RHSA-2024%3A4677 — Vulnetix

RHSA-2024%3A4677 PUBLISHED CVSS 7.5 HIGH

A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests.

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

…and 1264 more

Timeline

Jul 25, 2024 CVE Published
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
May 16, 2026 CVE Updated

References

https://access.redhat.com/errata/RHSA-2024:4677 advisory
https://access.redhat.com/security/updates/classification/#important advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2178358 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2268273 issue
https://issues.redhat.com/browse/OCPBUGS-22981 advisory
https://issues.redhat.com/browse/OCPBUGS-34933 advisory
https://issues.redhat.com/browse/OCPBUGS-35501 advisory
https://issues.redhat.com/browse/OCPBUGS-36148 advisory
https://issues.redhat.com/browse/OCPBUGS-36179 advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4677.json advisory
https://access.redhat.com/security/cve/CVE-2022-41723 advisory
https://www.cve.org/CVERecord?id=CVE-2022-41723 advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-41723 advisory
https://github.com/advisories/GHSA-vvpx-j8f3-3w6h advisory
https://go.dev/cl/468135 advisory
https://go.dev/cl/468295 advisory
https://go.dev/issue/57855 advisory
https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E advisory
https://pkg.go.dev/vuln/GO-2023-1571 advisory
https://vuln.go.dev/ID/GO-2023-1571.json advisory

…and 6 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	openshift4/ose-cluster-storage-operator@sha256:37ca38b661e1a10226ba7e42376a010c3b34a087fe5457a1c0f29388199d24c2_amd64 as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-cluster-storage-operator@sha256:37ca38b661e1a10226ba7e42376a010c3b34a087fe5457a1c0f29388199d24c2_amd64, *, openshift4/ose-cluster-storage-operator@sha256:37ca38b661e1a10226ba7e42376a010c3b34a087fe5457a1c0f29388199d24c2_amd64
Red Hat	openshift4/ose-haproxy-router@sha256:b1bf57af52495e8671e9da6906ddca304edf2eb7463f4039d9a85c9125aa5542_s390x as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-haproxy-router@sha256:b1bf57af52495e8671e9da6906ddca304edf2eb7463f4039d9a85c9125aa5542_s390x, openshift4/ose-haproxy-router@sha256:b1bf57af52495e8671e9da6906ddca304edf2eb7463f4039d9a85c9125aa5542_s390x, openshift4/ose-haproxy-router@sha256:b1bf57af52495e8671e9da6906ddca304edf2eb7463f4039d9a85c9125aa5542_s390x
Red Hat	openshift4/network-tools-rhel8@sha256:8aea9906b9dfa488078a34c2cf61d6bd31580e9a489d4b1aaf390c6ec148f68b_arm64 as a component of Red Hat OpenShift Container Platform 4.12	*, openshift4/network-tools-rhel8@sha256:8aea9906b9dfa488078a34c2cf61d6bd31580e9a489d4b1aaf390c6ec148f68b_arm64, openshift4/network-tools-rhel8@sha256:8aea9906b9dfa488078a34c2cf61d6bd31580e9a489d4b1aaf390c6ec148f68b_arm64
Red Hat	openshift4/ose-openshift-apiserver-rhel8@sha256:13acd40464687e5fbfe68bda5f5f454898ee2a8ac43dd527e239a069000c291f_s390x as a component of Red Hat OpenShift Container Platform 4.12	, , openshift4/ose-openshift-apiserver-rhel8@sha256:13acd40464687e5fbfe68bda5f5f454898ee2a8ac43dd527e239a069000c291f_s390x
Red Hat	openshift4/ose-csi-external-provisioner@sha256:f71ca06e754537effa93933935e2be49f1e8926b7f5217dfe4b482853740f547_ppc64le as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-csi-external-provisioner@sha256:f71ca06e754537effa93933935e2be49f1e8926b7f5217dfe4b482853740f547_ppc64le, openshift4/ose-csi-external-provisioner@sha256:f71ca06e754537effa93933935e2be49f1e8926b7f5217dfe4b482853740f547_ppc64le, *
Red Hat	openshift4/ose-cluster-version-operator@sha256:885a2634f9042d1ef12729252e6cc479374a07c8aa5c0ed42cdcf1e7b22217bb_ppc64le as a component of Red Hat OpenShift Container Platform 4.12	*, openshift4/ose-cluster-version-operator@sha256:885a2634f9042d1ef12729252e6cc479374a07c8aa5c0ed42cdcf1e7b22217bb_ppc64le, openshift4/ose-cluster-version-operator@sha256:885a2634f9042d1ef12729252e6cc479374a07c8aa5c0ed42cdcf1e7b22217bb_ppc64le
Red Hat	openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:63f56c4818882ef59404f8b99ee2dcbbbbedb35dace053333fdc217d321e7b9a_arm64 as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:63f56c4818882ef59404f8b99ee2dcbbbbedb35dace053333fdc217d321e7b9a_arm64, openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:63f56c4818882ef59404f8b99ee2dcbbbbedb35dace053333fdc217d321e7b9a_arm64, *
Red Hat	openshift4/ose-cli-artifacts@sha256:45fb50605d3e82a41f34cd7838d5af879f7833e8f9c8385d978dcfd1d53835bc_ppc64le as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-cli-artifacts@sha256:45fb50605d3e82a41f34cd7838d5af879f7833e8f9c8385d978dcfd1d53835bc_ppc64le, *, openshift4/ose-cli-artifacts@sha256:45fb50605d3e82a41f34cd7838d5af879f7833e8f9c8385d978dcfd1d53835bc_ppc64le
Red Hat	openshift4/ose-csi-snapshot-controller@sha256:404987a2fb4c664c018ed7e33f8ebbd1dac1d7343f383b0e4bdf92d35f5ebb5a_ppc64le as a component of Red Hat OpenShift Container Platform 4.12	, , *
Red Hat	openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:2451853a55c51f9690ae49c6d2745667bb870512646124c836008da576c5d6e0_arm64 as a component of Red Hat OpenShift Container Platform 4.12	*, openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:2451853a55c51f9690ae49c6d2745667bb870512646124c836008da576c5d6e0_arm64, openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:2451853a55c51f9690ae49c6d2745667bb870512646124c836008da576c5d6e0_arm64
Red Hat	openshift4/ose-cluster-autoscaler@sha256:bfc8d1897f9d841d545d8b12feeb591261421892170a0d13a959ad5a456a2196_amd64 as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-cluster-autoscaler@sha256:bfc8d1897f9d841d545d8b12feeb591261421892170a0d13a959ad5a456a2196_amd64, openshift4/ose-cluster-autoscaler@sha256:bfc8d1897f9d841d545d8b12feeb591261421892170a0d13a959ad5a456a2196_amd64, openshift4/ose-cluster-autoscaler@sha256:bfc8d1897f9d841d545d8b12feeb591261421892170a0d13a959ad5a456a2196_amd64
Red Hat	openshift4/ose-cluster-image-registry-operator@sha256:d21a53e7f3db5f160da0ce2c22f8e563ba09f4eb861e14f8bd9cab80ec17eae2_amd64 as a component of Red Hat OpenShift Container Platform 4.12	, openshift4/ose-cluster-image-registry-operator@sha256:d21a53e7f3db5f160da0ce2c22f8e563ba09f4eb861e14f8bd9cab80ec17eae2_amd64,
Red Hat	openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:dd3db40441dd60edab282bec5d29547c8524a4524d117b712636f347398b8648_ppc64le as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:dd3db40441dd60edab282bec5d29547c8524a4524d117b712636f347398b8648_ppc64le, openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:dd3db40441dd60edab282bec5d29547c8524a4524d117b712636f347398b8648_ppc64le, *
Red Hat	openshift4/ose-ironic-static-ip-manager-rhel9@sha256:c453f2fb8bb59d35f5e67b5382489a59e04ece4a7e6d6062d5267d2bc28a7cd5_arm64 as a component of Red Hat OpenShift Container Platform 4.12	openshift4/ose-ironic-static-ip-manager-rhel9@sha256:c453f2fb8bb59d35f5e67b5382489a59e04ece4a7e6d6062d5267d2bc28a7cd5_arm64, *, openshift4/ose-ironic-static-ip-manager-rhel9@sha256:c453f2fb8bb59d35f5e67b5382489a59e04ece4a7e6d6062d5267d2bc28a7cd5_arm64
Red Hat	openshift4/ose-cluster-node-tuning-operator@sha256:bc332ad74529b3b93e38c298e93dcc4155d44872696de24af6c740de43f8189c_amd64 as a component of Red Hat OpenShift Container Platform 4.12	*, openshift4/ose-cluster-node-tuning-operator@sha256:bc332ad74529b3b93e38c298e93dcc4155d44872696de24af6c740de43f8189c_amd64, openshift4/ose-cluster-node-tuning-operator@sha256:bc332ad74529b3b93e38c298e93dcc4155d44872696de24af6c740de43f8189c_amd64
Red Hat	openshift4/egress-router-cni-rhel8@sha256:7a4158a5a03507fc2b6704d12d6cd7bf2c307cf34751c3dfa575a88e518c994f_arm64 as a component of Red Hat OpenShift Container Platform 4.12	, , openshift4/egress-router-cni-rhel8@sha256:7a4158a5a03507fc2b6704d12d6cd7bf2c307cf34751c3dfa575a88e518c994f_arm64
Red Hat	openshift4/kubevirt-csi-driver-rhel8@sha256:cf998295e34c9d44e655ec391662c2a9944275fbf0225900d3656f3d8f45270e_arm64 as a component of Red Hat OpenShift Container Platform 4.12	openshift4/kubevirt-csi-driver-rhel8@sha256:cf998295e34c9d44e655ec391662c2a9944275fbf0225900d3656f3d8f45270e_arm64, openshift4/kubevirt-csi-driver-rhel8@sha256:cf998295e34c9d44e655ec391662c2a9944275fbf0225900d3656f3d8f45270e_arm64, openshift4/kubevirt-csi-driver-rhel8@sha256:cf998295e34c9d44e655ec391662c2a9944275fbf0225900d3656f3d8f45270e_arm64
Red Hat	openshift4/ose-libvirt-machine-controllers@sha256:e7d37c68f68de6dd8b8544892e34fbccc9f0af0c1121a2472864e3e62b074428_s390x as a component of Red Hat OpenShift Container Platform 4.12	, , openshift4/ose-libvirt-machine-controllers@sha256:e7d37c68f68de6dd8b8544892e34fbccc9f0af0c1121a2472864e3e62b074428_s390x
Red Hat	openshift4/ose-kube-rbac-proxy@sha256:46844a8d4b3305611078f82e827e524581e0de5c2da3dcea8e1f542098bcad65_ppc64le as a component of Red Hat OpenShift Container Platform 4.12	*, openshift4/ose-kube-rbac-proxy@sha256:46844a8d4b3305611078f82e827e524581e0de5c2da3dcea8e1f542098bcad65_ppc64le, openshift4/ose-kube-rbac-proxy@sha256:46844a8d4b3305611078f82e827e524581e0de5c2da3dcea8e1f542098bcad65_ppc64le
Red Hat	openshift4/ovirt-csi-driver-rhel8-operator@sha256:87db9d17e9cbe05a1eb9a540fe9ecfa217dd754350cdfee0366d7a1bb3abd7e9_ppc64le as a component of Red Hat OpenShift Container Platform 4.12	, , openshift4/ovirt-csi-driver-rhel8-operator@sha256:87db9d17e9cbe05a1eb9a540fe9ecfa217dd754350cdfee0366d7a1bb3abd7e9_ppc64le