine/assisted-installer-rhel8@sha256:7f27cf0d4e19bdcbbe454cb2960345db79487ac12fab0f5f2730398ad2162cdd_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 8 | multicluster-engine/assisted-installer-rhel8@sha256:7f27cf0d4e19bdcbbe454cb2960345db79487ac12fab0f5f2730398ad2162cdd_ppc64le, * |
| Red Hat | multicluster-engine/console-mce-rhel9@sha256:6a6ea7a5ade6b9f18e8ce907cca2dd1f2812678165e74a31d2c0673cb120ee5a_amd64 as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | multicluster-engine/console-mce-rhel9@sha256:6a6ea7a5ade6b9f18e8ce907cca2dd1f2812678165e74a31d2c0673cb120ee5a_amd64, multicluster-engine/console-mce-rhel9@sha256:6a6ea7a5ade6b9f18e8ce907cca2dd1f2812678165e74a31d2c0673cb120ee5a_amd64 |
| Red Hat | multicluster-engine/managed-serviceaccount-rhel9@sha256:a0e984dff0f6a2d6c60d6fd921be56651f993a6e8712897b156df5a3cd514ff0_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | *, multicluster-engine/managed-serviceaccount-rhel9@sha256:a0e984dff0f6a2d6c60d6fd921be56651f993a6e8712897b156df5a3cd514ff0_ppc64le |
| Red Hat | multicluster-engine/cluster-api-rhel9@sha256:79ca6790ee5f6e702a135aa0cd468a78d2bbb09f8e2bfa72c3985b05bb9eb0d3_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | multicluster-engine/cluster-api-rhel9@sha256:79ca6790ee5f6e702a135aa0cd468a78d2bbb09f8e2bfa72c3985b05bb9eb0d3_ppc64le, multicluster-engine/cluster-api-rhel9@sha256:79ca6790ee5f6e702a135aa0cd468a78d2bbb09f8e2bfa72c3985b05bb9eb0d3_ppc64le |
| Red Hat | multicluster-engine/assisted-service-9-rhel9@sha256:5e9ddf2ea27a7ba6294a0953d18d49f3e255c454a620d203ce9afd989e3d2ce1_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | *, multicluster-engine/assisted-service-9-rhel9@sha256:5e9ddf2ea27a7ba6294a0953d18d49f3e255c454a620d203ce9afd989e3d2ce1_s390x |
| Red Hat | multicluster-engine/hypershift-addon-rhel9-operator@sha256:293a959c6ad939e1d9135036cdb06ff53889307b1d34d7eddce478254d385014_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | multicluster-engine/hypershift-addon-rhel9-operator@sha256:293a959c6ad939e1d9135036cdb06ff53889307b1d34d7eddce478254d385014_ppc64le, multicluster-engine/hypershift-addon-rhel9-operator@sha256:293a959c6ad939e1d9135036cdb06ff53889307b1d34d7eddce478254d385014_ppc64le |
| Red Hat | multicluster-engine/mce-operator-bundle@sha256:284029d5e4738f9f68b00cac6203e2b41650c871c4a270eaadf6eea64bdde40e_ppc64le as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | multicluster-engine/mce-operator-bundle@sha256:284029d5e4738f9f68b00cac6203e2b41650c871c4a270eaadf6eea64bdde40e_ppc64le, multicluster-engine/mce-operator-bundle@sha256:284029d5e4738f9f68b00cac6203e2b41650c871c4a270eaadf6eea64bdde40e_ppc64le |
| Red Hat | multicluster-engine/discovery-rhel9@sha256:acf33d1183b88e5a624e39a603033bbd902913d98fc709b624c860e58f461eed_s390x as a component of multicluster engine for Kubernetes 2.6 for RHEL 9 | multicluster-engine/discovery-rhel9@sha256:acf33d1183b88e5a624e39a603033bbd902913d98fc709b624c860e58f461eed_s390x, multicluster-engine/discovery-rhel9@sha256:acf33d1183b88e5a624e39a603033bbd902913d98fc709b624c860e58f461eed_s390x |
…and 258 more
Timeline
- Dec 17, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 4, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:11293 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://issues.redhat.com/browse/ACM-14853 advisory
- https://issues.redhat.com/browse/ACM-15058 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_11293.json advisory
- https://access.redhat.com/security/cve/CVE-2023-47108 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2251198 issue
- https://www.cve.org/CVERecord?id=CVE-2023-47108 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-47108 advisory
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-8pgv-569h-w5rw advisory
- https://access.redhat.com/security/cve/CVE-2024-45296 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2310908 issue
- https://www.cve.org/CVERecord?id=CVE-2024-45296 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45296 advisory
- https://github.com/pillarjs/path-to-regexp/commit/29b96b4a1de52824e1ca0f49a701183cc4ed476f advisory
- https://github.com/pillarjs/path-to-regexp/commit/60f2121e9b66b7b622cc01080df0aabda9eedee6 advisory
- https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598j advisory
- https://access.redhat.com/security/cve/CVE-2024-45813 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2313383 issue
- https://www.cve.org/CVERecord?id=CVE-2024-45813 advisory
…and 4 more