VDB
RHSA-2024%3A2875
RHSA-2024%3A2875
PUBLISHED
CVSS 7.5 HIGH
A vulnerability was discovered with the implementation of the HTTP/2 protocol in the Go programming language. There were insufficient limitations on the amount of CONTINUATION frames sent within a single stream. An attacker could potentially exploit this to cause a Denial of Service (DoS) attack.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-prometheus-node-exporter@sha256:dc98935167b2ffa2f52123ef5874c7ae1d16e5a02f776c8794450e9e5f867ab4_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-prometheus-node-exporter@sha256:dc98935167b2ffa2f52123ef5874c7ae1d16e5a02f776c8794450e9e5f867ab4_s390x, openshift4/ose-prometheus-node-exporter@sha256:dc98935167b2ffa2f52123ef5874c7ae1d16e5a02f776c8794450e9e5f867ab4_s390x |
| Red Hat | openshift4/ose-powervs-block-csi-driver-rhel8@sha256:a0a4859fe034de9ce73be37bed078d760e608bbd7162d5a3b03e730f1f2787a5_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-powervs-block-csi-driver-rhel8@sha256:a0a4859fe034de9ce73be37bed078d760e608bbd7162d5a3b03e730f1f2787a5_ppc64le, * |
| Red Hat | openshift4/ose-powervs-machine-controllers-rhel8@sha256:a1c8cbc4a201bf3174dfdf45000edf78b40008da637748b570ff495dd15a1103_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-powervs-machine-controllers-rhel8@sha256:a1c8cbc4a201bf3174dfdf45000edf78b40008da637748b570ff495dd15a1103_amd64, openshift4/ose-powervs-machine-controllers-rhel8@sha256:a1c8cbc4a201bf3174dfdf45000edf78b40008da637748b570ff495dd15a1103_amd64 |
| Red Hat | openshift4/ose-csi-driver-shared-resource-rhel8@sha256:a15ba72bd3e233de62e46590ab737f0eac2e910edee24faabeb39ad079f7c16c_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-csi-driver-shared-resource-rhel8@sha256:a15ba72bd3e233de62e46590ab737f0eac2e910edee24faabeb39ad079f7c16c_amd64, * |
| Red Hat | openshift4/ose-ibm-vpc-node-label-updater-rhel8@sha256:afa25416ed1ab6be38da9a532ba6a7796cc34c59f9facb287e720f07b67317fc_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ibm-vpc-node-label-updater-rhel8@sha256:afa25416ed1ab6be38da9a532ba6a7796cc34c59f9facb287e720f07b67317fc_s390x, openshift4/ose-ibm-vpc-node-label-updater-rhel8@sha256:afa25416ed1ab6be38da9a532ba6a7796cc34c59f9facb287e720f07b67317fc_s390x |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:e2bff0f6836fb035e946b6b9d6f4445c852c560cfdafaf51cde19c69a461cffd_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:e2bff0f6836fb035e946b6b9d6f4445c852c560cfdafaf51cde19c69a461cffd_arm64 |
| Red Hat | openshift4/egress-router-cni-rhel8@sha256:3f48d6763965fd2bf0a7348951fd109bd37800a67b70cd7670811fc226cd9d73_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/egress-router-cni-rhel8@sha256:3f48d6763965fd2bf0a7348951fd109bd37800a67b70cd7670811fc226cd9d73_amd64 |
| Red Hat | openshift4/ose-multus-admission-controller@sha256:2e4c1f40d62943a46cae4b9d27491066ec0893c5729850506d6418de3aba995b_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-multus-admission-controller@sha256:2e4c1f40d62943a46cae4b9d27491066ec0893c5729850506d6418de3aba995b_s390x, openshift4/ose-multus-admission-controller@sha256:2e4c1f40d62943a46cae4b9d27491066ec0893c5729850506d6418de3aba995b_s390x |
| Red Hat | openshift4/ose-cluster-dns-operator@sha256:4e7ec501f08c6b2d23881b8f183e5b9d5751a5c7f04c94f15a00ada45721fe50_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-cluster-dns-operator@sha256:4e7ec501f08c6b2d23881b8f183e5b9d5751a5c7f04c94f15a00ada45721fe50_arm64 |
| Red Hat | openshift4/ose-csi-external-resizer@sha256:15ea400a270e3aed6f0d6dc36480877e3988a36dd2dc0afd372bf1c1750c4835_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-csi-external-resizer@sha256:15ea400a270e3aed6f0d6dc36480877e3988a36dd2dc0afd372bf1c1750c4835_amd64, openshift4/ose-csi-external-resizer@sha256:15ea400a270e3aed6f0d6dc36480877e3988a36dd2dc0afd372bf1c1750c4835_amd64 |
| Red Hat | openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:333cce120063395171387bad64dac0f2f2d57fb4e39df0fbc5249ee727a86bc4_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:333cce120063395171387bad64dac0f2f2d57fb4e39df0fbc5249ee727a86bc4_amd64, * |
| Red Hat | openshift4/ose-vsphere-csi-driver-syncer-rhel8@sha256:af4f0c0633730955a222d1085703dede78b85bf1a9053a70b75799617e2d50e4_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-vsphere-csi-driver-syncer-rhel8@sha256:af4f0c0633730955a222d1085703dede78b85bf1a9053a70b75799617e2d50e4_amd64, openshift4/ose-vsphere-csi-driver-syncer-rhel8@sha256:af4f0c0633730955a222d1085703dede78b85bf1a9053a70b75799617e2d50e4_amd64 |
| Red Hat | openshift4/ose-cluster-autoscaler@sha256:8a59d381f2b7c707dfd2d6da3788037b7ed9c8db36ded76f935e393699d1bdec_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-cluster-autoscaler@sha256:8a59d381f2b7c707dfd2d6da3788037b7ed9c8db36ded76f935e393699d1bdec_s390x |
| Red Hat | openshift4/ose-cluster-ingress-operator@sha256:3fdcf1b2383c7a3eeb4d76ba2b6daee063765859065336e44ca834279c71badb_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-ingress-operator@sha256:3fdcf1b2383c7a3eeb4d76ba2b6daee063765859065336e44ca834279c71badb_arm64, * |
| Red Hat | rhcos@sha256:2eeb32c91201578373b624cb24c165eedefad58fe9a9d0b273a40c8041c8add6_x86_64 as a component of Red Hat OpenShift Container Platform 4.13 | rhcos@sha256:2eeb32c91201578373b624cb24c165eedefad58fe9a9d0b273a40c8041c8add6_x86_64, rhcos@sha256:2eeb32c91201578373b624cb24c165eedefad58fe9a9d0b273a40c8041c8add6_x86_64 |
| Red Hat | openshift4/ose-kube-proxy@sha256:a6e5045ec4d8905225e34672b22439b32e7edb8608e087e8b697c0eca7ba611d_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-kube-proxy@sha256:a6e5045ec4d8905225e34672b22439b32e7edb8608e087e8b697c0eca7ba611d_s390x, openshift4/ose-kube-proxy@sha256:a6e5045ec4d8905225e34672b22439b32e7edb8608e087e8b697c0eca7ba611d_s390x |
| Red Hat | openshift4/ose-etcd-rhel9@sha256:cc1189f20e8a8d7d4199c88a0055d33d22f6a5997d0a26a970372652cd89f2fe_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, * |
| Red Hat | openshift4/ose-insights-rhel8-operator@sha256:ad9d477bbddf7c5fba52fd0b86ced3adc2573d440a1e5437376976d616a1bbcb_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-insights-rhel8-operator@sha256:ad9d477bbddf7c5fba52fd0b86ced3adc2573d440a1e5437376976d616a1bbcb_s390x, * |
| Red Hat | openshift4/ose-cluster-capi-rhel8-operator@sha256:80944bacb914560a5b1890838f66c4b0a4ec36abbc934293e9ab734c18af96de_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-capi-rhel8-operator@sha256:80944bacb914560a5b1890838f66c4b0a4ec36abbc934293e9ab734c18af96de_arm64, * |
| Red Hat | openshift4/ose-powervs-machine-controllers-rhel8@sha256:a1c8cbc4a201bf3174dfdf45000edf78b40008da637748b570ff495dd15a1103_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-powervs-machine-controllers-rhel8@sha256:a1c8cbc4a201bf3174dfdf45000edf78b40008da637748b570ff495dd15a1103_amd64 |
…and 1288 more
Timeline
- May 23, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:2875 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268273 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2268854 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2275280 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2275847 issue
- https://issues.redhat.com/browse/OCPBUGS-18674 advisory
- https://issues.redhat.com/browse/OCPBUGS-32180 advisory
- https://issues.redhat.com/browse/OCPBUGS-33062 advisory
- https://issues.redhat.com/browse/OCPBUGS-33174 advisory
- https://issues.redhat.com/browse/OCPBUGS-33252 advisory
- https://issues.redhat.com/browse/OCPBUGS-33273 advisory
- https://issues.redhat.com/browse/OCPBUGS-33280 advisory
- https://issues.redhat.com/browse/OCPBUGS-33327 advisory
- https://issues.redhat.com/browse/OCPBUGS-33448 advisory
- https://issues.redhat.com/browse/OCPBUGS-33449 advisory
- https://issues.redhat.com/browse/OCPBUGS-33581 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2875.json advisory
- https://access.redhat.com/security/cve/CVE-2023-45288 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-45288 advisory
…and 18 more