VDB
RHSA-2024%3A4468
RHSA-2024%3A4468
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in goproxy, which is vulnerable to a denial of service caused by improper input validation. This flaw allows a remote attacker can cause the goproxy server to crash by sending a specially crafted HTTP request to the HTTPS page, replacing the path "/" with an asterisk "*".
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-dpu-daemon-rhel9@sha256:12a0446af2628a778fc3f93354d8fe497d196cc0db600e6ee27b7f2683e22a38_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-dpu-daemon-rhel9@sha256:12a0446af2628a778fc3f93354d8fe497d196cc0db600e6ee27b7f2683e22a38_arm64, openshift4/ose-dpu-daemon-rhel9@sha256:12a0446af2628a778fc3f93354d8fe497d196cc0db600e6ee27b7f2683e22a38_arm64 |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel9@sha256:07e750c7abc142c035361e5c9e191bf7ceb671611da05ef6b1e0c1f59cd2e7a3_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-clusterresourceoverride-rhel9@sha256:07e750c7abc142c035361e5c9e191bf7ceb671611da05ef6b1e0c1f59cd2e7a3_s390x, openshift4/ose-clusterresourceoverride-rhel9@sha256:07e750c7abc142c035361e5c9e191bf7ceb671611da05ef6b1e0c1f59cd2e7a3_s390x |
| Red Hat | openshift4/metallb-rhel9@sha256:9339f77c60c1f166e0648a16cd94c9bada3e2515e26e3207bac50b896a64ae3c_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/metallb-rhel9@sha256:9339f77c60c1f166e0648a16cd94c9bada3e2515e26e3207bac50b896a64ae3c_amd64, * |
| Red Hat | openshift4/ingress-node-firewall-rhel9-operator@sha256:0ce4e1d510f417be3e709d3059014cc8d245778e41aadb8e4c37d35e3cb85138_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ingress-node-firewall-rhel9-operator@sha256:0ce4e1d510f417be3e709d3059014cc8d245778e41aadb8e4c37d35e3cb85138_s390x, * |
| Red Hat | openshift4/ose-local-storage-rhel9-operator@sha256:5a3bdec797941a094bc9dcf5d4b46689006e1914a3faa5c380e0769b0169bcc4_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-local-storage-rhel9-operator@sha256:5a3bdec797941a094bc9dcf5d4b46689006e1914a3faa5c380e0769b0169bcc4_s390x, openshift4/ose-local-storage-rhel9-operator@sha256:5a3bdec797941a094bc9dcf5d4b46689006e1914a3faa5c380e0769b0169bcc4_s390x |
| Red Hat | openshift4/kubernetes-nmstate-rhel9-operator@sha256:4f86cc7d53683bb20a4bb2113d21d1952423d178343c95165e62f339291d251d_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/kubernetes-nmstate-rhel9-operator@sha256:4f86cc7d53683bb20a4bb2113d21d1952423d178343c95165e62f339291d251d_s390x, openshift4/kubernetes-nmstate-rhel9-operator@sha256:4f86cc7d53683bb20a4bb2113d21d1952423d178343c95165e62f339291d251d_s390x |
| Red Hat | openshift4/ptp-must-gather-rhel9@sha256:a1f983681013655d772aaf6bd755792b68725ba832e3379d6d0932ddd3bc9034_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ptp-must-gather-rhel9@sha256:a1f983681013655d772aaf6bd755792b68725ba832e3379d6d0932ddd3bc9034_arm64 |
| Red Hat | openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:8cdd874b7b7a37e5c4639eab097cc0e864c7c2659f4413ef5ce6ba6e27ae2bfa_s390x as a component of Red Hat OpenShift Container Platform 4.16 | *, * |
| Red Hat | openshift4/ose-dpu-rhel9-operator@sha256:86a94767e598f842bbfe0761c26d5ba066927768ce6fa93c1da3d7a291916f82_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-dpu-rhel9-operator@sha256:86a94767e598f842bbfe0761c26d5ba066927768ce6fa93c1da3d7a291916f82_amd64 |
| Red Hat | openshift4/ose-csi-driver-shared-resource-mustgather-rhel9@sha256:e7d3da637bd7ae3e52594d27315816c2578d0b16d2f24cd9cecd0ec158d67748_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-csi-driver-shared-resource-mustgather-rhel9@sha256:e7d3da637bd7ae3e52594d27315816c2578d0b16d2f24cd9cecd0ec158d67748_ppc64le, openshift4/ose-csi-driver-shared-resource-mustgather-rhel9@sha256:e7d3da637bd7ae3e52594d27315816c2578d0b16d2f24cd9cecd0ec158d67748_ppc64le |
| Red Hat | openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b1f059fd08df8282c7d19c68ba7058ce1281a65f8d3e0c21afd2c62a58d0124d_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-secrets-store-csi-driver-rhel9@sha256:b1f059fd08df8282c7d19c68ba7058ce1281a65f8d3e0c21afd2c62a58d0124d_s390x, * |
| Red Hat | openshift4/ose-operator-sdk-rhel9@sha256:e8c9820e0f08d3767826032443bd8352b684ab9dccb2b3a07d5456f157b5fcda_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-operator-sdk-rhel9@sha256:e8c9820e0f08d3767826032443bd8352b684ab9dccb2b3a07d5456f157b5fcda_ppc64le |
| Red Hat | openshift4/ose-local-storage-mustgather-rhel9@sha256:a449a50c2e40f152e43f146c3ce2825c21fe0df97846516efec125f660f23c73_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-local-storage-mustgather-rhel9@sha256:a449a50c2e40f152e43f146c3ce2825c21fe0df97846516efec125f660f23c73_ppc64le |
| Red Hat | openshift4/ose-helm-rhel9-operator@sha256:dfdccc22ce22dc4582cc1488a4e5857d05299523b3f644e686a2569beae2e516_s390x as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-helm-rhel9-operator@sha256:dfdccc22ce22dc4582cc1488a4e5857d05299523b3f644e686a2569beae2e516_s390x |
| Red Hat | openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a70ca7a55bdd5cf11ac637d77d285d12d28347a45ee8d6d9421f3dd3c45dc591_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:a70ca7a55bdd5cf11ac637d77d285d12d28347a45ee8d6d9421f3dd3c45dc591_amd64, * |
| Red Hat | openshift4/ose-sriov-network-webhook-rhel9@sha256:e23a1e32ba13b8e999de13ec56dbfdfa6d157478a054dfa7175b70102b668204_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-sriov-network-webhook-rhel9@sha256:e23a1e32ba13b8e999de13ec56dbfdfa6d157478a054dfa7175b70102b668204_ppc64le |
| Red Hat | openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:621fa59d5ee58da2eb8bc876212f8df7f99001307a99c5c8226d6cafc3fbad68_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:621fa59d5ee58da2eb8bc876212f8df7f99001307a99c5c8226d6cafc3fbad68_amd64, openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:621fa59d5ee58da2eb8bc876212f8df7f99001307a99c5c8226d6cafc3fbad68_amd64 |
| Red Hat | openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:0192a3e3ffefbacc0463c8e4b26308716a8bc88faf896010f8caff3dcd94d1c6_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:0192a3e3ffefbacc0463c8e4b26308716a8bc88faf896010f8caff3dcd94d1c6_amd64, openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:0192a3e3ffefbacc0463c8e4b26308716a8bc88faf896010f8caff3dcd94d1c6_amd64 |
| Red Hat | openshift4/ose-cloud-event-proxy-rhel9@sha256:a89c2a68cdae7d4af10f1bd592bca548a064c445effdc4e39d698d89f0a7a342_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-cloud-event-proxy-rhel9@sha256:a89c2a68cdae7d4af10f1bd592bca548a064c445effdc4e39d698d89f0a7a342_arm64, openshift4/ose-cloud-event-proxy-rhel9@sha256:a89c2a68cdae7d4af10f1bd592bca548a064c445effdc4e39d698d89f0a7a342_arm64 |
| Red Hat | openshift4/ose-secrets-store-csi-driver-rhel9@sha256:7972b5b6f43d7f1ee609e44823babaa0e55a52da8732ae42aade907c9009468a_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-secrets-store-csi-driver-rhel9@sha256:7972b5b6f43d7f1ee609e44823babaa0e55a52da8732ae42aade907c9009468a_arm64, * |
…and 336 more
Timeline
- Jul 16, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:4468 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://issues.redhat.com/browse/OCPBUGS-36307 advisory
- https://issues.redhat.com/browse/OCPBUGS-36308 advisory
- https://issues.redhat.com/browse/OCPBUGS-36507 advisory
- https://issues.redhat.com/browse/OCPBUGS-36509 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4468.json advisory
- https://access.redhat.com/security/cve/CVE-2023-37788 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2224245 issue
- https://www.cve.org/CVERecord?id=CVE-2023-37788 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-37788 advisory
- https://github.com/advisories/GHSA-4r8x-2p26-976p advisory
- https://github.com/elazarl/goproxy/issues/502 advisory
- https://github.com/elazarl/goproxy/pull/507 advisory