VDB
RHSA-2024%3A5537
RHSA-2024%3A5537
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | cryostat-tech-preview/cryostat-rhel8-operator@sha256:913cea91396d56c68c30e307c7ebc4283485e99e7af53efa40d7d108ece3f34f_arm64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-rhel8-operator@sha256:913cea91396d56c68c30e307c7ebc4283485e99e7af53efa40d7d108ece3f34f_arm64 |
| Red Hat | cryostat-tech-preview/cryostat-storage-rhel8@sha256:bc157455c437b03c0b588d4463d14cad032f00dee3e0b69ddae86e652136a173_amd64 as a component of Cryostat 3 on RHEL 8 | * |
| Red Hat | cryostat-tech-preview/jfr-datasource-rhel8@sha256:372e33121f68d756d021b56b42ca5a57672642c32bc727012874e8a48a5e6841_amd64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/jfr-datasource-rhel8@sha256:372e33121f68d756d021b56b42ca5a57672642c32bc727012874e8a48a5e6841_amd64 |
| Red Hat | cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8@sha256:e8b030653f73140264c36ee5d4598a03cbf0501d5929ec5da715a712cc2d4e50_arm64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8@sha256:e8b030653f73140264c36ee5d4598a03cbf0501d5929ec5da715a712cc2d4e50_arm64 |
| Red Hat | cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8@sha256:89d8364676bdb85173295c10819cd9eba2547af24414a87a3455bc6ecdaeefd7_amd64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8@sha256:89d8364676bdb85173295c10819cd9eba2547af24414a87a3455bc6ecdaeefd7_amd64 |
| Red Hat | cryostat-tech-preview/cryostat-operator-bundle@sha256:0d2c21fab0381dab7270ff14f73ba1e5974bafc6ae847afcca3e3da7359f1a6a_amd64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-operator-bundle@sha256:0d2c21fab0381dab7270ff14f73ba1e5974bafc6ae847afcca3e3da7359f1a6a_amd64 |
| Red Hat | cryostat-tech-preview/cryostat-reports-rhel8@sha256:98db49e93ca4adca1b689ea010adacf706306d83803801dbfc07802d376e85d4_arm64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-reports-rhel8@sha256:98db49e93ca4adca1b689ea010adacf706306d83803801dbfc07802d376e85d4_arm64 |
| Red Hat | cryostat-tech-preview/cryostat-storage-rhel8@sha256:0af1662b57c36259e9f87d910215133868a5b77851442c537dc64874ab546628_arm64 as a component of Cryostat 3 on RHEL 8 | * |
| Red Hat | cryostat-tech-preview/cryostat-rhel8@sha256:ecb6a99ba7a3f13c299b7cf215307b618efbc42ce83ab36d4644b637af0ae794_amd64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-rhel8@sha256:ecb6a99ba7a3f13c299b7cf215307b618efbc42ce83ab36d4644b637af0ae794_amd64 |
| Red Hat | cryostat-tech-preview/cryostat-operator-bundle@sha256:046d96c35b5b0399ae0845f082147f809a36918b406662f99923f33ac6dfde31_arm64 as a component of Cryostat 3 on RHEL 8 | * |
| Red Hat | cryostat-tech-preview/cryostat-rhel8-operator@sha256:f2b0e1c4e9c8c69e0156f2c6d18fccad48b9307fa3e895a030c66dbedfd60670_amd64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-rhel8-operator@sha256:f2b0e1c4e9c8c69e0156f2c6d18fccad48b9307fa3e895a030c66dbedfd60670_amd64 |
| Red Hat | cryostat-tech-preview/jfr-datasource-rhel8@sha256:2e9deb9be151cf4b3a7fd153a2d172e1793c90304d264def6afc4baa5a79571b_arm64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/jfr-datasource-rhel8@sha256:2e9deb9be151cf4b3a7fd153a2d172e1793c90304d264def6afc4baa5a79571b_arm64 |
| Red Hat | cryostat-tech-preview/cryostat-db-rhel8@sha256:a3cfb8c81e8b4751363b73cd7dd78cfc05f5341d095de1d2812da2a98a933a9a_amd64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-db-rhel8@sha256:a3cfb8c81e8b4751363b73cd7dd78cfc05f5341d095de1d2812da2a98a933a9a_amd64 |
| Red Hat | cryostat-tech-preview/cryostat-rhel8@sha256:d08215ad966f21b9c53cf617bee292296a360f5e2df3b67d392131a85faa1022_arm64 as a component of Cryostat 3 on RHEL 8 | * |
| Red Hat | cryostat-tech-preview/cryostat-reports-rhel8@sha256:fdcdbf9fa905d0da99db1758af14c194cdd3a11f570e7289b76392412a260518_amd64 as a component of Cryostat 3 on RHEL 8 | * |
| Red Hat | cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:4d5b9e9581bee3f1dfe75935a12a49c8b07309dcc29107cd7b7b961c3e283dd3_amd64 as a component of Cryostat 3 on RHEL 8 | * |
| Red Hat | cryostat-tech-preview/cryostat-db-rhel8@sha256:773a526f06391088118b00de00d704ba1c28ad360a52f0b1a6f53cd898a87cfa_arm64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-db-rhel8@sha256:773a526f06391088118b00de00d704ba1c28ad360a52f0b1a6f53cd898a87cfa_arm64 |
| Red Hat | cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:59873dbe228f45ff74103f0d4a961ff2d6a25c9e653f363132a0fc953de1c947_arm64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:59873dbe228f45ff74103f0d4a961ff2d6a25c9e653f363132a0fc953de1c947_arm64 |
Timeline
- Aug 19, 2024 CVE Published
- Apr 30, 2026 CVE Updated
- Apr 30, 2026 Distribution Patch
- Apr 30, 2026 Distribution Patch
- Apr 30, 2026 Security Advisory
- Apr 30, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:5537 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2295310 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5537.json advisory
- https://access.redhat.com/security/cve/CVE-2024-24791 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-24791 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-24791 advisory
- https://go.dev/cl/591255 advisory
- https://go.dev/issue/67555 advisory
- https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ advisory