VDB

RHSA-2024%3A2865

RHSA-2024%3A2865 PUBLISHED CVSS 7.5 HIGH

A vulnerability was discovered with the implementation of the HTTP/2 protocol in the Go programming language. There were insufficient limitations on the amount of CONTINUATION frames sent within a single stream. An attacker could potentially exploit this to cause a Denial of Service (DoS) attack.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-csi-node-driver-registrar@sha256:0afe4936a719da6f07b245023df82c22583461bc3b57da8161240607e21ba8f3_ppc64le as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ose-csi-node-driver-registrar@sha256:0afe4936a719da6f07b245023df82c22583461bc3b57da8161240607e21ba8f3_ppc64le, openshift4/ose-csi-node-driver-registrar@sha256:0afe4936a719da6f07b245023df82c22583461bc3b57da8161240607e21ba8f3_ppc64le
Red Hatopenshift4/ose-olm-rukpak-rhel8@sha256:0fc3cd84c35e702e40290d39f5739d9bd93c561a015c60bc1629da615a88ab2a_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-olm-rukpak-rhel8@sha256:0fc3cd84c35e702e40290d39f5739d9bd93c561a015c60bc1629da615a88ab2a_amd64, *, *
Red Hatopenshift4/ose-csi-external-resizer-rhel8@sha256:22af94bbd98abfd25f3232ff666a5d17e4f24a6e731801127c17b436c2666ecd_ppc64le as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ose-csi-external-resizer-rhel8@sha256:22af94bbd98abfd25f3232ff666a5d17e4f24a6e731801127c17b436c2666ecd_ppc64le, *
Red Hatopenshift4/ose-multus-cni@sha256:58bfee809afff0c3eeb0cf80ec6cb443fb159c9c13ce4fc58ee819346374a728_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-multus-cni@sha256:58bfee809afff0c3eeb0cf80ec6cb443fb159c9c13ce4fc58ee819346374a728_ppc64le, openshift4/ose-multus-cni@sha256:58bfee809afff0c3eeb0cf80ec6cb443fb159c9c13ce4fc58ee819346374a728_ppc64le, openshift4/ose-multus-cni@sha256:58bfee809afff0c3eeb0cf80ec6cb443fb159c9c13ce4fc58ee819346374a728_ppc64le
Red Hatopenshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:a47af0235f106d565b63ec32690109c4a29c96d71bf6fb18d72fddf92d961a70_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:a47af0235f106d565b63ec32690109c4a29c96d71bf6fb18d72fddf92d961a70_amd64, *, *
Red Hatopenshift4/ose-cli-artifacts@sha256:a08833e00913e13ddb656101d508a283e7d7db95b527dcae9b4e9ceb69013ee1_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-cli-artifacts@sha256:a08833e00913e13ddb656101d508a283e7d7db95b527dcae9b4e9ceb69013ee1_ppc64le, *, openshift4/ose-cli-artifacts@sha256:a08833e00913e13ddb656101d508a283e7d7db95b527dcae9b4e9ceb69013ee1_ppc64le
Red Hatopenshift4/ose-hyperkube-rhel9@sha256:90f9f8ced8cbd7ce595f7ce76bac49f282ee3ee5c52c3495bf9f02fb18456340_amd64 as a component of Red Hat OpenShift Container Platform 4.15*, *
Red Hatopenshift4/ose-cloud-credential-operator@sha256:947d12717068255315deb1152e1f01867906558fb0cad446c5614a2ff50b12c4_arm64 as a component of Red Hat OpenShift Container Platform 4.15*, *
Red Hatopenshift4/ose-deployer@sha256:4467a365ec00a22cb9c71162bed2576906788da35eac970479f9b203f5d49f2d_ppc64le as a component of Red Hat OpenShift Container Platform 4.15*, *, openshift4/ose-deployer@sha256:4467a365ec00a22cb9c71162bed2576906788da35eac970479f9b203f5d49f2d_ppc64le
Red Hatopenshift4/kubevirt-csi-driver-rhel8@sha256:06608455706f492e1d7bbfbae1e0a545cb66621ed369cef28b42780276c85b3d_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/kubevirt-csi-driver-rhel8@sha256:06608455706f492e1d7bbfbae1e0a545cb66621ed369cef28b42780276c85b3d_ppc64le, openshift4/kubevirt-csi-driver-rhel8@sha256:06608455706f492e1d7bbfbae1e0a545cb66621ed369cef28b42780276c85b3d_ppc64le
Red Hatopenshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:ea77822a6042f9c4a822e73dc3d6ed07ce032f84277d02d8b3713b1d8e591177_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:ea77822a6042f9c4a822e73dc3d6ed07ce032f84277d02d8b3713b1d8e591177_amd64, *, openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:ea77822a6042f9c4a822e73dc3d6ed07ce032f84277d02d8b3713b1d8e591177_amd64
Red Hatopenshift4/ose-openstack-cluster-api-controllers-rhel8@sha256:54418537f8edb07a79b10900ad29590776cc773fef7e3fd76223508e97c9f973_amd64 as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ose-openstack-cluster-api-controllers-rhel8@sha256:54418537f8edb07a79b10900ad29590776cc773fef7e3fd76223508e97c9f973_amd64
Red Hatopenshift4/ose-monitoring-plugin-rhel8@sha256:55ee71b0d8ff2b8caf0f90259880a32517b5ad3d69a2c0cecf16ab0b727ea9cc_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-monitoring-plugin-rhel8@sha256:55ee71b0d8ff2b8caf0f90259880a32517b5ad3d69a2c0cecf16ab0b727ea9cc_amd64, openshift4/ose-monitoring-plugin-rhel8@sha256:55ee71b0d8ff2b8caf0f90259880a32517b5ad3d69a2c0cecf16ab0b727ea9cc_amd64
Red Hatopenshift4/ose-must-gather@sha256:bf804400bf87154712100ec0a46b9d73b3887a796de3a6e24ceb595cfde6fab4_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-must-gather@sha256:bf804400bf87154712100ec0a46b9d73b3887a796de3a6e24ceb595cfde6fab4_ppc64le, openshift4/ose-must-gather@sha256:bf804400bf87154712100ec0a46b9d73b3887a796de3a6e24ceb595cfde6fab4_ppc64le, openshift4/ose-must-gather@sha256:bf804400bf87154712100ec0a46b9d73b3887a796de3a6e24ceb595cfde6fab4_ppc64le
Red Hatopenshift4/ovirt-csi-driver-rhel8-operator@sha256:398de11c1d91cc4aae1d7062efbcc89148aa0f677a38eeef12f1e3a157d37d6e_arm64 as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ovirt-csi-driver-rhel8-operator@sha256:398de11c1d91cc4aae1d7062efbcc89148aa0f677a38eeef12f1e3a157d37d6e_arm64
Red Hatopenshift4/ose-pod-rhel9@sha256:142497651f2a2e6610f8cda326b860c5436ace8f234b1557b642978f415dc596_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-pod-rhel9@sha256:142497651f2a2e6610f8cda326b860c5436ace8f234b1557b642978f415dc596_ppc64le, openshift4/ose-pod-rhel9@sha256:142497651f2a2e6610f8cda326b860c5436ace8f234b1557b642978f415dc596_ppc64le, *
Red Hatopenshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:3673df57a5543871435ed40c80103aa1cc74f1829769285b5d37eabf0621b1c7_arm64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:3673df57a5543871435ed40c80103aa1cc74f1829769285b5d37eabf0621b1c7_arm64, openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:3673df57a5543871435ed40c80103aa1cc74f1829769285b5d37eabf0621b1c7_arm64
Red Hatopenshift4/network-tools-rhel8@sha256:e7cd328b4ffdf2b9811f4ff1f41f90c555384ab12c44acd0f7a07cf40e4ec97e_arm64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/network-tools-rhel8@sha256:e7cd328b4ffdf2b9811f4ff1f41f90c555384ab12c44acd0f7a07cf40e4ec97e_arm64, openshift4/network-tools-rhel8@sha256:e7cd328b4ffdf2b9811f4ff1f41f90c555384ab12c44acd0f7a07cf40e4ec97e_arm64, openshift4/network-tools-rhel8@sha256:e7cd328b4ffdf2b9811f4ff1f41f90c555384ab12c44acd0f7a07cf40e4ec97e_arm64
Red Hatopenshift4/ose-csi-node-driver-registrar@sha256:0a9b83c1863c59542f30cdd81b0a58f51846a4b3599ce4436f45d8bfe37faf2c_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-csi-node-driver-registrar@sha256:0a9b83c1863c59542f30cdd81b0a58f51846a4b3599ce4436f45d8bfe37faf2c_amd64, openshift4/ose-csi-node-driver-registrar@sha256:0a9b83c1863c59542f30cdd81b0a58f51846a4b3599ce4436f45d8bfe37faf2c_amd64, openshift4/ose-csi-node-driver-registrar@sha256:0a9b83c1863c59542f30cdd81b0a58f51846a4b3599ce4436f45d8bfe37faf2c_amd64
Red Hatopenshift4/ose-network-interface-bond-cni-rhel8@sha256:c1a13f3e2377da31cc037cf324e12c4770212d15503113f0db0bf9858920b1b1_arm64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-network-interface-bond-cni-rhel8@sha256:c1a13f3e2377da31cc037cf324e12c4770212d15503113f0db0bf9858920b1b1_arm64, *, openshift4/ose-network-interface-bond-cni-rhel8@sha256:c1a13f3e2377da31cc037cf324e12c4770212d15503113f0db0bf9858920b1b1_arm64

…and 568 more

Timeline

  • May 21, 2024 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 15, 2026 CVE Updated

References

…and 33 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›