VDB

RHSA-2024%3A4041

RHSA-2024%3A4041 PUBLISHED CVSS 7.5 HIGH

A vulnerability was discovered with the implementation of the HTTP/2 protocol in the Go programming language. There were insufficient limitations on the amount of CONTINUATION frames sent within a single stream. An attacker could potentially exploit this to cause a Denial of Service (DoS) attack.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-network-metrics-daemon-rhel9@sha256:fd5d7fb8ef5cbe83a6f8aff31a624d482595c7934fdb9b44ee0f62045246ccf2_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-network-metrics-daemon-rhel9@sha256:fd5d7fb8ef5cbe83a6f8aff31a624d482595c7934fdb9b44ee0f62045246ccf2_amd64, openshift4/ose-network-metrics-daemon-rhel9@sha256:fd5d7fb8ef5cbe83a6f8aff31a624d482595c7934fdb9b44ee0f62045246ccf2_amd64
Red Hatopenshift4/ose-network-interface-bond-cni-rhel8@sha256:e05badfbd5ff0bf6aeec9f594438a5989ff0320b3feff2cc986040a37d3d49c5_ppc64le as a component of Red Hat OpenShift Container Platform 4.15*, *
Red Hatopenshift4/kube-metrics-server-rhel8@sha256:184d2ebb3a16c7ea3099d85806018be7ae359275302126582e15d2506ad9e0fd_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/kube-metrics-server-rhel8@sha256:184d2ebb3a16c7ea3099d85806018be7ae359275302126582e15d2506ad9e0fd_ppc64le, openshift4/kube-metrics-server-rhel8@sha256:184d2ebb3a16c7ea3099d85806018be7ae359275302126582e15d2506ad9e0fd_ppc64le
Red Hatopenshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:259d83879bb0a8612ef9f09c99ef2fe36f35607831b4fc878eb57c913026d85e_arm64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:259d83879bb0a8612ef9f09c99ef2fe36f35607831b4fc878eb57c913026d85e_arm64, openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:259d83879bb0a8612ef9f09c99ef2fe36f35607831b4fc878eb57c913026d85e_arm64
Red Hatopenshift4/ose-cluster-network-rhel9-operator@sha256:ab0a3186aa45509cb2aa9a623d9dfb54727954a8e9fc385adf4db4ebbf6316b0_s390x as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ose-cluster-network-rhel9-operator@sha256:ab0a3186aa45509cb2aa9a623d9dfb54727954a8e9fc385adf4db4ebbf6316b0_s390x
Red Hatopenshift4/ose-azure-cloud-node-manager-rhel9@sha256:f448cd55e95c35c25079c54a00f8b65adea93377ac14fc2ebb8bb9ae7959e407_arm64 as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ose-azure-cloud-node-manager-rhel9@sha256:f448cd55e95c35c25079c54a00f8b65adea93377ac14fc2ebb8bb9ae7959e407_arm64
Red Hatopenshift4/ose-installer-altinfra-rhel8@sha256:22236459425f12a5c2a227c46cbccccd767ba1ae07e596a264f97bfcf866c058_s390x as a component of Red Hat OpenShift Container Platform 4.15*, *
Red Hatopenshift4/ose-cli@sha256:fa20e4d1e274534188a4197d6f9c55dad1a1f6b93a886c7bd7cbcec202ef0f2b_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-cli@sha256:fa20e4d1e274534188a4197d6f9c55dad1a1f6b93a886c7bd7cbcec202ef0f2b_ppc64le, *
Red Hatopenshift4/ose-etcd-rhel9@sha256:c89cb5bc0ea4c3dc608e99ce545c09f4eb07cb466a15a2b8e886c80665e69db8_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-etcd-rhel9@sha256:c89cb5bc0ea4c3dc608e99ce545c09f4eb07cb466a15a2b8e886c80665e69db8_amd64, *
Red Hatopenshift4/ose-azure-disk-csi-driver-rhel9@sha256:db2131a0d6c188d8773c640651ef923dc7e36b918adb19a63d54ed6d686aaa68_arm64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-azure-disk-csi-driver-rhel9@sha256:db2131a0d6c188d8773c640651ef923dc7e36b918adb19a63d54ed6d686aaa68_arm64, openshift4/ose-azure-disk-csi-driver-rhel9@sha256:db2131a0d6c188d8773c640651ef923dc7e36b918adb19a63d54ed6d686aaa68_arm64
Red Hatopenshift4/ose-agent-installer-node-agent-rhel9@sha256:3a878d4cf2d835b9db89b4cbe66572dcfec9730dc233bd1d169df775b457535e_arm64 as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ose-agent-installer-node-agent-rhel9@sha256:3a878d4cf2d835b9db89b4cbe66572dcfec9730dc233bd1d169df775b457535e_arm64
Red Hatopenshift4/ose-operator-registry-rhel9@sha256:724834441fe9b0a28d7715b55a68c8e0bffab7791796422f15640ebc0e10dc92_ppc64le as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ose-operator-registry-rhel9@sha256:724834441fe9b0a28d7715b55a68c8e0bffab7791796422f15640ebc0e10dc92_ppc64le
Red Hatopenshift4/ose-machine-config-operator@sha256:cd079beffbe190f97ac0d8dc685ca1aa27d2481c226310e3e43f7f081e30f044_arm64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-machine-config-operator@sha256:cd079beffbe190f97ac0d8dc685ca1aa27d2481c226310e3e43f7f081e30f044_arm64, *
Red Hatopenshift4/ose-csi-external-attacher-rhel9@sha256:f8a3779eea3c15dfd5fc1897baa25c662dac40cc27ad5aac7418c7f3d240f90f_s390x as a component of Red Hat OpenShift Container Platform 4.15*, *
Red Hatopenshift4/ose-network-metrics-daemon-rhel9@sha256:fd5d7fb8ef5cbe83a6f8aff31a624d482595c7934fdb9b44ee0f62045246ccf2_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-network-metrics-daemon-rhel9@sha256:fd5d7fb8ef5cbe83a6f8aff31a624d482595c7934fdb9b44ee0f62045246ccf2_amd64, *
Red Hatopenshift4/ovirt-csi-driver-rhel8-operator@sha256:34a6f36dda75abf997d69149fe4929c5e50e6916a7d55b150c54ac30b090edeb_s390x as a component of Red Hat OpenShift Container Platform 4.15openshift4/ovirt-csi-driver-rhel8-operator@sha256:34a6f36dda75abf997d69149fe4929c5e50e6916a7d55b150c54ac30b090edeb_s390x, *
Red Hatopenshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8991c1d9a1175b9b626aaa9306418b09b160b0b7e847ffa4ada77fd9f1f316a_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:c8991c1d9a1175b9b626aaa9306418b09b160b0b7e847ffa4ada77fd9f1f316a_amd64, *
Red Hatopenshift4/ose-installer@sha256:f0c35750a979a1f5649ced108219290956ae2913d256730e9687a59b86a26468_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-installer@sha256:f0c35750a979a1f5649ced108219290956ae2913d256730e9687a59b86a26468_amd64, *
Red Hatopenshift4/ose-ovn-kubernetes-rhel9@sha256:cb7cfe2787438e1c0af206242cd67b0a24f2b07868108dd8ddf337035f2fab01_arm64 as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ose-ovn-kubernetes-rhel9@sha256:cb7cfe2787438e1c0af206242cd67b0a24f2b07868108dd8ddf337035f2fab01_arm64
Red Hatopenshift4/ose-oauth-apiserver-rhel9@sha256:49fe8d04d60fbee4a4381778a480f66eefb9569828e894462f301ca8a94d2f1f_arm64 as a component of Red Hat OpenShift Container Platform 4.15*, openshift4/ose-oauth-apiserver-rhel9@sha256:49fe8d04d60fbee4a4381778a480f66eefb9569828e894462f301ca8a94d2f1f_arm64

…and 1316 more

Timeline

  • Jun 26, 2024 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 15, 2026 CVE Updated

References

…and 12 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›