VDB
RHSA-2024%3A3494
RHSA-2024%3A3494
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cluster-update-keys@sha256:33bed2ef193b3df4f8f31106cd9f4b2d91419fc62b04af487366f00a66ae55f2_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-update-keys@sha256:33bed2ef193b3df4f8f31106cd9f4b2d91419fc62b04af487366f00a66ae55f2_ppc64le, openshift4/ose-cluster-update-keys@sha256:33bed2ef193b3df4f8f31106cd9f4b2d91419fc62b04af487366f00a66ae55f2_ppc64le, openshift4/ose-cluster-update-keys@sha256:33bed2ef193b3df4f8f31106cd9f4b2d91419fc62b04af487366f00a66ae55f2_ppc64le |
| Red Hat | openshift4/ose-tests@sha256:881de3f8fa7c9d01149886ca5122287354058c80d78f6eb005514ab52c2eea07_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-tests@sha256:881de3f8fa7c9d01149886ca5122287354058c80d78f6eb005514ab52c2eea07_arm64, openshift4/ose-tests@sha256:881de3f8fa7c9d01149886ca5122287354058c80d78f6eb005514ab52c2eea07_arm64, openshift4/ose-tests@sha256:881de3f8fa7c9d01149886ca5122287354058c80d78f6eb005514ab52c2eea07_arm64 |
| Red Hat | openshift4/ose-cluster-machine-approver@sha256:069f608ff73c16d1ffbeeb22ad3a215768e09c1774a7812d8a1c9492e2ea295a_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-machine-approver@sha256:069f608ff73c16d1ffbeeb22ad3a215768e09c1774a7812d8a1c9492e2ea295a_arm64, openshift4/ose-cluster-machine-approver@sha256:069f608ff73c16d1ffbeeb22ad3a215768e09c1774a7812d8a1c9492e2ea295a_arm64, * |
| Red Hat | openshift4/ose-network-metrics-daemon-rhel8@sha256:e741e8e3b1f3048604080762ce9cbb2189ee69547d7138e6fc241a874a4860a9_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-network-metrics-daemon-rhel8@sha256:e741e8e3b1f3048604080762ce9cbb2189ee69547d7138e6fc241a874a4860a9_arm64, *, openshift4/ose-network-metrics-daemon-rhel8@sha256:e741e8e3b1f3048604080762ce9cbb2189ee69547d7138e6fc241a874a4860a9_arm64 |
| Red Hat | openshift4/ose-nutanix-machine-controllers-rhel8@sha256:85a2bc5caf4c7bcbcce586401c0f3cc3ae5f325977847e7cceecf89e881eac5a_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-nutanix-machine-controllers-rhel8@sha256:85a2bc5caf4c7bcbcce586401c0f3cc3ae5f325977847e7cceecf89e881eac5a_amd64, openshift4/ose-nutanix-machine-controllers-rhel8@sha256:85a2bc5caf4c7bcbcce586401c0f3cc3ae5f325977847e7cceecf89e881eac5a_amd64 |
| Red Hat | openshift4/ose-etcd-rhel9@sha256:cc4ec3d3b80f684e1299502108f883fece629b2e08cbe6a4a27a502b0424a2ab_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-etcd-rhel9@sha256:cc4ec3d3b80f684e1299502108f883fece629b2e08cbe6a4a27a502b0424a2ab_s390x, openshift4/ose-etcd-rhel9@sha256:cc4ec3d3b80f684e1299502108f883fece629b2e08cbe6a4a27a502b0424a2ab_s390x, openshift4/ose-etcd-rhel9@sha256:cc4ec3d3b80f684e1299502108f883fece629b2e08cbe6a4a27a502b0424a2ab_s390x |
| Red Hat | openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:b753f7c394f7574b5dbfd82d600f2a17c1a5a138f584de991f6e2dce08eb7906_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:b753f7c394f7574b5dbfd82d600f2a17c1a5a138f584de991f6e2dce08eb7906_amd64, openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:b753f7c394f7574b5dbfd82d600f2a17c1a5a138f584de991f6e2dce08eb7906_amd64, openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:b753f7c394f7574b5dbfd82d600f2a17c1a5a138f584de991f6e2dce08eb7906_amd64 |
| Red Hat | openshift4/ose-cluster-config-operator@sha256:ea8ef0c6a0b0da716976fb4c228cfdfe706e159f6829b3b262e3da7d8b3bc228_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-config-operator@sha256:ea8ef0c6a0b0da716976fb4c228cfdfe706e159f6829b3b262e3da7d8b3bc228_s390x, openshift4/ose-cluster-config-operator@sha256:ea8ef0c6a0b0da716976fb4c228cfdfe706e159f6829b3b262e3da7d8b3bc228_s390x, openshift4/ose-cluster-config-operator@sha256:ea8ef0c6a0b0da716976fb4c228cfdfe706e159f6829b3b262e3da7d8b3bc228_s390x |
| Red Hat | openshift4/ose-machine-config-operator@sha256:5b5a344a26ac9f6cfda1c65a754fb5908eedb7a0ae73a5fdca11847d6545a610_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-machine-config-operator@sha256:5b5a344a26ac9f6cfda1c65a754fb5908eedb7a0ae73a5fdca11847d6545a610_s390x, openshift4/ose-machine-config-operator@sha256:5b5a344a26ac9f6cfda1c65a754fb5908eedb7a0ae73a5fdca11847d6545a610_s390x |
| Red Hat | openshift4/ose-oauth-apiserver-rhel8@sha256:816e0941a455a2051b92c247c7dbf2a4ed04ec3c2660408e4e571cdb02e35169_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-nutanix-cloud-controller-manager-rhel8@sha256:3909606fd531a8efe779b4b6318ba4c93c2edca82bddc76e0046a34dc3f753b2_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-nutanix-cloud-controller-manager-rhel8@sha256:3909606fd531a8efe779b4b6318ba4c93c2edca82bddc76e0046a34dc3f753b2_amd64, openshift4/ose-nutanix-cloud-controller-manager-rhel8@sha256:3909606fd531a8efe779b4b6318ba4c93c2edca82bddc76e0046a34dc3f753b2_amd64, * |
| Red Hat | openshift4/ose-cluster-monitoring-operator@sha256:cfa897616517dde6b2320be575502ecb8230a4bb46d878b3aa7ef48090042d06_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-monitoring-operator@sha256:cfa897616517dde6b2320be575502ecb8230a4bb46d878b3aa7ef48090042d06_amd64, openshift4/ose-cluster-monitoring-operator@sha256:cfa897616517dde6b2320be575502ecb8230a4bb46d878b3aa7ef48090042d06_amd64, openshift4/ose-cluster-monitoring-operator@sha256:cfa897616517dde6b2320be575502ecb8230a4bb46d878b3aa7ef48090042d06_amd64 |
| Red Hat | openshift4/network-tools-rhel8@sha256:437c21a8ada0af88ece60aa3815a3759561981277e66cbce9656a7c44ce1d739_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/network-tools-rhel8@sha256:437c21a8ada0af88ece60aa3815a3759561981277e66cbce9656a7c44ce1d739_ppc64le, openshift4/network-tools-rhel8@sha256:437c21a8ada0af88ece60aa3815a3759561981277e66cbce9656a7c44ce1d739_ppc64le, openshift4/network-tools-rhel8@sha256:437c21a8ada0af88ece60aa3815a3759561981277e66cbce9656a7c44ce1d739_ppc64le |
| Red Hat | openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:f8e37f53047599c58bb5b752c29efed986f1222a18882a1fed0ff40353a9551a_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:f8e37f53047599c58bb5b752c29efed986f1222a18882a1fed0ff40353a9551a_ppc64le, *, * |
| Red Hat | openshift4/ose-prom-label-proxy@sha256:28ca1d123ed35ce5f1a5da976f81182ddc52d1b1adb05976cc980898bb8a356e_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-prom-label-proxy@sha256:28ca1d123ed35ce5f1a5da976f81182ddc52d1b1adb05976cc980898bb8a356e_s390x, *, openshift4/ose-prom-label-proxy@sha256:28ca1d123ed35ce5f1a5da976f81182ddc52d1b1adb05976cc980898bb8a356e_s390x |
| Red Hat | openshift4/ose-k8s-prometheus-adapter@sha256:890ff7cc0e3ac4927a31ccdbfc9143a39204a24552cce0ae4900413eafaff597_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-baremetal-runtimecfg-rhel8@sha256:4328fc1a4408a07f8f0b1ea21d83b665b73772d4e4fe07dcc2bc41ffb3748662_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-baremetal-runtimecfg-rhel8@sha256:4328fc1a4408a07f8f0b1ea21d83b665b73772d4e4fe07dcc2bc41ffb3748662_amd64, openshift4/ose-baremetal-runtimecfg-rhel8@sha256:4328fc1a4408a07f8f0b1ea21d83b665b73772d4e4fe07dcc2bc41ffb3748662_amd64, * |
| Red Hat | openshift4/ose-csi-external-snapshotter-rhel8@sha256:ff74ba6675a33cde1098e1bbb9a936c9dca4504880f5d8709aefaaff93cbe86b_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-csi-external-snapshotter-rhel8@sha256:ff74ba6675a33cde1098e1bbb9a936c9dca4504880f5d8709aefaaff93cbe86b_amd64, openshift4/ose-csi-external-snapshotter-rhel8@sha256:ff74ba6675a33cde1098e1bbb9a936c9dca4504880f5d8709aefaaff93cbe86b_amd64 |
| Red Hat | openshift4/ose-ibmcloud-machine-controllers-rhel8@sha256:bdc48078d591f58cd530a9462f43f03a5cf628c8a6787187d6bd91ffc85becf0_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ibmcloud-machine-controllers-rhel8@sha256:bdc48078d591f58cd530a9462f43f03a5cf628c8a6787187d6bd91ffc85becf0_amd64, *, openshift4/ose-ibmcloud-machine-controllers-rhel8@sha256:bdc48078d591f58cd530a9462f43f03a5cf628c8a6787187d6bd91ffc85becf0_amd64 |
| Red Hat | openshift4/cloud-network-config-controller-rhel8@sha256:667683157fef95bcf552efbcf535f0e769f0a8d9fbe49ee2d044c3534c2c03df_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/cloud-network-config-controller-rhel8@sha256:667683157fef95bcf552efbcf535f0e769f0a8d9fbe49ee2d044c3534c2c03df_amd64, openshift4/cloud-network-config-controller-rhel8@sha256:667683157fef95bcf552efbcf535f0e769f0a8d9fbe49ee2d044c3534c2c03df_amd64, * |
…and 1288 more
Timeline
- Jun 5, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:3494 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2178358 issue
- https://issues.redhat.com/browse/OCPBUGS-32920 advisory
- https://issues.redhat.com/browse/OCPBUGS-33421 advisory
- https://issues.redhat.com/browse/OCPBUGS-33468 advisory
- https://issues.redhat.com/browse/OCPBUGS-33650 advisory
- https://issues.redhat.com/browse/OCPBUGS-33730 advisory
- https://issues.redhat.com/browse/OCPBUGS-33732 advisory
- https://issues.redhat.com/browse/OCPBUGS-33749 advisory
- https://issues.redhat.com/browse/OCPBUGS-33759 advisory
- https://issues.redhat.com/browse/OCPBUGS-34062 advisory
- https://issues.redhat.com/browse/OCPBUGS-34476 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3494.json advisory
- https://access.redhat.com/security/cve/CVE-2022-41723 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-41723 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-41723 advisory
- https://github.com/advisories/GHSA-vvpx-j8f3-3w6h advisory
- https://go.dev/cl/468135 advisory
- https://go.dev/cl/468295 advisory
…and 4 more