VDB

RHSA-2024%3A7184

RHSA-2024%3A7184 PUBLISHED CVSS 7.5 HIGH

A flaw was found in goproxy, which is vulnerable to a denial of service caused by improper input validation. This flaw allows a remote attacker can cause the goproxy server to crash by sending a specially crafted HTTP request to the HTTPS page, replacing the path "/" with an asterisk "*".

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-kube-proxy@sha256:484159711284f023319e79812dd03492b1ffcc21a15a869041c441b5669ab5cf_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-kube-proxy@sha256:484159711284f023319e79812dd03492b1ffcc21a15a869041c441b5669ab5cf_amd64, *
Red Hatopenshift4/ose-cluster-policy-controller-rhel8@sha256:8476f0e6397fb09111326a93e3eb6a21c46eb980edb35c8a920a00831f3ab0a3_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-cluster-policy-controller-rhel8@sha256:8476f0e6397fb09111326a93e3eb6a21c46eb980edb35c8a920a00831f3ab0a3_ppc64le, openshift4/ose-cluster-policy-controller-rhel8@sha256:8476f0e6397fb09111326a93e3eb6a21c46eb980edb35c8a920a00831f3ab0a3_ppc64le, openshift4/ose-cluster-policy-controller-rhel8@sha256:8476f0e6397fb09111326a93e3eb6a21c46eb980edb35c8a920a00831f3ab0a3_ppc64le
Red Hatopenshift4/ose-machine-api-provider-aws-rhel8@sha256:1026114c65966585ad3c213d7fc33170c6e38f40a48f880f649cb7c48d77642e_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-machine-api-provider-aws-rhel8@sha256:1026114c65966585ad3c213d7fc33170c6e38f40a48f880f649cb7c48d77642e_amd64, openshift4/ose-machine-api-provider-aws-rhel8@sha256:1026114c65966585ad3c213d7fc33170c6e38f40a48f880f649cb7c48d77642e_amd64, *
Red Hatopenshift4/ose-ibm-vpc-node-label-updater-rhel8@sha256:ab8c3c9d88ae0e0de3b19cda71706ca42a6368098a63a86d99912d62d1b52976_s390x as a component of Red Hat OpenShift Container Platform 4.14*, *, openshift4/ose-ibm-vpc-node-label-updater-rhel8@sha256:ab8c3c9d88ae0e0de3b19cda71706ca42a6368098a63a86d99912d62d1b52976_s390x
Red Hatopenshift4/ose-docker-registry@sha256:51e4761b057d3754311ef96f89b3f55ab68ce796a87dcf5a75c1fc156c09bd17_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-docker-registry@sha256:51e4761b057d3754311ef96f89b3f55ab68ce796a87dcf5a75c1fc156c09bd17_s390x, openshift4/ose-docker-registry@sha256:51e4761b057d3754311ef96f89b3f55ab68ce796a87dcf5a75c1fc156c09bd17_s390x, *
Red Hatopenshift4/ose-csi-driver-shared-resource-rhel8@sha256:4ade3e26c0548dd438d27ec533dfc334a6842266e576d0bd7ae1df24b403906a_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-csi-driver-shared-resource-rhel8@sha256:4ade3e26c0548dd438d27ec533dfc334a6842266e576d0bd7ae1df24b403906a_ppc64le, openshift4/ose-csi-driver-shared-resource-rhel8@sha256:4ade3e26c0548dd438d27ec533dfc334a6842266e576d0bd7ae1df24b403906a_ppc64le, openshift4/ose-csi-driver-shared-resource-rhel8@sha256:4ade3e26c0548dd438d27ec533dfc334a6842266e576d0bd7ae1df24b403906a_ppc64le
Red Hatopenshift4/ose-deployer@sha256:8114bf8a3abc483bb443d58f54f6f6c623bc937209c91b89b159f4b54d5739d7_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-deployer@sha256:8114bf8a3abc483bb443d58f54f6f6c623bc937209c91b89b159f4b54d5739d7_arm64, openshift4/ose-deployer@sha256:8114bf8a3abc483bb443d58f54f6f6c623bc937209c91b89b159f4b54d5739d7_arm64, openshift4/ose-deployer@sha256:8114bf8a3abc483bb443d58f54f6f6c623bc937209c91b89b159f4b54d5739d7_arm64
Red Hatopenshift4/ose-openshift-apiserver-rhel8@sha256:721b9d1c8a9bbac3590e33219843f5e98717abdad6ade757ad6bb6e2779196f7_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, *, openshift4/ose-openshift-apiserver-rhel8@sha256:721b9d1c8a9bbac3590e33219843f5e98717abdad6ade757ad6bb6e2779196f7_arm64
Red Hatopenshift4/ose-openshift-apiserver-rhel8@sha256:721b9d1c8a9bbac3590e33219843f5e98717abdad6ade757ad6bb6e2779196f7_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-openshift-apiserver-rhel8@sha256:721b9d1c8a9bbac3590e33219843f5e98717abdad6ade757ad6bb6e2779196f7_arm64, openshift4/ose-openshift-apiserver-rhel8@sha256:721b9d1c8a9bbac3590e33219843f5e98717abdad6ade757ad6bb6e2779196f7_arm64, openshift4/ose-openshift-apiserver-rhel8@sha256:721b9d1c8a9bbac3590e33219843f5e98717abdad6ade757ad6bb6e2779196f7_arm64
Red Hatopenshift4/ose-sdn-rhel8@sha256:1619d730f023d83347d011202d5f6d3b20ab24f6c5a4628d9cd943d5647a2186_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, *, openshift4/ose-sdn-rhel8@sha256:1619d730f023d83347d011202d5f6d3b20ab24f6c5a4628d9cd943d5647a2186_arm64
Red Hatopenshift4/ose-machine-api-operator@sha256:26a544c272ae8869ede3f2cd27dbf243529a15e04ec1ff75478646f28a5b7192_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-machine-api-operator@sha256:26a544c272ae8869ede3f2cd27dbf243529a15e04ec1ff75478646f28a5b7192_ppc64le, openshift4/ose-machine-api-operator@sha256:26a544c272ae8869ede3f2cd27dbf243529a15e04ec1ff75478646f28a5b7192_ppc64le, openshift4/ose-machine-api-operator@sha256:26a544c272ae8869ede3f2cd27dbf243529a15e04ec1ff75478646f28a5b7192_ppc64le
Red Hatopenshift4/ose-sdn-rhel8@sha256:7f8a52a75e0fe482a4c0e2e9a4e107e525cd97bb7ec890700ec9e2360724a872_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-sdn-rhel8@sha256:7f8a52a75e0fe482a4c0e2e9a4e107e525cd97bb7ec890700ec9e2360724a872_s390x, openshift4/ose-sdn-rhel8@sha256:7f8a52a75e0fe482a4c0e2e9a4e107e525cd97bb7ec890700ec9e2360724a872_s390x, *
Red Hatopenshift4/openshift-route-controller-manager-rhel8@sha256:4520d254c86ea22b653111e3c4f1594ad2e6138624844099e9c25cee3df2ca7d_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/openshift-route-controller-manager-rhel8@sha256:4520d254c86ea22b653111e3c4f1594ad2e6138624844099e9c25cee3df2ca7d_amd64, openshift4/openshift-route-controller-manager-rhel8@sha256:4520d254c86ea22b653111e3c4f1594ad2e6138624844099e9c25cee3df2ca7d_amd64, openshift4/openshift-route-controller-manager-rhel8@sha256:4520d254c86ea22b653111e3c4f1594ad2e6138624844099e9c25cee3df2ca7d_amd64
Red Hatopenshift4/ose-cloud-credential-operator@sha256:01cece06e03b88591830d3ce669d7be800b218f898a3e2ca80a6ed1d1d20727a_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-cloud-credential-operator@sha256:01cece06e03b88591830d3ce669d7be800b218f898a3e2ca80a6ed1d1d20727a_ppc64le, openshift4/ose-cloud-credential-operator@sha256:01cece06e03b88591830d3ce669d7be800b218f898a3e2ca80a6ed1d1d20727a_ppc64le, openshift4/ose-cloud-credential-operator@sha256:01cece06e03b88591830d3ce669d7be800b218f898a3e2ca80a6ed1d1d20727a_ppc64le
Red Hatopenshift4/ose-hyperkube-rhel9@sha256:735258e5be2f9be4c4a95f72a087096673eb9ec818c72f5c47339a5716e7339e_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-hyperkube-rhel9@sha256:735258e5be2f9be4c4a95f72a087096673eb9ec818c72f5c47339a5716e7339e_ppc64le, openshift4/ose-hyperkube-rhel9@sha256:735258e5be2f9be4c4a95f72a087096673eb9ec818c72f5c47339a5716e7339e_ppc64le, openshift4/ose-hyperkube-rhel9@sha256:735258e5be2f9be4c4a95f72a087096673eb9ec818c72f5c47339a5716e7339e_ppc64le
Red Hatopenshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:4fe141c93664500eb7d443d87e6f57296ddcdefbce1ec6b03d4c9ed6435c5fc9_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:4fe141c93664500eb7d443d87e6f57296ddcdefbce1ec6b03d4c9ed6435c5fc9_amd64, openshift4/ose-azure-disk-csi-driver-rhel8-operator@sha256:4fe141c93664500eb7d443d87e6f57296ddcdefbce1ec6b03d4c9ed6435c5fc9_amd64, *
Red Hatopenshift4/openshift-route-controller-manager-rhel8@sha256:0113ae9aa69099e3bb28ca6095a97b864b54786faa7b11f1c3e7979b03eba731_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/openshift-route-controller-manager-rhel8@sha256:0113ae9aa69099e3bb28ca6095a97b864b54786faa7b11f1c3e7979b03eba731_s390x, *, openshift4/openshift-route-controller-manager-rhel8@sha256:0113ae9aa69099e3bb28ca6095a97b864b54786faa7b11f1c3e7979b03eba731_s390x
Red Hatopenshift4/ose-openshift-controller-manager-rhel8@sha256:fd46dcd3e77fc5dd14f556a750a8db3e58e3c49fb81e05095206ebf1f41457e6_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-openshift-controller-manager-rhel8@sha256:fd46dcd3e77fc5dd14f556a750a8db3e58e3c49fb81e05095206ebf1f41457e6_s390x, openshift4/ose-openshift-controller-manager-rhel8@sha256:fd46dcd3e77fc5dd14f556a750a8db3e58e3c49fb81e05095206ebf1f41457e6_s390x, openshift4/ose-openshift-controller-manager-rhel8@sha256:fd46dcd3e77fc5dd14f556a750a8db3e58e3c49fb81e05095206ebf1f41457e6_s390x
Red Hatopenshift4/ose-powervs-block-csi-driver-rhel8@sha256:3e38ed9d72cb16e9431d0ac15fa4ad9e9bccbeab8648d1638a20784d8cbe899e_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, *, openshift4/ose-powervs-block-csi-driver-rhel8@sha256:3e38ed9d72cb16e9431d0ac15fa4ad9e9bccbeab8648d1638a20784d8cbe899e_amd64
Red Hatopenshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:e10e4552f20fc9fffa7c7121ad831a2c0d769e9cb7b04edd2852040475e99a89_s390x as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:e10e4552f20fc9fffa7c7121ad831a2c0d769e9cb7b04edd2852040475e99a89_s390x, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:e10e4552f20fc9fffa7c7121ad831a2c0d769e9cb7b04edd2852040475e99a89_s390x

…and 1346 more

Timeline

  • Oct 3, 2024 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 16, 2026 CVE Updated

References

…and 32 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›