VDB
RHSA-2024%3A7074
RHSA-2024%3A7074
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | network-observability/network-observability-rhel9-operator@sha256:dfd7eaa7057c5962c2ef8447246a86c04d8a9ba1742db8bbc03cf11a720b4cc4_amd64 as a component of NETOBSERV 1.6 for RHEL 9 | * |
| Red Hat | network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:baad5c13f37af2b2982f22e48ee82bac419243bca740e98a9a3ddd9d353405e2_arm64 as a component of NETOBSERV 1.6 for RHEL 9 | network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:baad5c13f37af2b2982f22e48ee82bac419243bca740e98a9a3ddd9d353405e2_arm64 |
| Red Hat | network-observability/network-observability-rhel9-operator@sha256:5d51fc74c54f9fb2b0a63022dae91cb9983d5ff1f75a4e5bd64f220f512b86b5_ppc64le as a component of NETOBSERV 1.6 for RHEL 9 | network-observability/network-observability-rhel9-operator@sha256:5d51fc74c54f9fb2b0a63022dae91cb9983d5ff1f75a4e5bd64f220f512b86b5_ppc64le |
| Red Hat | network-observability/network-observability-ebpf-agent-rhel9@sha256:e674e1a658c750003cdfb770448ea970e5a3007c8f6d15ca5c009435bd593454_s390x as a component of NETOBSERV 1.6 for RHEL 9 | * |
| Red Hat | network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:94aaf6b8f8bbee82a632a2f45efd9fbd7d5a62cffa54dde712f291ca48a3c33c_amd64 as a component of NETOBSERV 1.6 for RHEL 9 | network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:94aaf6b8f8bbee82a632a2f45efd9fbd7d5a62cffa54dde712f291ca48a3c33c_amd64 |
| Red Hat | network-observability/network-observability-ebpf-agent-rhel9@sha256:4f52e907c14a3240233769df66df8cfaa4af444d7c833b72db0e90752b185082_arm64 as a component of NETOBSERV 1.6 for RHEL 9 | * |
| Red Hat | network-observability/network-observability-ebpf-agent-rhel9@sha256:f13a031065ead5d0fd10ee0496bc8984c51b7589d33e786803918e24695f40b8_ppc64le as a component of NETOBSERV 1.6 for RHEL 9 | * |
| Red Hat | network-observability/network-observability-cli-rhel9@sha256:475787c23c73a94e4f7f4e8cd04a29f792ff2266f5f70bd92e684fccb2d4b36e_amd64 as a component of NETOBSERV 1.6 for RHEL 9 | network-observability/network-observability-cli-rhel9@sha256:475787c23c73a94e4f7f4e8cd04a29f792ff2266f5f70bd92e684fccb2d4b36e_amd64 |
| Red Hat | network-observability/network-observability-console-plugin-rhel9@sha256:bb6affd3b2483cc8bbab5f191f4fef9cd50363643a2d83cfd5b598fd05b87c7b_s390x as a component of NETOBSERV 1.6 for RHEL 9 | network-observability/network-observability-console-plugin-rhel9@sha256:bb6affd3b2483cc8bbab5f191f4fef9cd50363643a2d83cfd5b598fd05b87c7b_s390x |
| Red Hat | network-observability/network-observability-ebpf-agent-rhel9@sha256:591c264a688a7f02e325d509be7e8f234825c0c31630aff0773981f98c6dcefb_amd64 as a component of NETOBSERV 1.6 for RHEL 9 | * |
| Red Hat | network-observability/network-observability-cli-rhel9@sha256:08061099dd56003eba747caa38833fa8520494c248a63c823177f6c366a88ad6_arm64 as a component of NETOBSERV 1.6 for RHEL 9 | network-observability/network-observability-cli-rhel9@sha256:08061099dd56003eba747caa38833fa8520494c248a63c823177f6c366a88ad6_arm64 |
| Red Hat | network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ab8deae54f8209e8bb6824522262edb80a5520a6da7447a75294206684ed9bcf_ppc64le as a component of NETOBSERV 1.6 for RHEL 9 | network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ab8deae54f8209e8bb6824522262edb80a5520a6da7447a75294206684ed9bcf_ppc64le |
| Red Hat | network-observability/network-observability-rhel9-operator@sha256:cbafe19cf76b1e3f6ccc143090239e54592e7152b39b1ae4a7d817078457f392_s390x as a component of NETOBSERV 1.6 for RHEL 9 | network-observability/network-observability-rhel9-operator@sha256:cbafe19cf76b1e3f6ccc143090239e54592e7152b39b1ae4a7d817078457f392_s390x |
| Red Hat | network-observability/network-observability-operator-bundle@sha256:6f26d901829fc91f33fc4f493061a9fb86b95044cd2bd90851a8bbae1daf125c_arm64 as a component of NETOBSERV 1.6 for RHEL 9 | * |
| Red Hat | network-observability/network-observability-console-plugin-rhel9@sha256:7ac532d0e64293c00bd8d6ba5d7f75cff3c7061093012f4083f7aadd2ed15782_arm64 as a component of NETOBSERV 1.6 for RHEL 9 | network-observability/network-observability-console-plugin-rhel9@sha256:7ac532d0e64293c00bd8d6ba5d7f75cff3c7061093012f4083f7aadd2ed15782_arm64 |
| Red Hat | network-observability/network-observability-rhel9-operator@sha256:59153cd47887ec7a2f381f715a5b85d776f0d1c575a256b1c4446b5fbec51ca5_arm64 as a component of NETOBSERV 1.6 for RHEL 9 | network-observability/network-observability-rhel9-operator@sha256:59153cd47887ec7a2f381f715a5b85d776f0d1c575a256b1c4446b5fbec51ca5_arm64 |
| Red Hat | network-observability/network-observability-operator-bundle@sha256:ae97dd20d081d857eaf73746dbe84fb1aae87fe62e2c21cbf130628b874699c9_s390x as a component of NETOBSERV 1.6 for RHEL 9 | network-observability/network-observability-operator-bundle@sha256:ae97dd20d081d857eaf73746dbe84fb1aae87fe62e2c21cbf130628b874699c9_s390x |
| Red Hat | network-observability/network-observability-console-plugin-rhel9@sha256:f70153cd4f9dc1b56f379e03e7b90d198617789581106d5eff69930e00d73f10_amd64 as a component of NETOBSERV 1.6 for RHEL 9 | network-observability/network-observability-console-plugin-rhel9@sha256:f70153cd4f9dc1b56f379e03e7b90d198617789581106d5eff69930e00d73f10_amd64 |
| Red Hat | network-observability/network-observability-console-plugin-rhel9@sha256:cc5574259ed4d2402625c3d1d18edccc02a07475ca19111822a84085f86df49a_ppc64le as a component of NETOBSERV 1.6 for RHEL 9 | network-observability/network-observability-console-plugin-rhel9@sha256:cc5574259ed4d2402625c3d1d18edccc02a07475ca19111822a84085f86df49a_ppc64le |
| Red Hat | network-observability/network-observability-cli-rhel9@sha256:4c84586de47f2c4dc60ca83d1d295dc8e903d86e540df358bba198147695efd5_ppc64le as a component of NETOBSERV 1.6 for RHEL 9 | network-observability/network-observability-cli-rhel9@sha256:4c84586de47f2c4dc60ca83d1d295dc8e903d86e540df358bba198147695efd5_ppc64le |
…and 4 more
Timeline
- Sep 25, 2024 CVE Published
- Apr 30, 2026 CVE Updated
- Apr 30, 2026 Distribution Patch
- Apr 30, 2026 Distribution Patch
- Apr 30, 2026 Security Advisory
- Apr 30, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:7074 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2295310 issue
- https://issues.redhat.com/browse/NETOBSERV-1737 advisory
- https://issues.redhat.com/browse/NETOBSERV-1805 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7074.json advisory
- https://access.redhat.com/security/cve/CVE-2024-24791 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-24791 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-24791 advisory
- https://go.dev/cl/591255 advisory
- https://go.dev/issue/67555 advisory
- https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ advisory