VDB

RHSA-2024%3A3327

RHSA-2024%3A3327 PUBLISHED CVSS 7.5 HIGH

A vulnerability was discovered with the implementation of the HTTP/2 protocol in the Go programming language. There were insufficient limitations on the amount of CONTINUATION frames sent within a single stream. An attacker could potentially exploit this to cause a Denial of Service (DoS) attack.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-cluster-openshift-apiserver-rhel9-operator@sha256:46d1fae9c0c232df603bf8193cd56ebfb17ea71b18e2640d28d8808f22d093ca_arm64 as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ose-cluster-openshift-apiserver-rhel9-operator@sha256:46d1fae9c0c232df603bf8193cd56ebfb17ea71b18e2640d28d8808f22d093ca_arm64
Red Hatopenshift4/ose-cluster-bootstrap-rhel9@sha256:8d1da20e6b38debbcc6b8b807a78479b1b380b84e5518a6ad32d5d97ac6f9a9d_arm64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-cluster-bootstrap-rhel9@sha256:8d1da20e6b38debbcc6b8b807a78479b1b380b84e5518a6ad32d5d97ac6f9a9d_arm64, openshift4/ose-cluster-bootstrap-rhel9@sha256:8d1da20e6b38debbcc6b8b807a78479b1b380b84e5518a6ad32d5d97ac6f9a9d_arm64
Red Hatopenshift4/ose-haproxy-router@sha256:1c197a7f24e165925ce6b7371840deae6e92618e88de93d5b050fdd06e74f3e7_s390x as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-haproxy-router@sha256:1c197a7f24e165925ce6b7371840deae6e92618e88de93d5b050fdd06e74f3e7_s390x, openshift4/ose-haproxy-router@sha256:1c197a7f24e165925ce6b7371840deae6e92618e88de93d5b050fdd06e74f3e7_s390x
Red Hatopenshift4/ose-oauth-server-rhel9@sha256:e097e33268216b32864ce6d32a9d5e6ec23bb10c25c66b5dd4f99ba0b14c44d3_arm64 as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ose-oauth-server-rhel9@sha256:e097e33268216b32864ce6d32a9d5e6ec23bb10c25c66b5dd4f99ba0b14c44d3_arm64
Red Hatopenshift4/ose-cluster-monitoring-rhel9-operator@sha256:a172cff092249f834954f20fe1db9a2a081f99903091effe3b73c97806fda1d1_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-cluster-monitoring-rhel9-operator@sha256:a172cff092249f834954f20fe1db9a2a081f99903091effe3b73c97806fda1d1_amd64, *
Red Hatopenshift4/ose-ibm-vpc-block-csi-driver-rhel9@sha256:9feabc2fab2671d7c3fc6d69d8307706f120ed5898b7cab30e9dc9f7247d57a0_amd64 as a component of Red Hat OpenShift Container Platform 4.15*, *
Red Hatopenshift4/ose-keepalived-ipfailover-rhel9@sha256:770cc9242c9692fc95fad7a641284c99ab4b8e19bac7f64bcb5118c97cfd2f48_ppc64le as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ose-keepalived-ipfailover-rhel9@sha256:770cc9242c9692fc95fad7a641284c99ab4b8e19bac7f64bcb5118c97cfd2f48_ppc64le
Red Hatopenshift4/ose-multus-cni@sha256:6f895649872d4c1fd5f05470b91a6a41dbe564f90dcead6f950a2ed5c87b0bd2_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-multus-cni@sha256:6f895649872d4c1fd5f05470b91a6a41dbe564f90dcead6f950a2ed5c87b0bd2_ppc64le, *
Red Hatopenshift4/ose-openshift-state-metrics-rhel9@sha256:4839a4ecc44b0191edcb2e2ce894d6cb4a2c38bffad3f9ebd92ea21cf3b4b20b_ppc64le as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ose-openshift-state-metrics-rhel9@sha256:4839a4ecc44b0191edcb2e2ce894d6cb4a2c38bffad3f9ebd92ea21cf3b4b20b_ppc64le
Red Hatopenshift4/ose-haproxy-router@sha256:1c197a7f24e165925ce6b7371840deae6e92618e88de93d5b050fdd06e74f3e7_s390x as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ose-haproxy-router@sha256:1c197a7f24e165925ce6b7371840deae6e92618e88de93d5b050fdd06e74f3e7_s390x
Red Hatopenshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:15f837357e63224c6f8fda78acd961676463ef614b3539730e7746779ecf710c_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:15f837357e63224c6f8fda78acd961676463ef614b3539730e7746779ecf710c_amd64, *
Red Hatopenshift4/ose-hypershift-rhel9@sha256:eed9158d0f8a9008567948aeda56a22e184948a72ac4c4324e453d60b9ca9ef6_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-hypershift-rhel9@sha256:eed9158d0f8a9008567948aeda56a22e184948a72ac4c4324e453d60b9ca9ef6_ppc64le, openshift4/ose-hypershift-rhel9@sha256:eed9158d0f8a9008567948aeda56a22e184948a72ac4c4324e453d60b9ca9ef6_ppc64le
Red Hatopenshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:f2bb2a05d054c4b16796c71718bcf5e47034c2d727aa6536547d4658125ba0a1_amd64 as a component of Red Hat OpenShift Container Platform 4.15*, *
Red Hatopenshift4/ose-cluster-samples-rhel9-operator@sha256:6e11854a46a2d3a6cd978cb716fc4a0d3bd99c613724a2d2e60825065a4851f5_s390x as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-cluster-samples-rhel9-operator@sha256:6e11854a46a2d3a6cd978cb716fc4a0d3bd99c613724a2d2e60825065a4851f5_s390x, *
Red Hatopenshift4/ose-aws-cluster-api-controllers-rhel9@sha256:960e1e8e5ee157108edf8300895bfdf6e2295b1ee8917b323d38f39045f13096_amd64 as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ose-aws-cluster-api-controllers-rhel9@sha256:960e1e8e5ee157108edf8300895bfdf6e2295b1ee8917b323d38f39045f13096_amd64
Red Hatopenshift4/ose-multus-cni@sha256:0e3ecd7bb0dbc073603ed9f57044ca4d0c147216f9d53dd514af7d1e710cf5cd_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-multus-cni@sha256:0e3ecd7bb0dbc073603ed9f57044ca4d0c147216f9d53dd514af7d1e710cf5cd_amd64, *
Red Hatopenshift4/ose-baremetal-installer-rhel8@sha256:9fd3201862d116e18c067c0b1d9e02d2cdbfdf63484d1c2aae7a9e48662aff44_arm64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-baremetal-installer-rhel8@sha256:9fd3201862d116e18c067c0b1d9e02d2cdbfdf63484d1c2aae7a9e48662aff44_arm64, *
Red Hatopenshift4/ose-baremetal-cluster-api-controllers-rhel9@sha256:96714e9b39130daf5d9a5f487a5e18b5b328038facd3787715be065b1b0a8da2_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-baremetal-cluster-api-controllers-rhel9@sha256:96714e9b39130daf5d9a5f487a5e18b5b328038facd3787715be065b1b0a8da2_ppc64le, *
Red Hatopenshift4/ose-service-ca-rhel9-operator@sha256:c0a5c89aff7a07f3fe93b0884620871f0491b3e2d5566b762a54005d9c1e617f_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-service-ca-rhel9-operator@sha256:c0a5c89aff7a07f3fe93b0884620871f0491b3e2d5566b762a54005d9c1e617f_ppc64le, *
Red Hatopenshift4/ose-installer-altinfra-rhel8@sha256:2b769ac04054e8b1177feac7794ddbad663aa4cd7b890b202ed86162ff77bbe3_arm64 as a component of Red Hat OpenShift Container Platform 4.15*, *

…and 968 more

Timeline

  • May 29, 2024 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 15, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›