VDB
RHSA-2024%3A6632
RHSA-2024%3A6632
PUBLISHED
CVSS 7.5 HIGH
A memory exhaustion flaw was found in the otelgrpc handler of open-telemetry. This flaw may allow a remote unauthenticated attacker to flood the peer address and port and exhaust the server's memory by sending multiple malicious requests, affecting the availability of the system.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-network-metrics-daemon-rhel9@sha256:4e591adf7b2fda683f712476dbd3c4551d1ef4ccff65442a4d3473208f8ee1d4_s390x as a component of Red Hat OpenShift Container Platform 4.16 | *, * |
| Red Hat | openshift4/ose-installer-altinfra-rhel9@sha256:a210f32caee882c2be6df34e3026efdda9d5595bd8db842fc5db3a130da6dfcc_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-installer-altinfra-rhel9@sha256:a210f32caee882c2be6df34e3026efdda9d5595bd8db842fc5db3a130da6dfcc_amd64, openshift4/ose-installer-altinfra-rhel9@sha256:a210f32caee882c2be6df34e3026efdda9d5595bd8db842fc5db3a130da6dfcc_amd64 |
| Red Hat | openshift4/ose-machine-api-rhel9-operator@sha256:2517d34eb0e12d5dac4c614a3e7b343cd6f6d2933c9f80e36a67a895ac366c23_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-machine-api-rhel9-operator@sha256:2517d34eb0e12d5dac4c614a3e7b343cd6f6d2933c9f80e36a67a895ac366c23_ppc64le |
| Red Hat | openshift4/ose-cluster-config-rhel9-operator@sha256:1f9ecb83189bd881fcc80235d410c50ffa4beabceed01153ec463b9e2858be62_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-cluster-config-rhel9-operator@sha256:1f9ecb83189bd881fcc80235d410c50ffa4beabceed01153ec463b9e2858be62_s390x, openshift4/ose-cluster-config-rhel9-operator@sha256:1f9ecb83189bd881fcc80235d410c50ffa4beabceed01153ec463b9e2858be62_s390x |
| Red Hat | openshift4/ose-machine-api-provider-aws-rhel9@sha256:cf21c5d8a612f77b557d71730b45a64f539a8983dc8e52d7a52d6be92d71d79e_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-machine-api-provider-aws-rhel9@sha256:cf21c5d8a612f77b557d71730b45a64f539a8983dc8e52d7a52d6be92d71d79e_arm64, openshift4/ose-machine-api-provider-aws-rhel9@sha256:cf21c5d8a612f77b557d71730b45a64f539a8983dc8e52d7a52d6be92d71d79e_arm64 |
| Red Hat | openshift4/ose-gcp-cluster-api-controllers-rhel9@sha256:c70591a8078e91e52098b91de2ab5906995d88d494c383ca89246eafe694317d_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-gcp-cluster-api-controllers-rhel9@sha256:c70591a8078e91e52098b91de2ab5906995d88d494c383ca89246eafe694317d_arm64 |
| Red Hat | openshift4/ose-csi-external-snapshotter-rhel9@sha256:aceacef58e57b641a3696fbc01f2cae30ef652c51ece826289df5bfc4f9c5b9a_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-csi-external-snapshotter-rhel9@sha256:aceacef58e57b641a3696fbc01f2cae30ef652c51ece826289df5bfc4f9c5b9a_ppc64le |
| Red Hat | openshift4/ose-k8s-prometheus-adapter-rhel9@sha256:18aff634186663ec5e7d034f9ab50f23f0ddf30ed54c007377fb089d9150b1cb_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-k8s-prometheus-adapter-rhel9@sha256:18aff634186663ec5e7d034f9ab50f23f0ddf30ed54c007377fb089d9150b1cb_s390x, openshift4/ose-k8s-prometheus-adapter-rhel9@sha256:18aff634186663ec5e7d034f9ab50f23f0ddf30ed54c007377fb089d9150b1cb_s390x |
| Red Hat | openshift4/ose-keepalived-ipfailover-rhel9@sha256:4b9c63c66004962a687e8335c70641e10a53e53a360f5fed38e46b4793fea92e_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-keepalived-ipfailover-rhel9@sha256:4b9c63c66004962a687e8335c70641e10a53e53a360f5fed38e46b4793fea92e_arm64, openshift4/ose-keepalived-ipfailover-rhel9@sha256:4b9c63c66004962a687e8335c70641e10a53e53a360f5fed38e46b4793fea92e_arm64 |
| Red Hat | openshift4/ose-csi-driver-shared-resource-rhel9@sha256:cb94872bfcafe40f5804dc669d998665340c2ff652ef2d7f008c0baf4dd83e3a_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, * |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:aca93955c58891ff65424eb953891c3a65da2c5ef99b80a51c4f663c2bcd7722_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-ovn-kubernetes-rhel9@sha256:aca93955c58891ff65424eb953891c3a65da2c5ef99b80a51c4f663c2bcd7722_arm64, * |
| Red Hat | openshift4/azure-kms-encryption-provider-rhel9@sha256:68524f267c2aca4324dbac4844892e7c728e24ae4cedc820b20890461555ae37_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/azure-kms-encryption-provider-rhel9@sha256:68524f267c2aca4324dbac4844892e7c728e24ae4cedc820b20890461555ae37_ppc64le, * |
| Red Hat | openshift4/ose-monitoring-plugin-rhel9@sha256:0dcbf90978025525c92b33a06f0a07061a01df5324b776a3a7a7c6ce1ee73004_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-monitoring-plugin-rhel9@sha256:0dcbf90978025525c92b33a06f0a07061a01df5324b776a3a7a7c6ce1ee73004_s390x, openshift4/ose-monitoring-plugin-rhel9@sha256:0dcbf90978025525c92b33a06f0a07061a01df5324b776a3a7a7c6ce1ee73004_s390x |
| Red Hat | openshift4/oc-mirror-plugin-rhel9@sha256:613504ff49a4e3a24e66b449ebd142c4a23b499955c92a939eb48be6d3f9bb8a_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/oc-mirror-plugin-rhel9@sha256:613504ff49a4e3a24e66b449ebd142c4a23b499955c92a939eb48be6d3f9bb8a_s390x, openshift4/oc-mirror-plugin-rhel9@sha256:613504ff49a4e3a24e66b449ebd142c4a23b499955c92a939eb48be6d3f9bb8a_s390x |
| Red Hat | openshift4/ose-cluster-version-rhel9-operator@sha256:92ff3624913574ffcf305396de7ac81dea066a7879395ac7439e3ebb8c0169a6_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-cluster-version-rhel9-operator@sha256:92ff3624913574ffcf305396de7ac81dea066a7879395ac7439e3ebb8c0169a6_arm64 |
| Red Hat | openshift4/ose-tests-rhel9@sha256:11c721f88fc35aaa40e40b3d8881d208432a2e45b548e134e685c08142083a39_s390x as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-tests-rhel9@sha256:11c721f88fc35aaa40e40b3d8881d208432a2e45b548e134e685c08142083a39_s390x |
| Red Hat | openshift4/ose-prom-label-proxy-rhel9@sha256:1023f836535d17ed97e7ec2a840d8e520c7c249a111db2667e617ff33613c82a_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-prom-label-proxy-rhel9@sha256:1023f836535d17ed97e7ec2a840d8e520c7c249a111db2667e617ff33613c82a_ppc64le, openshift4/ose-prom-label-proxy-rhel9@sha256:1023f836535d17ed97e7ec2a840d8e520c7c249a111db2667e617ff33613c82a_ppc64le |
| Red Hat | openshift4/ose-cluster-storage-rhel9-operator@sha256:79895632819d88f4e7457a05b4f9eda4fbc5f0790fb2a0f03a7c533170592ff0_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-cluster-storage-rhel9-operator@sha256:79895632819d88f4e7457a05b4f9eda4fbc5f0790fb2a0f03a7c533170592ff0_amd64, openshift4/ose-cluster-storage-rhel9-operator@sha256:79895632819d88f4e7457a05b4f9eda4fbc5f0790fb2a0f03a7c533170592ff0_amd64 |
| Red Hat | openshift4/ose-cluster-api-rhel9@sha256:e582ae1575b5c4b1b93237f3788e75b1eab18296d40d8364b9e6e5e921c33d84_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-cluster-api-rhel9@sha256:e582ae1575b5c4b1b93237f3788e75b1eab18296d40d8364b9e6e5e921c33d84_ppc64le |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel9@sha256:9a8e30a27b75770c6acd3badc696a33dad06a263987d183915b05a35bc64fdd0_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-agent-installer-csr-approver-rhel9@sha256:9a8e30a27b75770c6acd3badc696a33dad06a263987d183915b05a35bc64fdd0_ppc64le |
…and 1268 more
Timeline
- Sep 17, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 4, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:6632 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2251198 issue
- https://issues.redhat.com/browse/OCPBUGS-33199 advisory
- https://issues.redhat.com/browse/OCPBUGS-34803 advisory
- https://issues.redhat.com/browse/OCPBUGS-38062 advisory
- https://issues.redhat.com/browse/OCPBUGS-38424 advisory
- https://issues.redhat.com/browse/OCPBUGS-38697 advisory
- https://issues.redhat.com/browse/OCPBUGS-38822 advisory
- https://issues.redhat.com/browse/OCPBUGS-38914 advisory
- https://issues.redhat.com/browse/OCPBUGS-38956 advisory
- https://issues.redhat.com/browse/OCPBUGS-38997 advisory
- https://issues.redhat.com/browse/OCPBUGS-39015 advisory
- https://issues.redhat.com/browse/OCPBUGS-39293 advisory
- https://issues.redhat.com/browse/OCPBUGS-39323 advisory
- https://issues.redhat.com/browse/OCPBUGS-39324 advisory
- https://issues.redhat.com/browse/OCPBUGS-39412 advisory
- https://issues.redhat.com/browse/OCPBUGS-39468 advisory
- https://issues.redhat.com/browse/OCPBUGS-39528 advisory
- https://issues.redhat.com/browse/OCPBUGS-41217 advisory
…and 9 more