VDB
RHSA-2024%3A1434
RHSA-2024%3A1434
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body (up to 1GiB), causing the receiver to fail reading the response, possibly leading to a Denial of Service (DoS).
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhosdt/jaeger-es-index-cleaner-rhel8@sha256:30a71079fd7f4351ec0fa7243bd5ea1296df76500fb87b26a2d6bc2efe08588c_ppc64le as a component of Red Hat OpenShift distributed tracing 3.1 | rhosdt/jaeger-es-index-cleaner-rhel8@sha256:30a71079fd7f4351ec0fa7243bd5ea1296df76500fb87b26a2d6bc2efe08588c_ppc64le, rhosdt/jaeger-es-index-cleaner-rhel8@sha256:30a71079fd7f4351ec0fa7243bd5ea1296df76500fb87b26a2d6bc2efe08588c_ppc64le, rhosdt/jaeger-es-index-cleaner-rhel8@sha256:30a71079fd7f4351ec0fa7243bd5ea1296df76500fb87b26a2d6bc2efe08588c_ppc64le |
| Red Hat | rhosdt/opentelemetry-operator-bundle@sha256:a0fefcdad179cb5555feacfbc226354969258925c9b9259d13fd6959a77a4884_amd64 as a component of Red Hat OpenShift distributed tracing 3.1 | *, rhosdt/opentelemetry-operator-bundle@sha256:a0fefcdad179cb5555feacfbc226354969258925c9b9259d13fd6959a77a4884_amd64, rhosdt/opentelemetry-operator-bundle@sha256:a0fefcdad179cb5555feacfbc226354969258925c9b9259d13fd6959a77a4884_amd64 |
| Red Hat | rhosdt/jaeger-agent-rhel8@sha256:f8dd7e99597745e893e34d830241c8b469471b66d53e43e47de70daa8d382631_arm64 as a component of Red Hat OpenShift distributed tracing 3.1 | *, *, * |
| Red Hat | rhosdt/opentelemetry-collector-rhel8@sha256:b6ed8eb39212d4d36c3f75e4b0f58147a2746b3b7726e1bb0cec30389bbec353_s390x as a component of Red Hat OpenShift distributed tracing 3.1 | *, rhosdt/opentelemetry-collector-rhel8@sha256:b6ed8eb39212d4d36c3f75e4b0f58147a2746b3b7726e1bb0cec30389bbec353_s390x, rhosdt/opentelemetry-collector-rhel8@sha256:b6ed8eb39212d4d36c3f75e4b0f58147a2746b3b7726e1bb0cec30389bbec353_s390x |
| Red Hat | rhosdt/tempo-query-rhel8@sha256:c6b61921d30dd28e57ee13fb4b3a432e3183e0b1e4ba9bf9351bf68e6940ce24_arm64 as a component of Red Hat OpenShift distributed tracing 3.1 | *, *, rhosdt/tempo-query-rhel8@sha256:c6b61921d30dd28e57ee13fb4b3a432e3183e0b1e4ba9bf9351bf68e6940ce24_arm64 |
| Red Hat | rhosdt/jaeger-operator-bundle@sha256:e6fafe248ec479d6746df51920e67ea79f7f52173650af4e828b74188528c527_arm64 as a component of Red Hat OpenShift distributed tracing 3.1 | rhosdt/jaeger-operator-bundle@sha256:e6fafe248ec479d6746df51920e67ea79f7f52173650af4e828b74188528c527_arm64, rhosdt/jaeger-operator-bundle@sha256:e6fafe248ec479d6746df51920e67ea79f7f52173650af4e828b74188528c527_arm64, rhosdt/jaeger-operator-bundle@sha256:e6fafe248ec479d6746df51920e67ea79f7f52173650af4e828b74188528c527_arm64 |
| Red Hat | rhosdt/tempo-operator-bundle@sha256:c6c6a80101bb29b78299f2678d15822cf8d8eec300ca55c27549f1dbb1c83d9f_amd64 as a component of Red Hat OpenShift distributed tracing 3.1 | rhosdt/tempo-operator-bundle@sha256:c6c6a80101bb29b78299f2678d15822cf8d8eec300ca55c27549f1dbb1c83d9f_amd64, rhosdt/tempo-operator-bundle@sha256:c6c6a80101bb29b78299f2678d15822cf8d8eec300ca55c27549f1dbb1c83d9f_amd64, * |
| Red Hat | rhosdt/tempo-rhel8@sha256:96c9d68e9241543115fafdba1aba4d422438db47076dd6246fc1037fe4b43189_ppc64le as a component of Red Hat OpenShift distributed tracing 3.1 | *, rhosdt/tempo-rhel8@sha256:96c9d68e9241543115fafdba1aba4d422438db47076dd6246fc1037fe4b43189_ppc64le, rhosdt/tempo-rhel8@sha256:96c9d68e9241543115fafdba1aba4d422438db47076dd6246fc1037fe4b43189_ppc64le |
| Red Hat | rhosdt/jaeger-all-in-one-rhel8@sha256:3be0995542a08f2d27407eeb2c63fbb28da756b35301e4773927b14dd39c650f_amd64 as a component of Red Hat OpenShift distributed tracing 3.1 | rhosdt/jaeger-all-in-one-rhel8@sha256:3be0995542a08f2d27407eeb2c63fbb28da756b35301e4773927b14dd39c650f_amd64, *, rhosdt/jaeger-all-in-one-rhel8@sha256:3be0995542a08f2d27407eeb2c63fbb28da756b35301e4773927b14dd39c650f_amd64 |
| Red Hat | rhosdt/tempo-gateway-rhel8@sha256:ee5b5a6fccf539decbecc3842e792a3e6b13447b8cd99ffb80fa96fa50d9f0fb_arm64 as a component of Red Hat OpenShift distributed tracing 3.1 | rhosdt/tempo-gateway-rhel8@sha256:ee5b5a6fccf539decbecc3842e792a3e6b13447b8cd99ffb80fa96fa50d9f0fb_arm64, rhosdt/tempo-gateway-rhel8@sha256:ee5b5a6fccf539decbecc3842e792a3e6b13447b8cd99ffb80fa96fa50d9f0fb_arm64, rhosdt/tempo-gateway-rhel8@sha256:ee5b5a6fccf539decbecc3842e792a3e6b13447b8cd99ffb80fa96fa50d9f0fb_arm64 |
| Red Hat | rhosdt/jaeger-es-rollover-rhel8@sha256:4aa09887b1fc79b1700f77c8f2401920d04c717e22e1226daa1ec9e1b3d805d2_s390x as a component of Red Hat OpenShift distributed tracing 3.1 | rhosdt/jaeger-es-rollover-rhel8@sha256:4aa09887b1fc79b1700f77c8f2401920d04c717e22e1226daa1ec9e1b3d805d2_s390x, rhosdt/jaeger-es-rollover-rhel8@sha256:4aa09887b1fc79b1700f77c8f2401920d04c717e22e1226daa1ec9e1b3d805d2_s390x, rhosdt/jaeger-es-rollover-rhel8@sha256:4aa09887b1fc79b1700f77c8f2401920d04c717e22e1226daa1ec9e1b3d805d2_s390x |
| Red Hat | rhosdt/tempo-operator-bundle@sha256:36ecd8fb56821bfaec71a731eb49919b082d1dadd3b3dbeebd744919e60c7bab_s390x as a component of Red Hat OpenShift distributed tracing 3.1 | rhosdt/tempo-operator-bundle@sha256:36ecd8fb56821bfaec71a731eb49919b082d1dadd3b3dbeebd744919e60c7bab_s390x, *, * |
| Red Hat | rhosdt/opentelemetry-rhel8-operator@sha256:6f87bce25fc2a58f58202837db08031d9f8efe580205de0f4ec7f805ce366859_amd64 as a component of Red Hat OpenShift distributed tracing 3.1 | rhosdt/opentelemetry-rhel8-operator@sha256:6f87bce25fc2a58f58202837db08031d9f8efe580205de0f4ec7f805ce366859_amd64, rhosdt/opentelemetry-rhel8-operator@sha256:6f87bce25fc2a58f58202837db08031d9f8efe580205de0f4ec7f805ce366859_amd64, rhosdt/opentelemetry-rhel8-operator@sha256:6f87bce25fc2a58f58202837db08031d9f8efe580205de0f4ec7f805ce366859_amd64 |
| Red Hat | rhosdt/jaeger-es-rollover-rhel8@sha256:b3ba030b0eb51c955ffcbc2917efa4d6187c20ff33c3ff156329d4c72ebb9a00_ppc64le as a component of Red Hat OpenShift distributed tracing 3.1 | rhosdt/jaeger-es-rollover-rhel8@sha256:b3ba030b0eb51c955ffcbc2917efa4d6187c20ff33c3ff156329d4c72ebb9a00_ppc64le, rhosdt/jaeger-es-rollover-rhel8@sha256:b3ba030b0eb51c955ffcbc2917efa4d6187c20ff33c3ff156329d4c72ebb9a00_ppc64le, * |
| Red Hat | rhosdt/tempo-rhel8-operator@sha256:86d2d5c92adb0ba5a437a2fbf90c10fb40d2a4beff2e0045f4d46f2bdcc27286_ppc64le as a component of Red Hat OpenShift distributed tracing 3.1 | rhosdt/tempo-rhel8-operator@sha256:86d2d5c92adb0ba5a437a2fbf90c10fb40d2a4beff2e0045f4d46f2bdcc27286_ppc64le, *, * |
| Red Hat | rhosdt/jaeger-ingester-rhel8@sha256:90c812ddc5faa0fa1e343b74488da5edf312fc6501f0f404413e1c1dfa1a631d_arm64 as a component of Red Hat OpenShift distributed tracing 3.1 | rhosdt/jaeger-ingester-rhel8@sha256:90c812ddc5faa0fa1e343b74488da5edf312fc6501f0f404413e1c1dfa1a631d_arm64, rhosdt/jaeger-ingester-rhel8@sha256:90c812ddc5faa0fa1e343b74488da5edf312fc6501f0f404413e1c1dfa1a631d_arm64, rhosdt/jaeger-ingester-rhel8@sha256:90c812ddc5faa0fa1e343b74488da5edf312fc6501f0f404413e1c1dfa1a631d_arm64 |
| Red Hat | rhosdt/tempo-gateway-rhel8@sha256:979a886ff8f21da3ae09a097d990aa664141f70132cde334bc40c7a37652be97_ppc64le as a component of Red Hat OpenShift distributed tracing 3.1 | rhosdt/tempo-gateway-rhel8@sha256:979a886ff8f21da3ae09a097d990aa664141f70132cde334bc40c7a37652be97_ppc64le, *, rhosdt/tempo-gateway-rhel8@sha256:979a886ff8f21da3ae09a097d990aa664141f70132cde334bc40c7a37652be97_ppc64le |
| Red Hat | rhosdt/tempo-operator-bundle@sha256:c6c6a80101bb29b78299f2678d15822cf8d8eec300ca55c27549f1dbb1c83d9f_amd64 as a component of Red Hat OpenShift distributed tracing 3.1 | *, rhosdt/tempo-operator-bundle@sha256:c6c6a80101bb29b78299f2678d15822cf8d8eec300ca55c27549f1dbb1c83d9f_amd64, rhosdt/tempo-operator-bundle@sha256:c6c6a80101bb29b78299f2678d15822cf8d8eec300ca55c27549f1dbb1c83d9f_amd64 |
| Red Hat | rhosdt/tempo-gateway-rhel8@sha256:e7d08322b474231fca77d6527cf292b02d3a60621a6d65c0a3f6ed68c12131ae_amd64 as a component of Red Hat OpenShift distributed tracing 3.1 | rhosdt/tempo-gateway-rhel8@sha256:e7d08322b474231fca77d6527cf292b02d3a60621a6d65c0a3f6ed68c12131ae_amd64, *, rhosdt/tempo-gateway-rhel8@sha256:e7d08322b474231fca77d6527cf292b02d3a60621a6d65c0a3f6ed68c12131ae_amd64 |
| Red Hat | rhosdt/tempo-query-rhel8@sha256:4457af5a51bc11ed7c3f8469e103f16903a135d8c8125f81f22379ada37fabfb_ppc64le as a component of Red Hat OpenShift distributed tracing 3.1 | *, rhosdt/tempo-query-rhel8@sha256:4457af5a51bc11ed7c3f8469e103f16903a135d8c8125f81f22379ada37fabfb_ppc64le, * |
…and 132 more
Timeline
- Mar 20, 2024 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 13, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:1434 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2253330 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1434.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39326 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39326 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39326 advisory
- https://pkg.go.dev/vuln/GO-2023-2382 advisory