VDB
RHSA-2024%3A1896
RHSA-2024%3A1896
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body (up to 1GiB), causing the receiver to fail reading the response, possibly leading to a Denial of Service (DoS).
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-prometheus-operator@sha256:178bf5f5e533f5d184efea7cb7196a49a05dfb7f65bc21391d4082ccc36f26ba_s390x as a component of Red Hat OpenShift Container Platform 4.12 | *, *, openshift4/ose-prometheus-operator@sha256:178bf5f5e533f5d184efea7cb7196a49a05dfb7f65bc21391d4082ccc36f26ba_s390x |
| Red Hat | openshift4/ose-vmware-vsphere-csi-driver-rhel8@sha256:d8e058fc2bab0c261f36f26e340db261aed4d47b4c3de4a409e47090c15b30f9_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-vmware-vsphere-csi-driver-rhel8@sha256:d8e058fc2bab0c261f36f26e340db261aed4d47b4c3de4a409e47090c15b30f9_amd64, *, * |
| Red Hat | openshift4/ovirt-csi-driver-rhel7@sha256:3d2875d2ba283fe888d61b445bac6ca0c26209e2b978e5d26eb9c6cf93b4c9d2_s390x as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | openshift4/ose-olm-rukpak-rhel8@sha256:0dd443416f878059aa3d04b73778bf2e82ae7714c0e2d602d7a903ad80d764ea_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-olm-rukpak-rhel8@sha256:0dd443416f878059aa3d04b73778bf2e82ae7714c0e2d602d7a903ad80d764ea_arm64, openshift4/ose-olm-rukpak-rhel8@sha256:0dd443416f878059aa3d04b73778bf2e82ae7714c0e2d602d7a903ad80d764ea_arm64, openshift4/ose-olm-rukpak-rhel8@sha256:0dd443416f878059aa3d04b73778bf2e82ae7714c0e2d602d7a903ad80d764ea_arm64 |
| Red Hat | openshift4/ose-cluster-control-plane-machine-set-operator-rhel8@sha256:a11254d767ee9c87bfa5aeace9454d4c1945a9f4f9698b227d49942c3a7d709e_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-cluster-control-plane-machine-set-operator-rhel8@sha256:a11254d767ee9c87bfa5aeace9454d4c1945a9f4f9698b227d49942c3a7d709e_arm64, * |
| Red Hat | openshift4/ose-ovirt-machine-controllers-rhel8@sha256:cd18ad73be1ee639d35b77106667de11e4b70ee21cc7d977ddcec0e0b6b90b37_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, openshift4/ose-ovirt-machine-controllers-rhel8@sha256:cd18ad73be1ee639d35b77106667de11e4b70ee21cc7d977ddcec0e0b6b90b37_arm64 |
| Red Hat | openshift4/ose-insights-rhel8-operator@sha256:e216b53f286467388a7a157dd4a5e0f7527954be2ba0b3dac8862d3e903c3703_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-insights-rhel8-operator@sha256:e216b53f286467388a7a157dd4a5e0f7527954be2ba0b3dac8862d3e903c3703_ppc64le, openshift4/ose-insights-rhel8-operator@sha256:e216b53f286467388a7a157dd4a5e0f7527954be2ba0b3dac8862d3e903c3703_ppc64le |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:6070bb2978c9c620df6988cebbe619bbac2be0dc3e7273eb619da1abbd71a7e9_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cloud-credential-operator@sha256:6070bb2978c9c620df6988cebbe619bbac2be0dc3e7273eb619da1abbd71a7e9_ppc64le, openshift4/ose-cloud-credential-operator@sha256:6070bb2978c9c620df6988cebbe619bbac2be0dc3e7273eb619da1abbd71a7e9_ppc64le, openshift4/ose-cloud-credential-operator@sha256:6070bb2978c9c620df6988cebbe619bbac2be0dc3e7273eb619da1abbd71a7e9_ppc64le |
| Red Hat | openshift4/ose-gcp-cloud-controller-manager-rhel8@sha256:b064ecbf14af439031f8a928812d4c18dfd2a22bd1b42aba3e8474bde4c38270_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-gcp-cloud-controller-manager-rhel8@sha256:b064ecbf14af439031f8a928812d4c18dfd2a22bd1b42aba3e8474bde4c38270_ppc64le, openshift4/ose-gcp-cloud-controller-manager-rhel8@sha256:b064ecbf14af439031f8a928812d4c18dfd2a22bd1b42aba3e8474bde4c38270_ppc64le, openshift4/ose-gcp-cloud-controller-manager-rhel8@sha256:b064ecbf14af439031f8a928812d4c18dfd2a22bd1b42aba3e8474bde4c38270_ppc64le |
| Red Hat | openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:99b429ca86c7bd374ee6ca484dd144e9ca8582cce3e83df1699f1c4e25cda88c_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:99b429ca86c7bd374ee6ca484dd144e9ca8582cce3e83df1699f1c4e25cda88c_arm64, *, * |
| Red Hat | openshift4/ose-coredns@sha256:8401570e3a41c684a182ec366edca9130c8407b071ab2ce93eecef8d03bb6f4d_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-coredns@sha256:8401570e3a41c684a182ec366edca9130c8407b071ab2ce93eecef8d03bb6f4d_arm64, *, * |
| Red Hat | openshift4/ose-multus-cni@sha256:2dbf3e4862d4a580096efeee2975995bf8f3061e481ce681b92863507c4df47b_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | openshift4/ose-csi-driver-manila-rhel8-operator@sha256:ee1367b241ca03f9a13eb41671689f5f88e1094a205018ac364ce0a3811df5f0_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, *, openshift4/ose-csi-driver-manila-rhel8-operator@sha256:ee1367b241ca03f9a13eb41671689f5f88e1094a205018ac364ce0a3811df5f0_ppc64le |
| Red Hat | openshift4/ose-installer-artifacts@sha256:40f919391bb88b2e9e17a84ba9c4f8243c956a34df122823d51d7d5701083752_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-installer-artifacts@sha256:40f919391bb88b2e9e17a84ba9c4f8243c956a34df122823d51d7d5701083752_s390x, openshift4/ose-installer-artifacts@sha256:40f919391bb88b2e9e17a84ba9c4f8243c956a34df122823d51d7d5701083752_s390x, * |
| Red Hat | openshift4/ose-openshift-state-metrics-rhel8@sha256:9a7b063eaf1bc64b5d53c19cc7a594a0ab309200dac61a96c7dfbaf7ff0e2fc4_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-openshift-state-metrics-rhel8@sha256:9a7b063eaf1bc64b5d53c19cc7a594a0ab309200dac61a96c7dfbaf7ff0e2fc4_ppc64le, * |
| Red Hat | openshift4/ose-cluster-kube-apiserver-operator@sha256:79d5bb9d907862aee83b39ab288bc65cbace5f688062db018877b1eb891474cd_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-kube-apiserver-operator@sha256:79d5bb9d907862aee83b39ab288bc65cbace5f688062db018877b1eb891474cd_amd64, *, * |
| Red Hat | openshift4/ose-csi-external-resizer@sha256:c7c50e8c268f4dd9eeacf8f9711c57bc1f732cf0469aaf51de352bcc80f414b5_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, *, openshift4/ose-csi-external-resizer@sha256:c7c50e8c268f4dd9eeacf8f9711c57bc1f732cf0469aaf51de352bcc80f414b5_ppc64le |
| Red Hat | openshift4/ose-cluster-policy-controller-rhel8@sha256:f94514730676d5e52ab2e91da9f43e48166a26cc7b762255b2b290109c4d3cbb_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-policy-controller-rhel8@sha256:f94514730676d5e52ab2e91da9f43e48166a26cc7b762255b2b290109c4d3cbb_ppc64le, openshift4/ose-cluster-policy-controller-rhel8@sha256:f94514730676d5e52ab2e91da9f43e48166a26cc7b762255b2b290109c4d3cbb_ppc64le, * |
| Red Hat | openshift4/ose-csi-external-provisioner@sha256:27cc8d8afb32ff826a73990e48efc329bd223b3ff809619105a3d86d3e94c28f_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-csi-external-provisioner@sha256:27cc8d8afb32ff826a73990e48efc329bd223b3ff809619105a3d86d3e94c28f_arm64, *, openshift4/ose-csi-external-provisioner@sha256:27cc8d8afb32ff826a73990e48efc329bd223b3ff809619105a3d86d3e94c28f_arm64 |
| Red Hat | openshift4/ose-prometheus-operator-admission-webhook-rhel8@sha256:4affe1a7979577cfcdd0a3c9b2c774d08ddc8fdc6e3e3f1f117dd504acfbbdd8_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-prometheus-operator-admission-webhook-rhel8@sha256:4affe1a7979577cfcdd0a3c9b2c774d08ddc8fdc6e3e3f1f117dd504acfbbdd8_ppc64le, openshift4/ose-prometheus-operator-admission-webhook-rhel8@sha256:4affe1a7979577cfcdd0a3c9b2c774d08ddc8fdc6e3e3f1f117dd504acfbbdd8_ppc64le, openshift4/ose-prometheus-operator-admission-webhook-rhel8@sha256:4affe1a7979577cfcdd0a3c9b2c774d08ddc8fdc6e3e3f1f117dd504acfbbdd8_ppc64le |
…and 1240 more
Timeline
- Apr 25, 2024 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 13, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:1896 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2253330 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2258143 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2258165 issue
- https://issues.redhat.com/browse/OCPBUGS-30289 advisory
- https://issues.redhat.com/browse/OCPBUGS-30809 advisory
- https://issues.redhat.com/browse/OCPBUGS-30829 advisory
- https://issues.redhat.com/browse/OCPBUGS-30914 advisory
- https://issues.redhat.com/browse/OCPBUGS-32205 advisory
- https://issues.redhat.com/browse/OCPBUGS-32226 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1896.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39326 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39326 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39326 advisory
- https://pkg.go.dev/vuln/GO-2023-2382 advisory
- https://access.redhat.com/security/cve/CVE-2023-49568 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-49568 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-49568 advisory
- https://github.com/go-git/go-git/security/advisories/GHSA-mw99-9chc-xw7r advisory
…and 4 more