VDB
RHSA-2024%3A2773
RHSA-2024%3A2773
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in goproxy, which is vulnerable to a denial of service caused by improper input validation. This flaw allows a remote attacker can cause the goproxy server to crash by sending a specially crafted HTTP request to the HTTPS page, replacing the path "/" with an asterisk "*".
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-vmware-vsphere-csi-driver-operator-rhel8@sha256:38c7d665f177cad77f43b2883e53215de78d2ae74a929d4250a5bc1c46b6b65e_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | openshift4/ose-openshift-apiserver-rhel9@sha256:9be085ea227436f22eae93581df19bea0a2dad42cc5cbc823f7b2d0c3e246567_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-openshift-apiserver-rhel9@sha256:9be085ea227436f22eae93581df19bea0a2dad42cc5cbc823f7b2d0c3e246567_s390x, *, openshift4/ose-openshift-apiserver-rhel9@sha256:9be085ea227436f22eae93581df19bea0a2dad42cc5cbc823f7b2d0c3e246567_s390x |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel9@sha256:04e47253026bc9ae2211a90ac7a6e9234e1d4f9b0bbac48fb2e93cc59126e494_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-agent-installer-node-agent-rhel9@sha256:04e47253026bc9ae2211a90ac7a6e9234e1d4f9b0bbac48fb2e93cc59126e494_ppc64le, openshift4/ose-agent-installer-node-agent-rhel9@sha256:04e47253026bc9ae2211a90ac7a6e9234e1d4f9b0bbac48fb2e93cc59126e494_ppc64le, openshift4/ose-agent-installer-node-agent-rhel9@sha256:04e47253026bc9ae2211a90ac7a6e9234e1d4f9b0bbac48fb2e93cc59126e494_ppc64le |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:77e292b1ec2b83dfccd0c1ba93c60cccf4573d3722827a935a4595ecb1c33184_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-ovn-kubernetes-rhel9@sha256:77e292b1ec2b83dfccd0c1ba93c60cccf4573d3722827a935a4595ecb1c33184_ppc64le, openshift4/ose-ovn-kubernetes-rhel9@sha256:77e292b1ec2b83dfccd0c1ba93c60cccf4573d3722827a935a4595ecb1c33184_ppc64le |
| Red Hat | openshift4/ose-gcp-cloud-controller-manager-rhel9@sha256:dc4d6686941994ee98e84ffd72ec55f943fc989946cfe3cfd9becef7568b2e08_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-gcp-cloud-controller-manager-rhel9@sha256:dc4d6686941994ee98e84ffd72ec55f943fc989946cfe3cfd9becef7568b2e08_amd64, openshift4/ose-gcp-cloud-controller-manager-rhel9@sha256:dc4d6686941994ee98e84ffd72ec55f943fc989946cfe3cfd9becef7568b2e08_amd64 |
| Red Hat | openshift4/ose-cluster-config-api-rhel9@sha256:c6ac7881f770ac8c58428fc2f2a02edfd472efe726a4b2e0f11d3566257cba46_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-config-api-rhel9@sha256:c6ac7881f770ac8c58428fc2f2a02edfd472efe726a4b2e0f11d3566257cba46_s390x, *, openshift4/ose-cluster-config-api-rhel9@sha256:c6ac7881f770ac8c58428fc2f2a02edfd472efe726a4b2e0f11d3566257cba46_s390x |
| Red Hat | openshift4/ose-cluster-policy-controller-rhel9@sha256:bd1ac60f22b4c95362507dfd868f3a1f22819127af471dbf2c8b0c9a61ba625f_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-policy-controller-rhel9@sha256:bd1ac60f22b4c95362507dfd868f3a1f22819127af471dbf2c8b0c9a61ba625f_ppc64le, openshift4/ose-cluster-policy-controller-rhel9@sha256:bd1ac60f22b4c95362507dfd868f3a1f22819127af471dbf2c8b0c9a61ba625f_ppc64le, openshift4/ose-cluster-policy-controller-rhel9@sha256:bd1ac60f22b4c95362507dfd868f3a1f22819127af471dbf2c8b0c9a61ba625f_ppc64le |
| Red Hat | openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:1fba2f669cf5fe436bbab9d8916b011e821b316a5a94beef6d42e73a736aa3ce_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:1fba2f669cf5fe436bbab9d8916b011e821b316a5a94beef6d42e73a736aa3ce_ppc64le, *, openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:1fba2f669cf5fe436bbab9d8916b011e821b316a5a94beef6d42e73a736aa3ce_ppc64le |
| Red Hat | openshift4/ose-operator-marketplace-rhel9@sha256:3863526cd1fee5a4d4772df34ade1f2a75975bc5a6cd50cddb9c0b62d2ee4116_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-operator-marketplace-rhel9@sha256:3863526cd1fee5a4d4772df34ade1f2a75975bc5a6cd50cddb9c0b62d2ee4116_ppc64le, *, openshift4/ose-operator-marketplace-rhel9@sha256:3863526cd1fee5a4d4772df34ade1f2a75975bc5a6cd50cddb9c0b62d2ee4116_ppc64le |
| Red Hat | openshift4/ose-powervs-machine-controllers-rhel9@sha256:995237b0a619325bb6c18e369d6cb01225cf793747e043603c2fd93170b31a90_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-powervs-machine-controllers-rhel9@sha256:995237b0a619325bb6c18e369d6cb01225cf793747e043603c2fd93170b31a90_ppc64le, openshift4/ose-powervs-machine-controllers-rhel9@sha256:995237b0a619325bb6c18e369d6cb01225cf793747e043603c2fd93170b31a90_ppc64le, openshift4/ose-powervs-machine-controllers-rhel9@sha256:995237b0a619325bb6c18e369d6cb01225cf793747e043603c2fd93170b31a90_ppc64le |
| Red Hat | openshift4/ose-agent-installer-utils-rhel9@sha256:1453e0c85f2bd083f05680f0488fc015cea20197eb592fa68dcfe8d29888febe_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-agent-installer-utils-rhel9@sha256:1453e0c85f2bd083f05680f0488fc015cea20197eb592fa68dcfe8d29888febe_arm64, openshift4/ose-agent-installer-utils-rhel9@sha256:1453e0c85f2bd083f05680f0488fc015cea20197eb592fa68dcfe8d29888febe_arm64 |
| Red Hat | openshift4/ose-openstack-cloud-controller-manager-rhel9@sha256:dcb3d15b1c5a0c840ec1984879b5f2a8cbc7bf7f4d1ff15bf02bed4ca2d6be4f_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-openstack-cloud-controller-manager-rhel9@sha256:dcb3d15b1c5a0c840ec1984879b5f2a8cbc7bf7f4d1ff15bf02bed4ca2d6be4f_arm64, openshift4/ose-openstack-cloud-controller-manager-rhel9@sha256:dcb3d15b1c5a0c840ec1984879b5f2a8cbc7bf7f4d1ff15bf02bed4ca2d6be4f_arm64, * |
| Red Hat | openshift4/ose-kube-proxy-rhel9@sha256:508927a008efaee804c9763e69d2a920d333ece6075c1b2fa8ebb22b4a4b5f60_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-kube-proxy-rhel9@sha256:508927a008efaee804c9763e69d2a920d333ece6075c1b2fa8ebb22b4a4b5f60_s390x, openshift4/ose-kube-proxy-rhel9@sha256:508927a008efaee804c9763e69d2a920d333ece6075c1b2fa8ebb22b4a4b5f60_s390x, openshift4/ose-kube-proxy-rhel9@sha256:508927a008efaee804c9763e69d2a920d333ece6075c1b2fa8ebb22b4a4b5f60_s390x |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel9@sha256:103e98ddcd4587654a5871d69acde1720a511329859475db3519503ba34f5d36_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-agent-installer-node-agent-rhel9@sha256:103e98ddcd4587654a5871d69acde1720a511329859475db3519503ba34f5d36_arm64, openshift4/ose-agent-installer-node-agent-rhel9@sha256:103e98ddcd4587654a5871d69acde1720a511329859475db3519503ba34f5d36_arm64, openshift4/ose-agent-installer-node-agent-rhel9@sha256:103e98ddcd4587654a5871d69acde1720a511329859475db3519503ba34f5d36_arm64 |
| Red Hat | openshift4/ose-machine-api-provider-gcp-rhel9@sha256:d022bf63dda3168a9793d23f97075f7b3931d02ceb622f3c315f990cda87a296_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-machine-api-provider-gcp-rhel9@sha256:d022bf63dda3168a9793d23f97075f7b3931d02ceb622f3c315f990cda87a296_amd64, openshift4/ose-machine-api-provider-gcp-rhel9@sha256:d022bf63dda3168a9793d23f97075f7b3931d02ceb622f3c315f990cda87a296_amd64, * |
| Red Hat | openshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:6346a7b529d69a0c8f1a94c7406894712d2a931ab1f280e6c59edcb432a7cd70_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:6346a7b529d69a0c8f1a94c7406894712d2a931ab1f280e6c59edcb432a7cd70_ppc64le, openshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:6346a7b529d69a0c8f1a94c7406894712d2a931ab1f280e6c59edcb432a7cd70_ppc64le, openshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:6346a7b529d69a0c8f1a94c7406894712d2a931ab1f280e6c59edcb432a7cd70_ppc64le |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:fd438cb1fcd0dea2981408958ed3ee3ca49b3f7d671b74fcc4f46553b33e6904_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:fd438cb1fcd0dea2981408958ed3ee3ca49b3f7d671b74fcc4f46553b33e6904_s390x, openshift4/ose-agent-installer-csr-approver-rhel8@sha256:fd438cb1fcd0dea2981408958ed3ee3ca49b3f7d671b74fcc4f46553b33e6904_s390x, * |
| Red Hat | openshift4/ose-csi-node-driver-registrar@sha256:9dc3338500ba40d2aa57f6a5f63744cb4f363b0c5428b355994dbf9f2be151b1_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-csi-node-driver-registrar@sha256:9dc3338500ba40d2aa57f6a5f63744cb4f363b0c5428b355994dbf9f2be151b1_amd64, openshift4/ose-csi-node-driver-registrar@sha256:9dc3338500ba40d2aa57f6a5f63744cb4f363b0c5428b355994dbf9f2be151b1_amd64, openshift4/ose-csi-node-driver-registrar@sha256:9dc3338500ba40d2aa57f6a5f63744cb4f363b0c5428b355994dbf9f2be151b1_amd64 |
| Red Hat | openshift4/ose-csi-external-provisioner@sha256:ae8bf9be70c25f379ea8f0ed8e18c0699c2eafb754e23c41f175411dd393a06e_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-csi-external-provisioner@sha256:ae8bf9be70c25f379ea8f0ed8e18c0699c2eafb754e23c41f175411dd393a06e_arm64, openshift4/ose-csi-external-provisioner@sha256:ae8bf9be70c25f379ea8f0ed8e18c0699c2eafb754e23c41f175411dd393a06e_arm64, openshift4/ose-csi-external-provisioner@sha256:ae8bf9be70c25f379ea8f0ed8e18c0699c2eafb754e23c41f175411dd393a06e_arm64 |
| Red Hat | openshift4/ose-k8s-prometheus-adapter-rhel9@sha256:eb1259c744d2378576b2561f58a3f1b3207c954d35bcea3da24d54fe1b549974_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-k8s-prometheus-adapter-rhel9@sha256:eb1259c744d2378576b2561f58a3f1b3207c954d35bcea3da24d54fe1b549974_arm64, openshift4/ose-k8s-prometheus-adapter-rhel9@sha256:eb1259c744d2378576b2561f58a3f1b3207c954d35bcea3da24d54fe1b549974_arm64, openshift4/ose-k8s-prometheus-adapter-rhel9@sha256:eb1259c744d2378576b2561f58a3f1b3207c954d35bcea3da24d54fe1b549974_arm64 |
…and 1268 more
Timeline
- May 15, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:2773 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2224245 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2245180 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2251198 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2268046 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2268273 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2268854 issue
- https://issues.redhat.com/browse/OCPBUGS-25858 advisory
- https://issues.redhat.com/browse/OCPBUGS-29929 advisory
- https://issues.redhat.com/browse/OCPBUGS-30152 advisory
- https://issues.redhat.com/browse/OCPBUGS-30413 advisory
- https://issues.redhat.com/browse/OCPBUGS-31747 advisory
- https://issues.redhat.com/browse/OCPBUGS-32506 advisory
- https://issues.redhat.com/browse/OCPBUGS-32515 advisory
- https://issues.redhat.com/browse/OCPBUGS-32716 advisory
- https://issues.redhat.com/browse/OCPBUGS-32953 advisory
- https://issues.redhat.com/browse/OCPBUGS-32977 advisory
- https://issues.redhat.com/browse/OCPBUGS-32978 advisory
- https://issues.redhat.com/browse/OCPBUGS-33038 advisory
…and 38 more