VDB
RHSA-2024%3A6409
RHSA-2024%3A6409
PUBLISHED
CVSS 7.5 HIGH
A memory exhaustion flaw was found in the otelgrpc handler of open-telemetry. This flaw may allow a remote unauthenticated attacker to flood the peer address and port and exhaust the server's memory by sending multiple malicious requests, affecting the availability of the system.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cluster-authentication-rhel9-operator@sha256:136d60b721965e2dbc4e3a5f93d0b4e1efd4261dca24cd146e0e22cb9b680a67_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-authentication-rhel9-operator@sha256:136d60b721965e2dbc4e3a5f93d0b4e1efd4261dca24cd146e0e22cb9b680a67_arm64, *, openshift4/ose-cluster-authentication-rhel9-operator@sha256:136d60b721965e2dbc4e3a5f93d0b4e1efd4261dca24cd146e0e22cb9b680a67_arm64 |
| Red Hat | openshift4/ose-baremetal-runtimecfg-rhel9@sha256:269bd8c2eb94b8af1519bc965b62dc968900057ba20533d0ca03145f736037d5_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-baremetal-runtimecfg-rhel9@sha256:269bd8c2eb94b8af1519bc965b62dc968900057ba20533d0ca03145f736037d5_s390x, openshift4/ose-baremetal-runtimecfg-rhel9@sha256:269bd8c2eb94b8af1519bc965b62dc968900057ba20533d0ca03145f736037d5_s390x |
| Red Hat | openshift4/ose-operator-marketplace-rhel9@sha256:ceb303e070babc65bbcf44887e054173977073c95f927828ed15bf3ed4dc8865_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-operator-marketplace-rhel9@sha256:ceb303e070babc65bbcf44887e054173977073c95f927828ed15bf3ed4dc8865_ppc64le, *, openshift4/ose-operator-marketplace-rhel9@sha256:ceb303e070babc65bbcf44887e054173977073c95f927828ed15bf3ed4dc8865_ppc64le |
| Red Hat | openshift4/ose-openshift-controller-manager-rhel9@sha256:32a6d08c4e9a871a3c9fb06697713d5233a373e2f8bda52550febd2c9d802f81_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-openshift-controller-manager-rhel9@sha256:32a6d08c4e9a871a3c9fb06697713d5233a373e2f8bda52550febd2c9d802f81_amd64, openshift4/ose-openshift-controller-manager-rhel9@sha256:32a6d08c4e9a871a3c9fb06697713d5233a373e2f8bda52550febd2c9d802f81_amd64, * |
| Red Hat | openshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:85ea20452dfa49a5cf36dc28b299fe02c89f5f778c4f0f0f5d792880517d5ea3_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:85ea20452dfa49a5cf36dc28b299fe02c89f5f778c4f0f0f5d792880517d5ea3_ppc64le, openshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:85ea20452dfa49a5cf36dc28b299fe02c89f5f778c4f0f0f5d792880517d5ea3_ppc64le, openshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:85ea20452dfa49a5cf36dc28b299fe02c89f5f778c4f0f0f5d792880517d5ea3_ppc64le |
| Red Hat | openshift4/ose-libvirt-machine-controllers-rhel9@sha256:ec50c9ef2e1c7c00baa84322a9da184e47b5eb9df734e00d3901866161905a9b_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, *, openshift4/ose-libvirt-machine-controllers-rhel9@sha256:ec50c9ef2e1c7c00baa84322a9da184e47b5eb9df734e00d3901866161905a9b_s390x |
| Red Hat | openshift4/ose-aws-cluster-api-controllers-rhel9@sha256:4a958677b56d142846adbfbc9e832e7e624146b8cd3ee60900ce806e0e658128_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-aws-cluster-api-controllers-rhel9@sha256:4a958677b56d142846adbfbc9e832e7e624146b8cd3ee60900ce806e0e658128_amd64, openshift4/ose-aws-cluster-api-controllers-rhel9@sha256:4a958677b56d142846adbfbc9e832e7e624146b8cd3ee60900ce806e0e658128_amd64, openshift4/ose-aws-cluster-api-controllers-rhel9@sha256:4a958677b56d142846adbfbc9e832e7e624146b8cd3ee60900ce806e0e658128_amd64 |
| Red Hat | openshift4/ose-oauth-proxy-rhel9@sha256:d08b598a96dae6d40f42b9a1297e5a1abf768d980511eb3df1d1eed0bb3acf17_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-oauth-proxy-rhel9@sha256:d08b598a96dae6d40f42b9a1297e5a1abf768d980511eb3df1d1eed0bb3acf17_arm64, openshift4/ose-oauth-proxy-rhel9@sha256:d08b598a96dae6d40f42b9a1297e5a1abf768d980511eb3df1d1eed0bb3acf17_arm64, openshift4/ose-oauth-proxy-rhel9@sha256:d08b598a96dae6d40f42b9a1297e5a1abf768d980511eb3df1d1eed0bb3acf17_arm64 |
| Red Hat | openshift4/ose-multus-admission-controller-rhel9@sha256:e004db059c3fae40c13bb67465f3ab622b0b7d1107514a9e8ece66b8a800b391_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-multus-admission-controller-rhel9@sha256:e004db059c3fae40c13bb67465f3ab622b0b7d1107514a9e8ece66b8a800b391_arm64, openshift4/ose-multus-admission-controller-rhel9@sha256:e004db059c3fae40c13bb67465f3ab622b0b7d1107514a9e8ece66b8a800b391_arm64, * |
| Red Hat | openshift4/ose-cluster-config-api-rhel9@sha256:d46279f4f52fe06387373fb8ccfb9a4611678bc5ed1b2df61378ce6375eb3406_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-cluster-config-api-rhel9@sha256:d46279f4f52fe06387373fb8ccfb9a4611678bc5ed1b2df61378ce6375eb3406_s390x, openshift4/ose-cluster-config-api-rhel9@sha256:d46279f4f52fe06387373fb8ccfb9a4611678bc5ed1b2df61378ce6375eb3406_s390x |
| Red Hat | openshift4/ose-prometheus-config-reloader-rhel9@sha256:6676013d9467c8feee60cd0ab1c32e77d9572be4e1b32b933008d4ce67ecc8dc_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-prometheus-config-reloader-rhel9@sha256:6676013d9467c8feee60cd0ab1c32e77d9572be4e1b32b933008d4ce67ecc8dc_s390x, openshift4/ose-prometheus-config-reloader-rhel9@sha256:6676013d9467c8feee60cd0ab1c32e77d9572be4e1b32b933008d4ce67ecc8dc_s390x, * |
| Red Hat | openshift4/ose-cluster-config-rhel9-operator@sha256:378982d7f40841be14ba4d60f31bc577f3757525d38c72ff0a701e2567d34b88_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | openshift4/ose-cluster-etcd-rhel9-operator@sha256:9cfd47ce17554d15b4d8eee32e24ec95031c1f3e8b2764e68f5ed74cb2826027_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-etcd-rhel9-operator@sha256:9cfd47ce17554d15b4d8eee32e24ec95031c1f3e8b2764e68f5ed74cb2826027_arm64, openshift4/ose-cluster-etcd-rhel9-operator@sha256:9cfd47ce17554d15b4d8eee32e24ec95031c1f3e8b2764e68f5ed74cb2826027_arm64, * |
| Red Hat | openshift4/ose-etcd-rhel9@sha256:290622cc267d830075b1c33544ae3a816c6bb43f5307e5989f268dcbd4059e25_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, openshift4/ose-etcd-rhel9@sha256:290622cc267d830075b1c33544ae3a816c6bb43f5307e5989f268dcbd4059e25_arm64 |
| Red Hat | openshift4/oc-mirror-plugin-rhel9@sha256:243e9f391ece6da7da003af52b403ec66a6b18547318035d2fc8d90fd1e82e98_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/oc-mirror-plugin-rhel9@sha256:243e9f391ece6da7da003af52b403ec66a6b18547318035d2fc8d90fd1e82e98_s390x, openshift4/oc-mirror-plugin-rhel9@sha256:243e9f391ece6da7da003af52b403ec66a6b18547318035d2fc8d90fd1e82e98_s390x, openshift4/oc-mirror-plugin-rhel9@sha256:243e9f391ece6da7da003af52b403ec66a6b18547318035d2fc8d90fd1e82e98_s390x |
| Red Hat | openshift4/ose-coredns-rhel9@sha256:1115e3a04d01f7f54da26b6ce4f32c6f405cfccb3d84f2a50de22ec934b92d56_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-coredns-rhel9@sha256:1115e3a04d01f7f54da26b6ce4f32c6f405cfccb3d84f2a50de22ec934b92d56_amd64, *, openshift4/ose-coredns-rhel9@sha256:1115e3a04d01f7f54da26b6ce4f32c6f405cfccb3d84f2a50de22ec934b92d56_amd64 |
| Red Hat | openshift4/ose-oauth-proxy-rhel9@sha256:d2dd4b1d817798b38c69ec3501c54dba219cae37915a8f2e9e1bd879fa63c764_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-oauth-proxy-rhel9@sha256:d2dd4b1d817798b38c69ec3501c54dba219cae37915a8f2e9e1bd879fa63c764_s390x, openshift4/ose-oauth-proxy-rhel9@sha256:d2dd4b1d817798b38c69ec3501c54dba219cae37915a8f2e9e1bd879fa63c764_s390x, openshift4/ose-oauth-proxy-rhel9@sha256:d2dd4b1d817798b38c69ec3501c54dba219cae37915a8f2e9e1bd879fa63c764_s390x |
| Red Hat | openshift4/ose-vsphere-cluster-api-controllers-rhel9@sha256:87a36a9e577134dc06c3b1fbd6411e775c928f02b0e27720173c95089af8c5ed_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-vsphere-cluster-api-controllers-rhel9@sha256:87a36a9e577134dc06c3b1fbd6411e775c928f02b0e27720173c95089af8c5ed_amd64, openshift4/ose-vsphere-cluster-api-controllers-rhel9@sha256:87a36a9e577134dc06c3b1fbd6411e775c928f02b0e27720173c95089af8c5ed_amd64, * |
| Red Hat | openshift4/ose-baremetal-rhel9-operator@sha256:b936584846eedde2075cdada8111cecffb20f11dfabc4b1477a9508949ac5bc8_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-baremetal-rhel9-operator@sha256:b936584846eedde2075cdada8111cecffb20f11dfabc4b1477a9508949ac5bc8_ppc64le, *, openshift4/ose-baremetal-rhel9-operator@sha256:b936584846eedde2075cdada8111cecffb20f11dfabc4b1477a9508949ac5bc8_ppc64le |
| Red Hat | openshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:85ea20452dfa49a5cf36dc28b299fe02c89f5f778c4f0f0f5d792880517d5ea3_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:85ea20452dfa49a5cf36dc28b299fe02c89f5f778c4f0f0f5d792880517d5ea3_ppc64le, *, openshift4/ose-cluster-kube-controller-manager-rhel9-operator@sha256:85ea20452dfa49a5cf36dc28b299fe02c89f5f778c4f0f0f5d792880517d5ea3_ppc64le |
…and 876 more
Timeline
- Sep 11, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:6409 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2251198 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2268046 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2294000 issue
- https://issues.redhat.com/browse/OCPBUGS-31467 advisory
- https://issues.redhat.com/browse/OCPBUGS-33938 advisory
- https://issues.redhat.com/browse/OCPBUGS-34842 advisory
- https://issues.redhat.com/browse/OCPBUGS-37049 advisory
- https://issues.redhat.com/browse/OCPBUGS-37408 advisory
- https://issues.redhat.com/browse/OCPBUGS-38377 advisory
- https://issues.redhat.com/browse/OCPBUGS-38400 advisory
- https://issues.redhat.com/browse/OCPBUGS-38712 advisory
- https://issues.redhat.com/browse/OCPBUGS-38895 advisory
- https://issues.redhat.com/browse/OCPBUGS-38939 advisory
- https://issues.redhat.com/browse/OCPBUGS-38943 advisory
- https://issues.redhat.com/browse/OCPBUGS-39077 advisory
- https://issues.redhat.com/browse/OCPBUGS-39085 advisory
- https://issues.redhat.com/browse/OCPBUGS-39112 advisory
- https://issues.redhat.com/browse/OCPBUGS-39172 advisory
…and 15 more