VDB
RHSA-2024%3A6811
RHSA-2024%3A6811
PUBLISHED
CVSS 7.5 HIGH
A memory leak was found in the otelhttp handler of open-telemetry. This flaw allows a remote, unauthenticated attacker to exhaust the server's memory by sending many malicious requests, affecting the availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-ironic-rhel9@sha256:7312534d5534b4c2f71b96ae318b553504c371ced2fe0913a00c5c0c58fb8584_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ironic-rhel9@sha256:7312534d5534b4c2f71b96ae318b553504c371ced2fe0913a00c5c0c58fb8584_arm64, openshift4/ose-ironic-rhel9@sha256:7312534d5534b4c2f71b96ae318b553504c371ced2fe0913a00c5c0c58fb8584_arm64 |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel8@sha256:24db35465b0c40b0c755f8cd11ed5ff075374bf794748898533a403ca1f20331_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-agent-installer-node-agent-rhel8@sha256:24db35465b0c40b0c755f8cd11ed5ff075374bf794748898533a403ca1f20331_arm64, * |
| Red Hat | openshift4/ose-machine-os-images-rhel8@sha256:e31e0ce35ff0b49fb2228fcadf1c8bbfdf5974911ee9f69f5eb80bdcfbc1e3b1_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-machine-os-images-rhel8@sha256:e31e0ce35ff0b49fb2228fcadf1c8bbfdf5974911ee9f69f5eb80bdcfbc1e3b1_amd64, openshift4/ose-machine-os-images-rhel8@sha256:e31e0ce35ff0b49fb2228fcadf1c8bbfdf5974911ee9f69f5eb80bdcfbc1e3b1_amd64 |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:19a83afd6d759ed1f1a5afb77fb03f52f60208248d0bcce23dbda255d2f1dfff_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ovn-kubernetes-rhel9@sha256:19a83afd6d759ed1f1a5afb77fb03f52f60208248d0bcce23dbda255d2f1dfff_amd64, *, openshift4/ose-ovn-kubernetes-rhel9@sha256:19a83afd6d759ed1f1a5afb77fb03f52f60208248d0bcce23dbda255d2f1dfff_amd64 |
| Red Hat | openshift4/ose-baremetal-installer-rhel8@sha256:a866c3472ea874f7e3318b06fa147fe760361df70b023f7b04a93d364ceeaf5b_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-baremetal-installer-rhel8@sha256:a866c3472ea874f7e3318b06fa147fe760361df70b023f7b04a93d364ceeaf5b_arm64, *, openshift4/ose-baremetal-installer-rhel8@sha256:a866c3472ea874f7e3318b06fa147fe760361df70b023f7b04a93d364ceeaf5b_arm64 |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:1077d3a94c163b7a0f8be499c9c674e102cd522815613f132fe3fdaeba328107_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ovn-kubernetes-rhel9@sha256:1077d3a94c163b7a0f8be499c9c674e102cd522815613f132fe3fdaeba328107_arm64, openshift4/ose-ovn-kubernetes-rhel9@sha256:1077d3a94c163b7a0f8be499c9c674e102cd522815613f132fe3fdaeba328107_arm64 |
| Red Hat | openshift4/ose-cluster-openshift-controller-manager-operator@sha256:ac442fe227fcc45a02306c6e46c3e98d5181a9a61c2a4b7b9a34dc85a52cb01c_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-cluster-openshift-controller-manager-operator@sha256:ac442fe227fcc45a02306c6e46c3e98d5181a9a61c2a4b7b9a34dc85a52cb01c_arm64 |
| Red Hat | openshift4/ose-etcd-rhel9@sha256:522efab4e827644c8373f4c8044c9315ff3dc01d071178bafdb252ba6739dfe1_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-etcd-rhel9@sha256:522efab4e827644c8373f4c8044c9315ff3dc01d071178bafdb252ba6739dfe1_s390x, openshift4/ose-etcd-rhel9@sha256:522efab4e827644c8373f4c8044c9315ff3dc01d071178bafdb252ba6739dfe1_s390x, * |
| Red Hat | openshift4/ose-operator-lifecycle-manager@sha256:49c425a6f892439f1150c69321d95ccab2e6f87959ca932fa8ca942bb1518b9b_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-openshift-controller-manager-rhel8@sha256:032c7bec1fd9b6a72eabe55581fcf2c87e72ef752de46cf040fb938723d824ed_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-openshift-controller-manager-rhel8@sha256:032c7bec1fd9b6a72eabe55581fcf2c87e72ef752de46cf040fb938723d824ed_s390x, * |
| Red Hat | openshift4/ose-installer@sha256:a6ee24081fd1fecfd39b92b1a1df8a8405f89500ef9c802237e43620605b33d8_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-installer@sha256:a6ee24081fd1fecfd39b92b1a1df8a8405f89500ef9c802237e43620605b33d8_s390x, openshift4/ose-installer@sha256:a6ee24081fd1fecfd39b92b1a1df8a8405f89500ef9c802237e43620605b33d8_s390x |
| Red Hat | openshift4/ose-machine-os-images-rhel8@sha256:e2c077be959d76be265efc1f2d6ae73c9127de745c5ec2ca4d7301a8becca493_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-machine-os-images-rhel8@sha256:e2c077be959d76be265efc1f2d6ae73c9127de745c5ec2ca4d7301a8becca493_ppc64le, openshift4/ose-machine-os-images-rhel8@sha256:e2c077be959d76be265efc1f2d6ae73c9127de745c5ec2ca4d7301a8becca493_ppc64le |
| Red Hat | openshift4/ose-tests@sha256:1e373acda0f04766093977471726032df015b18857216d3b3e88075d85bebb25_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-tests@sha256:1e373acda0f04766093977471726032df015b18857216d3b3e88075d85bebb25_s390x |
| Red Hat | openshift4/ose-hypershift-rhel8@sha256:b84e681462d715a3f39b0dcc3649d81127dd910918a2b3f2c5fe78b310b62406_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-hypershift-rhel8@sha256:b84e681462d715a3f39b0dcc3649d81127dd910918a2b3f2c5fe78b310b62406_s390x, * |
| Red Hat | openshift4/ose-hyperkube@sha256:a95b74702cc041f480b988a77ba4719a2500ac31937f7139fbdbe74c0436a0cc_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-hyperkube@sha256:a95b74702cc041f480b988a77ba4719a2500ac31937f7139fbdbe74c0436a0cc_arm64, *, openshift4/ose-hyperkube@sha256:a95b74702cc041f480b988a77ba4719a2500ac31937f7139fbdbe74c0436a0cc_arm64 |
| Red Hat | openshift4/ose-powervs-machine-controllers-rhel8@sha256:705e7405672c2135a24c1e0284ac10e2fce48499c79565af5324f35fce9c2030_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-powervs-machine-controllers-rhel8@sha256:705e7405672c2135a24c1e0284ac10e2fce48499c79565af5324f35fce9c2030_ppc64le |
| Red Hat | openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:1513a3090fc0bcb19098caef3523bd8c9a0b291ae3ebfdf1e659ff2f8f36acc3_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:1513a3090fc0bcb19098caef3523bd8c9a0b291ae3ebfdf1e659ff2f8f36acc3_arm64, * |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:bf0217bc4a5a3a5091db5e8f767c1abbf49cb93085c44b55ca05c2c742dd3ef0_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/driver-toolkit-rhel9@sha256:bf0217bc4a5a3a5091db5e8f767c1abbf49cb93085c44b55ca05c2c742dd3ef0_s390x, openshift4/driver-toolkit-rhel9@sha256:bf0217bc4a5a3a5091db5e8f767c1abbf49cb93085c44b55ca05c2c742dd3ef0_s390x |
| Red Hat | openshift4/ose-operator-registry@sha256:e6457a3b45a75521c238f9036a67db50f046f71cf26b7b0d66752d99f6c593fd_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-operator-registry@sha256:e6457a3b45a75521c238f9036a67db50f046f71cf26b7b0d66752d99f6c593fd_arm64, * |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel8@sha256:24db35465b0c40b0c755f8cd11ed5ff075374bf794748898533a403ca1f20331_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-agent-installer-node-agent-rhel8@sha256:24db35465b0c40b0c755f8cd11ed5ff075374bf794748898533a403ca1f20331_arm64, *, * |
…and 210 more
Timeline
- Sep 25, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:6811 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2245180 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2251198 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2268273 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2294000 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2302487 issue
- https://issues.redhat.com/browse/OCPBUGS-37921 advisory
- https://issues.redhat.com/browse/OCPBUGS-38254 advisory
- https://issues.redhat.com/browse/OCPBUGS-38264 advisory
- https://issues.redhat.com/browse/OCPBUGS-41515 advisory
- https://issues.redhat.com/browse/OCPBUGS-41594 advisory
- https://issues.redhat.com/browse/OCPBUGS-41723 advisory
- https://issues.redhat.com/browse/OCPBUGS-41786 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6811.json advisory
- https://access.redhat.com/security/cve/CVE-2023-45142 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-45142 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-45142 advisory
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr advisory
- https://access.redhat.com/security/cve/CVE-2023-45288 advisory
…and 15 more