VDB

RHSA-2024%3A6004

RHSA-2024%3A6004 PUBLISHED CVSS 7.5 HIGH

A vulnerability was discovered with the implementation of the HTTP/2 protocol in the Go programming language. There were insufficient limitations on the amount of CONTINUATION frames sent within a single stream. An attacker could potentially exploit this to cause a Denial of Service (DoS) attack.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-csi-driver-manila-rhel9-operator@sha256:4c9eb8bd6fd69a9fa41249bc420c8410169794cd331bcde01de77b92cc388bfe_ppc64le as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-csi-driver-manila-rhel9-operator@sha256:4c9eb8bd6fd69a9fa41249bc420c8410169794cd331bcde01de77b92cc388bfe_ppc64le, openshift4/ose-csi-driver-manila-rhel9-operator@sha256:4c9eb8bd6fd69a9fa41249bc420c8410169794cd331bcde01de77b92cc388bfe_ppc64le, *
Red Hatopenshift4/ose-libvirt-machine-controllers-rhel9@sha256:0e50da332cd1b95859dd1648b167e671f73b8588c59e2d1784864a4271a46674_arm64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-libvirt-machine-controllers-rhel9@sha256:0e50da332cd1b95859dd1648b167e671f73b8588c59e2d1784864a4271a46674_arm64, openshift4/ose-libvirt-machine-controllers-rhel9@sha256:0e50da332cd1b95859dd1648b167e671f73b8588c59e2d1784864a4271a46674_arm64, openshift4/ose-libvirt-machine-controllers-rhel9@sha256:0e50da332cd1b95859dd1648b167e671f73b8588c59e2d1784864a4271a46674_arm64
Red Hatopenshift4/azure-kms-encryption-provider-rhel9@sha256:72f2c0c4efb9bc36f49a90cb26e000c0ce499b5a9bc808f9319da3a5d0f8cd88_amd64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/azure-kms-encryption-provider-rhel9@sha256:72f2c0c4efb9bc36f49a90cb26e000c0ce499b5a9bc808f9319da3a5d0f8cd88_amd64, openshift4/azure-kms-encryption-provider-rhel9@sha256:72f2c0c4efb9bc36f49a90cb26e000c0ce499b5a9bc808f9319da3a5d0f8cd88_amd64, openshift4/azure-kms-encryption-provider-rhel9@sha256:72f2c0c4efb9bc36f49a90cb26e000c0ce499b5a9bc808f9319da3a5d0f8cd88_amd64
Red Hatopenshift4/ose-openstack-cluster-api-controllers-rhel9@sha256:065c4b4bd69886028c8bba0def579b58f1fb1d71e8960f190ca36ccab62d458e_amd64 as a component of Red Hat OpenShift Container Platform 4.16*, *, *
Red Hatopenshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:de66394929e1cad721bd2865905fda24d2ff1a592369e883cdf70f1e9dd4bc99_s390x as a component of Red Hat OpenShift Container Platform 4.16*, openshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:de66394929e1cad721bd2865905fda24d2ff1a592369e883cdf70f1e9dd4bc99_s390x, openshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:de66394929e1cad721bd2865905fda24d2ff1a592369e883cdf70f1e9dd4bc99_s390x
Red Hatopenshift4/ose-sdn-rhel9@sha256:45a7b91c34f464aa5621e220ba6d69dd63ca8a62c6f1484315f3cbc5ada7f1e1_s390x as a component of Red Hat OpenShift Container Platform 4.16*, *, *
Red Hatopenshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:61aac0dc1b7dde97af3f1cd42da02063fc1635d9f74a0f5aa324f6191c0f55c0_s390x as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:61aac0dc1b7dde97af3f1cd42da02063fc1635d9f74a0f5aa324f6191c0f55c0_s390x, openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:61aac0dc1b7dde97af3f1cd42da02063fc1635d9f74a0f5aa324f6191c0f55c0_s390x, openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:61aac0dc1b7dde97af3f1cd42da02063fc1635d9f74a0f5aa324f6191c0f55c0_s390x
Red Hatopenshift4/ose-csi-external-attacher-rhel9@sha256:32e6a1cf143f8b19fe42223ad3aff51d8cd986c9d2a0d345e01d10260fe3c247_ppc64le as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-csi-external-attacher-rhel9@sha256:32e6a1cf143f8b19fe42223ad3aff51d8cd986c9d2a0d345e01d10260fe3c247_ppc64le, openshift4/ose-csi-external-attacher-rhel9@sha256:32e6a1cf143f8b19fe42223ad3aff51d8cd986c9d2a0d345e01d10260fe3c247_ppc64le, openshift4/ose-csi-external-attacher-rhel9@sha256:32e6a1cf143f8b19fe42223ad3aff51d8cd986c9d2a0d345e01d10260fe3c247_ppc64le
Red Hatopenshift4/ose-machine-api-provider-gcp-rhel9@sha256:55f45c847991293d7ea27c8724000970a828b511ff56c2bac29c2757872790b9_amd64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-machine-api-provider-gcp-rhel9@sha256:55f45c847991293d7ea27c8724000970a828b511ff56c2bac29c2757872790b9_amd64, openshift4/ose-machine-api-provider-gcp-rhel9@sha256:55f45c847991293d7ea27c8724000970a828b511ff56c2bac29c2757872790b9_amd64, openshift4/ose-machine-api-provider-gcp-rhel9@sha256:55f45c847991293d7ea27c8724000970a828b511ff56c2bac29c2757872790b9_amd64
Red Hatopenshift4/ose-console-rhel9@sha256:451e393f782015c38d674b6938ad11fec822a542fad7b3a915942ffd86f10257_arm64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-console-rhel9@sha256:451e393f782015c38d674b6938ad11fec822a542fad7b3a915942ffd86f10257_arm64, openshift4/ose-console-rhel9@sha256:451e393f782015c38d674b6938ad11fec822a542fad7b3a915942ffd86f10257_arm64, *
Red Hatopenshift4/ose-cluster-kube-cluster-api-rhel9-operator@sha256:d12bcad99c3da238f180c58acf8f032d5a219b292d53b8ca48f2966b351f41b7_amd64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-cluster-kube-cluster-api-rhel9-operator@sha256:d12bcad99c3da238f180c58acf8f032d5a219b292d53b8ca48f2966b351f41b7_amd64, openshift4/ose-cluster-kube-cluster-api-rhel9-operator@sha256:d12bcad99c3da238f180c58acf8f032d5a219b292d53b8ca48f2966b351f41b7_amd64, *
Red Hatopenshift4/ose-installer-rhel9@sha256:8db4d43024a0e4feee208fcf04368a7f66262cc1911e0b313cd4b2b9ad688bb1_ppc64le as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-installer-rhel9@sha256:8db4d43024a0e4feee208fcf04368a7f66262cc1911e0b313cd4b2b9ad688bb1_ppc64le, *, openshift4/ose-installer-rhel9@sha256:8db4d43024a0e4feee208fcf04368a7f66262cc1911e0b313cd4b2b9ad688bb1_ppc64le
Red Hatopenshift4/ose-csi-external-resizer-rhel9@sha256:0b567a7332e13de46983bd5fc949f71c85eafa0ec7fb7422f6e363340a8bad71_amd64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-csi-external-resizer-rhel9@sha256:0b567a7332e13de46983bd5fc949f71c85eafa0ec7fb7422f6e363340a8bad71_amd64, openshift4/ose-csi-external-resizer-rhel9@sha256:0b567a7332e13de46983bd5fc949f71c85eafa0ec7fb7422f6e363340a8bad71_amd64, openshift4/ose-csi-external-resizer-rhel9@sha256:0b567a7332e13de46983bd5fc949f71c85eafa0ec7fb7422f6e363340a8bad71_amd64
Red Hatopenshift4/ose-agent-installer-node-agent-rhel9@sha256:d03968aabc82f8feeee9879fccfabf2919295b470e7799485300f575d725e1a6_ppc64le as a component of Red Hat OpenShift Container Platform 4.16*, openshift4/ose-agent-installer-node-agent-rhel9@sha256:d03968aabc82f8feeee9879fccfabf2919295b470e7799485300f575d725e1a6_ppc64le, openshift4/ose-agent-installer-node-agent-rhel9@sha256:d03968aabc82f8feeee9879fccfabf2919295b470e7799485300f575d725e1a6_ppc64le
Red Hatopenshift4/ose-hyperkube-rhel9@sha256:c128df52c9b584b8577f622439ffb6768dd2d86bc3435ad366266509323fef7c_s390x as a component of Red Hat OpenShift Container Platform 4.16*, openshift4/ose-hyperkube-rhel9@sha256:c128df52c9b584b8577f622439ffb6768dd2d86bc3435ad366266509323fef7c_s390x, openshift4/ose-hyperkube-rhel9@sha256:c128df52c9b584b8577f622439ffb6768dd2d86bc3435ad366266509323fef7c_s390x
Red Hatopenshift4/ose-openshift-state-metrics-rhel9@sha256:f2581f3f2bb0f233a3bbd839311249bcb82de484dbc776326a8d80c004448167_amd64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-openshift-state-metrics-rhel9@sha256:f2581f3f2bb0f233a3bbd839311249bcb82de484dbc776326a8d80c004448167_amd64, *, *
Red Hatopenshift4/ose-image-customization-controller-rhel9@sha256:91fc98ee76555fef9b0254500196626d45f54d751faf78991a2d956019566cd9_arm64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-image-customization-controller-rhel9@sha256:91fc98ee76555fef9b0254500196626d45f54d751faf78991a2d956019566cd9_arm64, openshift4/ose-image-customization-controller-rhel9@sha256:91fc98ee76555fef9b0254500196626d45f54d751faf78991a2d956019566cd9_arm64, *
Red Hatopenshift4/network-tools-rhel9@sha256:3d8a84ecd1ab41ecfef22e3b7eca6eb51b4ae9466ed222dc6424c6914dd26dce_amd64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/network-tools-rhel9@sha256:3d8a84ecd1ab41ecfef22e3b7eca6eb51b4ae9466ed222dc6424c6914dd26dce_amd64, openshift4/network-tools-rhel9@sha256:3d8a84ecd1ab41ecfef22e3b7eca6eb51b4ae9466ed222dc6424c6914dd26dce_amd64, openshift4/network-tools-rhel9@sha256:3d8a84ecd1ab41ecfef22e3b7eca6eb51b4ae9466ed222dc6424c6914dd26dce_amd64
Red Hatopenshift4/ose-telemeter-rhel9@sha256:de121b31a8d88fb7033453e074b6689ef0e43e0d661c6ed44cb016aebac0afcc_amd64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-telemeter-rhel9@sha256:de121b31a8d88fb7033453e074b6689ef0e43e0d661c6ed44cb016aebac0afcc_amd64, *, openshift4/ose-telemeter-rhel9@sha256:de121b31a8d88fb7033453e074b6689ef0e43e0d661c6ed44cb016aebac0afcc_amd64
Red Hatopenshift4/ose-tools-rhel9@sha256:a116ea69f24350d0d10eb10a4efdf39c19ccf9afed844d969617d14d25f5ccf6_amd64 as a component of Red Hat OpenShift Container Platform 4.16openshift4/ose-tools-rhel9@sha256:a116ea69f24350d0d10eb10a4efdf39c19ccf9afed844d969617d14d25f5ccf6_amd64, *, *

…and 1308 more

Timeline

  • Sep 3, 2024 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory

References

…and 34 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›