VDB
RHSA-2024%3A6236
RHSA-2024%3A6236
PUBLISHED
CVSS 7.5 HIGH
A memory leak was found in the otelhttp handler of open-telemetry. This flaw allows a remote, unauthenticated attacker to exhaust the server's memory by sending many malicious requests, affecting the availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhacm2/acm-search-v2-api-rhel9@sha256:98c84f5ef11e3e144bf80b490147af3df2c9553ffb83fe4df4f7a4d8f9defea7_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/acm-search-v2-api-rhel9@sha256:98c84f5ef11e3e144bf80b490147af3df2c9553ffb83fe4df4f7a4d8f9defea7_ppc64le, *, rhacm2/acm-search-v2-api-rhel9@sha256:98c84f5ef11e3e144bf80b490147af3df2c9553ffb83fe4df4f7a4d8f9defea7_ppc64le |
| Red Hat | rhacm2/acm-cluster-permission-rhel9@sha256:5dc48c73b819e6539fb25e875c99c53a6c665c2ad1f3c730e587d3138d1984c0_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/acm-cluster-permission-rhel9@sha256:5dc48c73b819e6539fb25e875c99c53a6c665c2ad1f3c730e587d3138d1984c0_amd64, rhacm2/acm-cluster-permission-rhel9@sha256:5dc48c73b819e6539fb25e875c99c53a6c665c2ad1f3c730e587d3138d1984c0_amd64 |
| Red Hat | rhacm2/acm-operator-bundle@sha256:b0c8f104f30cce48893593c5de9d7b2fbc294da7480b3590151e85a7283d7258_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/acm-operator-bundle@sha256:b0c8f104f30cce48893593c5de9d7b2fbc294da7480b3590151e85a7283d7258_amd64, rhacm2/acm-operator-bundle@sha256:b0c8f104f30cce48893593c5de9d7b2fbc294da7480b3590151e85a7283d7258_amd64 |
| Red Hat | rhacm2/thanos-receive-controller-rhel9@sha256:f7c6518537480294d637d8863fe409e48c16090a1c6380e648ffc46059f2aec5_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/thanos-receive-controller-rhel9@sha256:f7c6518537480294d637d8863fe409e48c16090a1c6380e648ffc46059f2aec5_s390x, *, rhacm2/thanos-receive-controller-rhel9@sha256:f7c6518537480294d637d8863fe409e48c16090a1c6380e648ffc46059f2aec5_s390x |
| Red Hat | rhacm2/insights-metrics-rhel9@sha256:eff99d6929a316636cbcb147b687cb68e8bcab44456700cf8e6895687f9ea1f1_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/insights-metrics-rhel9@sha256:eff99d6929a316636cbcb147b687cb68e8bcab44456700cf8e6895687f9ea1f1_ppc64le, *, rhacm2/insights-metrics-rhel9@sha256:eff99d6929a316636cbcb147b687cb68e8bcab44456700cf8e6895687f9ea1f1_ppc64le |
| Red Hat | rhacm2/acm-cluster-permission-rhel9@sha256:6c8390c85018e5a5057ea20aae74e0cd72e2d9cea01aa6547f86a9a27bc3cef0_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | *, rhacm2/acm-cluster-permission-rhel9@sha256:6c8390c85018e5a5057ea20aae74e0cd72e2d9cea01aa6547f86a9a27bc3cef0_s390x, rhacm2/acm-cluster-permission-rhel9@sha256:6c8390c85018e5a5057ea20aae74e0cd72e2d9cea01aa6547f86a9a27bc3cef0_s390x |
| Red Hat | rhacm2/grafana-dashboard-loader-rhel9@sha256:00c39fc250491f33b721034f3d14c0f9ceb1aae41fa307acb83d740295532977_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/grafana-dashboard-loader-rhel9@sha256:00c39fc250491f33b721034f3d14c0f9ceb1aae41fa307acb83d740295532977_ppc64le, rhacm2/grafana-dashboard-loader-rhel9@sha256:00c39fc250491f33b721034f3d14c0f9ceb1aae41fa307acb83d740295532977_ppc64le |
| Red Hat | rhacm2/multicloud-integrations-rhel9@sha256:34adf23148ec86ed2f3c79f904a3b4f714991269b90ab87b1cba432b08c5f992_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | *, rhacm2/multicloud-integrations-rhel9@sha256:34adf23148ec86ed2f3c79f904a3b4f714991269b90ab87b1cba432b08c5f992_arm64 |
| Red Hat | rhacm2/acm-volsync-addon-controller-rhel9@sha256:e3662f7f1bb93482484a31c2c86d620a7120bf53e1cda202fd2f900f295b7e35_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | *, rhacm2/acm-volsync-addon-controller-rhel9@sha256:e3662f7f1bb93482484a31c2c86d620a7120bf53e1cda202fd2f900f295b7e35_ppc64le, rhacm2/acm-volsync-addon-controller-rhel9@sha256:e3662f7f1bb93482484a31c2c86d620a7120bf53e1cda202fd2f900f295b7e35_ppc64le |
| Red Hat | rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:df10c9b42687b6766e9d64ff7113ae8c53b0acceac67695c6cc33b739dbbde69_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:df10c9b42687b6766e9d64ff7113ae8c53b0acceac67695c6cc33b739dbbde69_amd64, rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:df10c9b42687b6766e9d64ff7113ae8c53b0acceac67695c6cc33b739dbbde69_amd64 |
| Red Hat | rhacm2/multicluster-operators-subscription-rhel9@sha256:3daaee12c06f53d6d4b1bf9d79f0d300903de6892d255b6d749d7c47492f777c_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | *, rhacm2/multicluster-operators-subscription-rhel9@sha256:3daaee12c06f53d6d4b1bf9d79f0d300903de6892d255b6d749d7c47492f777c_ppc64le, * |
| Red Hat | rhacm2/acm-grafana-rhel9@sha256:568a1f42c59cb872164eafa3d32f45c9e2a560367132492b154d484f7ccd8f01_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/acm-grafana-rhel9@sha256:568a1f42c59cb872164eafa3d32f45c9e2a560367132492b154d484f7ccd8f01_amd64, rhacm2/acm-grafana-rhel9@sha256:568a1f42c59cb872164eafa3d32f45c9e2a560367132492b154d484f7ccd8f01_amd64, * |
| Red Hat | rhacm2/multicloud-integrations-rhel9@sha256:b8c85acbbe622757f6acd3abbd0b81332345503dd7f15f0ee9a8a8febd52c7eb_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/multicloud-integrations-rhel9@sha256:b8c85acbbe622757f6acd3abbd0b81332345503dd7f15f0ee9a8a8febd52c7eb_s390x, rhacm2/multicloud-integrations-rhel9@sha256:b8c85acbbe622757f6acd3abbd0b81332345503dd7f15f0ee9a8a8febd52c7eb_s390x |
| Red Hat | rhacm2/rbac-query-proxy-rhel9@sha256:42a79850dd08c35b1d0dfaff34d097681da83d25330f3eaa795e6638044fdfc1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/rbac-query-proxy-rhel9@sha256:42a79850dd08c35b1d0dfaff34d097681da83d25330f3eaa795e6638044fdfc1_s390x, rhacm2/rbac-query-proxy-rhel9@sha256:42a79850dd08c35b1d0dfaff34d097681da83d25330f3eaa795e6638044fdfc1_s390x, * |
| Red Hat | rhacm2/endpoint-monitoring-rhel9-operator@sha256:e14f4c3114dc80732a3f6f0a5510c18ea372a93fc3279e239e742a7ef7526e7b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/endpoint-monitoring-rhel9-operator@sha256:e14f4c3114dc80732a3f6f0a5510c18ea372a93fc3279e239e742a7ef7526e7b_amd64, rhacm2/endpoint-monitoring-rhel9-operator@sha256:e14f4c3114dc80732a3f6f0a5510c18ea372a93fc3279e239e742a7ef7526e7b_amd64 |
| Red Hat | rhacm2/governance-policy-propagator-rhel9@sha256:3e92356504b473eec59a74e57484f34b8a89f229bd4a4de109c4c78603799444_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | *, rhacm2/governance-policy-propagator-rhel9@sha256:3e92356504b473eec59a74e57484f34b8a89f229bd4a4de109c4c78603799444_arm64, rhacm2/governance-policy-propagator-rhel9@sha256:3e92356504b473eec59a74e57484f34b8a89f229bd4a4de109c4c78603799444_arm64 |
| Red Hat | rhacm2/multicloud-integrations-rhel9@sha256:f04f2ec78242b6362ef33845f8c83e659010e1d7a451c22dabdd81e76bf80ad1_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | *, rhacm2/multicloud-integrations-rhel9@sha256:f04f2ec78242b6362ef33845f8c83e659010e1d7a451c22dabdd81e76bf80ad1_amd64 |
| Red Hat | rhacm2/iam-policy-controller-rhel9@sha256:a71b89ea1e6887477be516ccc49e9d7fc4a57fe31932d09feeffa58b612e8b81_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/iam-policy-controller-rhel9@sha256:a71b89ea1e6887477be516ccc49e9d7fc4a57fe31932d09feeffa58b612e8b81_s390x, rhacm2/iam-policy-controller-rhel9@sha256:a71b89ea1e6887477be516ccc49e9d7fc4a57fe31932d09feeffa58b612e8b81_s390x |
| Red Hat | rhacm2/acm-must-gather-rhel9@sha256:7e28bc66e98a67c80b08046c2c71e56493c50d9303b339778aa419bb7b964717_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/acm-must-gather-rhel9@sha256:7e28bc66e98a67c80b08046c2c71e56493c50d9303b339778aa419bb7b964717_s390x, rhacm2/acm-must-gather-rhel9@sha256:7e28bc66e98a67c80b08046c2c71e56493c50d9303b339778aa419bb7b964717_s390x |
| Red Hat | rhacm2/kube-state-metrics-rhel9@sha256:2a7ce9c6f62f6ef5fb7fb1dc63991ab6423634da3b687e54eab30aa49b8ca29b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/kube-state-metrics-rhel9@sha256:2a7ce9c6f62f6ef5fb7fb1dc63991ab6423634da3b687e54eab30aa49b8ca29b_amd64, rhacm2/kube-state-metrics-rhel9@sha256:2a7ce9c6f62f6ef5fb7fb1dc63991ab6423634da3b687e54eab30aa49b8ca29b_amd64, * |
…and 330 more
Timeline
- Sep 3, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:6236 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2245180 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2251198 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6236.json advisory
- https://access.redhat.com/security/cve/CVE-2023-45142 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-45142 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-45142 advisory
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr advisory
- https://access.redhat.com/security/cve/CVE-2023-47108 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-47108 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-47108 advisory
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-8pgv-569h-w5rw advisory