VDB
RHSA-2024%3A2060
RHSA-2024%3A2060
PUBLISHED
CVSS 7.5 HIGH
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | container-native-virtualization/mtq-controller-rhel9@sha256:ca22d241fe43af4a45e4b9176c5aaf75327f5b1f16691d82885ac553de3667ed_amd64 as a component of CNV 4.14 for RHEL 9 | container-native-virtualization/mtq-controller-rhel9@sha256:ca22d241fe43af4a45e4b9176c5aaf75327f5b1f16691d82885ac553de3667ed_amd64 |
| Red Hat | container-native-virtualization/hyperconverged-cluster-webhook-rhel9@sha256:bb00bd53da4c120e049b5e899b31aa935b749c9a0a449408578b18882c1f7990_arm64 as a component of CNV 4.14 for RHEL 9 | * |
| Red Hat | container-native-virtualization/virt-operator-rhel9@sha256:796faebcd97b34c762499fcb019246fabe0319a34acf3fd0a45b2385bd79081b_arm64 as a component of CNV 4.14 for RHEL 9 | container-native-virtualization/virt-operator-rhel9@sha256:796faebcd97b34c762499fcb019246fabe0319a34acf3fd0a45b2385bd79081b_arm64 |
| Red Hat | container-native-virtualization/virt-api-rhel9@sha256:eefd8e5eb2012c46816b0a8526e494bbcb959c646fdbd7aa52ee89ca2fd06c72_arm64 as a component of CNV 4.14 for RHEL 9 | container-native-virtualization/virt-api-rhel9@sha256:eefd8e5eb2012c46816b0a8526e494bbcb959c646fdbd7aa52ee89ca2fd06c72_arm64 |
| Red Hat | container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:bc1156fb8f028be1945e4cdb9f287a5a11d205a79fa2953dc6bfc255faf524f2_arm64 as a component of CNV 4.14 for RHEL 9 | container-native-virtualization/hostpath-provisioner-operator-rhel9@sha256:bc1156fb8f028be1945e4cdb9f287a5a11d205a79fa2953dc6bfc255faf524f2_arm64 |
| Red Hat | container-native-virtualization/virt-api-rhel9@sha256:855131ed1ee02f7a20bca554be17d48f308e001623c3c9050d584306f84e7bff_amd64 as a component of CNV 4.14 for RHEL 9 | container-native-virtualization/virt-api-rhel9@sha256:855131ed1ee02f7a20bca554be17d48f308e001623c3c9050d584306f84e7bff_amd64 |
| Red Hat | container-native-virtualization/hostpath-csi-driver-rhel9@sha256:d9a503464046f5357fb58d484c5ca4424a45b319417488f906ff892ee45dc491_amd64 as a component of CNV 4.14 for RHEL 9 | container-native-virtualization/hostpath-csi-driver-rhel9@sha256:d9a503464046f5357fb58d484c5ca4424a45b319417488f906ff892ee45dc491_amd64 |
| Red Hat | container-native-virtualization/virt-launcher-rhel9@sha256:777e3e5e4a1edce5803b4b631ed9b75892ea198b809fe4403409a39c2a1c5585_arm64 as a component of CNV 4.14 for RHEL 9 | * |
| Red Hat | container-native-virtualization/pr-helper-rhel9@sha256:482a71b7821e07648acf929298907292370c57c4d3bc30c467538abe43559a7e_arm64 as a component of CNV 4.14 for RHEL 9 | container-native-virtualization/pr-helper-rhel9@sha256:482a71b7821e07648acf929298907292370c57c4d3bc30c467538abe43559a7e_arm64 |
| Red Hat | container-native-virtualization/vm-console-proxy-rhel9@sha256:74751213289932893a464d459e9e2d87ee65f3cc6406134273d71ed343974e27_amd64 as a component of CNV 4.14 for RHEL 9 | container-native-virtualization/vm-console-proxy-rhel9@sha256:74751213289932893a464d459e9e2d87ee65f3cc6406134273d71ed343974e27_amd64 |
| Red Hat | container-native-virtualization/virt-cdi-importer-rhel9@sha256:62faac2d2e82fddf225d2c2f2432f833b6c948c774da16c5a54bc7c3599ba3b4_amd64 as a component of CNV 4.14 for RHEL 9 | * |
| Red Hat | container-native-virtualization/hostpath-provisioner-rhel9@sha256:c2dd6139eab4fe9cb0af485ed68a42890a883f58f5c81f5ce169dfcd54667663_amd64 as a component of CNV 4.14 for RHEL 9 | container-native-virtualization/hostpath-provisioner-rhel9@sha256:c2dd6139eab4fe9cb0af485ed68a42890a883f58f5c81f5ce169dfcd54667663_amd64 |
| Red Hat | container-native-virtualization/virt-cdi-cloner-rhel9@sha256:407f096eb2369cd6b4af6d7c77db2861b01ceef5e970a511a88a185eef6840d3_arm64 as a component of CNV 4.14 for RHEL 9 | container-native-virtualization/virt-cdi-cloner-rhel9@sha256:407f096eb2369cd6b4af6d7c77db2861b01ceef5e970a511a88a185eef6840d3_arm64 |
| Red Hat | container-native-virtualization/bridge-marker-rhel9@sha256:126f16e2903c77db72f3073e463fe3e33001cb393215b55afa56de94faad17c0_amd64 as a component of CNV 4.14 for RHEL 9 | container-native-virtualization/bridge-marker-rhel9@sha256:126f16e2903c77db72f3073e463fe3e33001cb393215b55afa56de94faad17c0_amd64 |
| Red Hat | container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:d9fe342cb788df0201453b8650aa04a5e5d55b6a3940ebb6edd5b33ad1d2570b_arm64 as a component of CNV 4.14 for RHEL 9 | container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:d9fe342cb788df0201453b8650aa04a5e5d55b6a3940ebb6edd5b33ad1d2570b_arm64 |
| Red Hat | container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f17a8110c748c8ffabe93efc3c6443a3b476616eaa01dbdac0c37ed780713f13_arm64 as a component of CNV 4.14 for RHEL 9 | container-native-virtualization/ovs-cni-plugin-rhel9@sha256:f17a8110c748c8ffabe93efc3c6443a3b476616eaa01dbdac0c37ed780713f13_arm64 |
| Red Hat | container-native-virtualization/virt-cdi-importer-rhel9@sha256:f1fd2c602714ef0dd021fe52aa65b975e9805a0d9477f127eab17bf2d6156af2_arm64 as a component of CNV 4.14 for RHEL 9 | * |
| Red Hat | container-native-virtualization/mtq-lock-server-rhel9@sha256:58cc012f441ece150f0398a7a7a165d8c499d029ba8cdc2664b3516072269a8d_amd64 as a component of CNV 4.14 for RHEL 9 | * |
| Red Hat | container-native-virtualization/vm-network-latency-checkup-rhel9@sha256:19227650fd86ad8388578b876ea136058cf81e88cb62759259ad3d631b731400_arm64 as a component of CNV 4.14 for RHEL 9 | container-native-virtualization/vm-network-latency-checkup-rhel9@sha256:19227650fd86ad8388578b876ea136058cf81e88cb62759259ad3d631b731400_arm64 |
| Red Hat | container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9@sha256:a59412be5545a263dcb93adaa2c3eaf9b979ffb0da87e688778fc2cde6a3d716_amd64 as a component of CNV 4.14 for RHEL 9 | container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9@sha256:a59412be5545a263dcb93adaa2c3eaf9b979ffb0da87e688778fc2cde6a3d716_amd64 |
…and 68 more
Timeline
- Apr 25, 2024 CVE Published
- Apr 25, 2026 CVE Updated
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:2060 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268273 issue
- https://issues.redhat.com/browse/CNV-35848 advisory
- https://issues.redhat.com/browse/CNV-39957 advisory
- https://issues.redhat.com/browse/CNV-40266 advisory
- https://issues.redhat.com/browse/CNV-40279 advisory
- https://issues.redhat.com/browse/CNV-40627 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2060.json advisory
- https://access.redhat.com/security/cve/CVE-2023-45288 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-45288 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-45288 advisory
- https://nowotarski.info/http2-continuation-flood/ advisory
- https://pkg.go.dev/vuln/GO-2024-2687 advisory
- https://www.kb.cert.org/vuls/id/421644 advisory