VDB
RHSA-2024%3A6637
RHSA-2024%3A6637
PUBLISHED
CVSS 7.5 HIGH
A memory exhaustion flaw was found in the otelgrpc handler of open-telemetry. This flaw may allow a remote unauthenticated attacker to flood the peer address and port and exhaust the server's memory by sending multiple malicious requests, affecting the availability of the system.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/network-tools-rhel8@sha256:822eebd8c0ed4e26bbdb388eadd7d165967d7482055f15231e826089f7529982_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/network-tools-rhel8@sha256:822eebd8c0ed4e26bbdb388eadd7d165967d7482055f15231e826089f7529982_amd64, openshift4/network-tools-rhel8@sha256:822eebd8c0ed4e26bbdb388eadd7d165967d7482055f15231e826089f7529982_amd64 |
| Red Hat | openshift4/ose-cli-artifacts@sha256:8c9c2dac99379e9e7218f87f9bc365c7a0b31089e4a2e33886f20e42094d9666_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cli-artifacts@sha256:8c9c2dac99379e9e7218f87f9bc365c7a0b31089e4a2e33886f20e42094d9666_arm64, openshift4/ose-cli-artifacts@sha256:8c9c2dac99379e9e7218f87f9bc365c7a0b31089e4a2e33886f20e42094d9666_arm64 |
| Red Hat | openshift4/ose-openshift-controller-manager-rhel9@sha256:032e72acac9f00c7bba3ec396b012a52e9e9b8d0b41edb5d45354fe40334d211_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-openshift-controller-manager-rhel9@sha256:032e72acac9f00c7bba3ec396b012a52e9e9b8d0b41edb5d45354fe40334d211_amd64 |
| Red Hat | openshift4/ose-agent-installer-utils-rhel9@sha256:efa0c44a23dcc000cdcdd194fd0d3be735bb947628236d85826925eed690fb97_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-agent-installer-utils-rhel9@sha256:efa0c44a23dcc000cdcdd194fd0d3be735bb947628236d85826925eed690fb97_ppc64le, openshift4/ose-agent-installer-utils-rhel9@sha256:efa0c44a23dcc000cdcdd194fd0d3be735bb947628236d85826925eed690fb97_ppc64le |
| Red Hat | openshift4/ose-cluster-config-api-rhel9@sha256:ffc74f37c54682c65587a65e96c1096d82b0c4e65f1652d0ef388456591b1f5b_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-config-api-rhel9@sha256:ffc74f37c54682c65587a65e96c1096d82b0c4e65f1652d0ef388456591b1f5b_amd64, openshift4/ose-cluster-config-api-rhel9@sha256:ffc74f37c54682c65587a65e96c1096d82b0c4e65f1652d0ef388456591b1f5b_amd64 |
| Red Hat | openshift4/ose-openshift-apiserver-rhel9@sha256:58a84b700934a2888d3c7444010b7eed61bc5289c9df116be80edfdf2eb43de3_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-openshift-apiserver-rhel9@sha256:58a84b700934a2888d3c7444010b7eed61bc5289c9df116be80edfdf2eb43de3_s390x, openshift4/ose-openshift-apiserver-rhel9@sha256:58a84b700934a2888d3c7444010b7eed61bc5289c9df116be80edfdf2eb43de3_s390x |
| Red Hat | openshift4/ose-cluster-baremetal-operator-rhel9@sha256:a94301999c8061afc0341f532c6504031a0c8946431715c7c6d4c3498557cafa_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-baremetal-operator-rhel9@sha256:a94301999c8061afc0341f532c6504031a0c8946431715c7c6d4c3498557cafa_s390x, openshift4/ose-cluster-baremetal-operator-rhel9@sha256:a94301999c8061afc0341f532c6504031a0c8946431715c7c6d4c3498557cafa_s390x |
| Red Hat | openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:882b253cec66887235f7d0b6bb2b69305e57908328179011b44ca45e07b9f3ef_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:882b253cec66887235f7d0b6bb2b69305e57908328179011b44ca45e07b9f3ef_amd64, * |
| Red Hat | openshift4/ose-agent-installer-utils-rhel9@sha256:cfca11e781fb3e80814316ecb6a6814b29359cb5c1694001217d4cc6f398615c_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-agent-installer-utils-rhel9@sha256:cfca11e781fb3e80814316ecb6a6814b29359cb5c1694001217d4cc6f398615c_s390x |
| Red Hat | openshift4/ose-csi-snapshot-validation-webhook-rhel9@sha256:6146535f96ead2866e2df43c8d279fa3333c4cd70ba95c43e7ef632aee9566a4_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-csi-snapshot-validation-webhook-rhel9@sha256:6146535f96ead2866e2df43c8d279fa3333c4cd70ba95c43e7ef632aee9566a4_arm64, openshift4/ose-csi-snapshot-validation-webhook-rhel9@sha256:6146535f96ead2866e2df43c8d279fa3333c4cd70ba95c43e7ef632aee9566a4_arm64 |
| Red Hat | openshift4/ose-cluster-platform-operators-manager-rhel9@sha256:5903e8f759153096fbb8119fa3274ce8c4c414305123fa808297e9e553985262_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-platform-operators-manager-rhel9@sha256:5903e8f759153096fbb8119fa3274ce8c4c414305123fa808297e9e553985262_arm64, openshift4/ose-cluster-platform-operators-manager-rhel9@sha256:5903e8f759153096fbb8119fa3274ce8c4c414305123fa808297e9e553985262_arm64 |
| Red Hat | openshift4/ose-libvirt-machine-controllers-rhel9@sha256:697509033256eae122d3f54ffb1e6df5e8491c29d983bbd5d75d5e0643c4111d_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-libvirt-machine-controllers-rhel9@sha256:697509033256eae122d3f54ffb1e6df5e8491c29d983bbd5d75d5e0643c4111d_arm64, openshift4/ose-libvirt-machine-controllers-rhel9@sha256:697509033256eae122d3f54ffb1e6df5e8491c29d983bbd5d75d5e0643c4111d_arm64 |
| Red Hat | openshift4/ose-machine-api-rhel9-operator@sha256:e9aff0b9fe79468387df0ff24cbedb0ee31de755c33e04488fede234bc12550f_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-machine-api-rhel9-operator@sha256:e9aff0b9fe79468387df0ff24cbedb0ee31de755c33e04488fede234bc12550f_amd64, openshift4/ose-machine-api-rhel9-operator@sha256:e9aff0b9fe79468387df0ff24cbedb0ee31de755c33e04488fede234bc12550f_amd64 |
| Red Hat | openshift4/ose-baremetal-rhel9-operator@sha256:9da5adcd6b8a6eeb7293b25aae1ed8230649ae74a8e5ea8f645d4690d7918986_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-baremetal-rhel9-operator@sha256:9da5adcd6b8a6eeb7293b25aae1ed8230649ae74a8e5ea8f645d4690d7918986_ppc64le |
| Red Hat | openshift4/ose-cluster-storage-rhel9-operator@sha256:75ac5766ba6199a55dfb3d6ac0c122bdaf318938ecff5f5aba2f756855bcdede_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-storage-rhel9-operator@sha256:75ac5766ba6199a55dfb3d6ac0c122bdaf318938ecff5f5aba2f756855bcdede_s390x, * |
| Red Hat | openshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:57efb2b23e2b98175983e3c14cfb12429f9fd416cc1a360b92637afa375a9c35_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:57efb2b23e2b98175983e3c14cfb12429f9fd416cc1a360b92637afa375a9c35_ppc64le, openshift4/ose-openstack-cinder-csi-driver-rhel9@sha256:57efb2b23e2b98175983e3c14cfb12429f9fd416cc1a360b92637afa375a9c35_ppc64le |
| Red Hat | openshift4/ose-powervs-block-csi-driver-rhel9@sha256:7fc92ed20499ea81ab2d0cfe44e27d261ffac8fef79da2314ed73f550a57020f_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-powervs-block-csi-driver-rhel9@sha256:7fc92ed20499ea81ab2d0cfe44e27d261ffac8fef79da2314ed73f550a57020f_ppc64le, * |
| Red Hat | openshift4/ose-cluster-kube-cluster-api-rhel9-operator@sha256:7ec94f11d1c92e6e6333588e1470e24dd11b3a707d2f92d97969a8a00dd4fc68_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-kube-cluster-api-rhel9-operator@sha256:7ec94f11d1c92e6e6333588e1470e24dd11b3a707d2f92d97969a8a00dd4fc68_ppc64le, openshift4/ose-cluster-kube-cluster-api-rhel9-operator@sha256:7ec94f11d1c92e6e6333588e1470e24dd11b3a707d2f92d97969a8a00dd4fc68_ppc64le |
| Red Hat | openshift4/ose-vsphere-csi-driver-syncer-rhel9@sha256:7bfd84411803c0bf0567fc4b81eec3132082e3bc260b4faa9665ae849bb6489f_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-vsphere-csi-driver-syncer-rhel9@sha256:7bfd84411803c0bf0567fc4b81eec3132082e3bc260b4faa9665ae849bb6489f_amd64, * |
| Red Hat | openshift4/ose-kube-storage-version-migrator-rhel9@sha256:a7045fdfbf24101cd4a1fbee3a536ca89a20511fd69d72e5de2b32995c82600f_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-kube-storage-version-migrator-rhel9@sha256:a7045fdfbf24101cd4a1fbee3a536ca89a20511fd69d72e5de2b32995c82600f_arm64 |
…and 920 more
Timeline
- Sep 18, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 4, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:6637 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2251198 issue
- https://issues.redhat.com/browse/OCPBUGS-24632 advisory
- https://issues.redhat.com/browse/OCPBUGS-31447 advisory
- https://issues.redhat.com/browse/OCPBUGS-37551 advisory
- https://issues.redhat.com/browse/OCPBUGS-38969 advisory
- https://issues.redhat.com/browse/OCPBUGS-38970 advisory
- https://issues.redhat.com/browse/OCPBUGS-39016 advisory
- https://issues.redhat.com/browse/OCPBUGS-39426 advisory
- https://issues.redhat.com/browse/OCPBUGS-41235 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6637.json advisory
- https://access.redhat.com/security/cve/CVE-2023-47108 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-47108 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-47108 advisory
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-8pgv-569h-w5rw advisory