VDB
RHSA-2024%3A7921
RHSA-2024%3A7921
PUBLISHED
CVSS 7.5 HIGH
A memory leak was found in the otelhttp handler of open-telemetry. This flaw allows a remote, unauthenticated attacker to exhaust the server's memory by sending many malicious requests, affecting the availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-dpu-cni-rhel9@sha256:20c8b5f5913e526bf8eb8fe9013a59c512e6af79568c7755bc3c6f4e97c35a3c_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-dpu-cni-rhel9@sha256:20c8b5f5913e526bf8eb8fe9013a59c512e6af79568c7755bc3c6f4e97c35a3c_s390x, openshift4/ose-dpu-cni-rhel9@sha256:20c8b5f5913e526bf8eb8fe9013a59c512e6af79568c7755bc3c6f4e97c35a3c_s390x |
| Red Hat | openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:6edacac718153b6bf5bd749d22f34a5aa9eae283f724dc17464303ff7ef088ec_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:6edacac718153b6bf5bd749d22f34a5aa9eae283f724dc17464303ff7ef088ec_amd64, openshift4/ose-secrets-store-csi-driver-rhel9-operator@sha256:6edacac718153b6bf5bd749d22f34a5aa9eae283f724dc17464303ff7ef088ec_amd64, * |
| Red Hat | openshift4/ose-local-storage-mustgather-rhel9@sha256:4a2372e552c043bedc9918ce2a45be6289405a562e2ad14b67cc090f3722c8c3_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-local-storage-mustgather-rhel9@sha256:4a2372e552c043bedc9918ce2a45be6289405a562e2ad14b67cc090f3722c8c3_s390x, openshift4/ose-local-storage-mustgather-rhel9@sha256:4a2372e552c043bedc9918ce2a45be6289405a562e2ad14b67cc090f3722c8c3_s390x, * |
| Red Hat | openshift4/ose-egress-http-proxy-rhel9@sha256:382d4550d5e4fb4ef930c7a948d717de651b2a4afe8ab2af656eb9e06c5c38ad_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-egress-http-proxy-rhel9@sha256:382d4550d5e4fb4ef930c7a948d717de651b2a4afe8ab2af656eb9e06c5c38ad_arm64, openshift4/ose-egress-http-proxy-rhel9@sha256:382d4550d5e4fb4ef930c7a948d717de651b2a4afe8ab2af656eb9e06c5c38ad_arm64 |
| Red Hat | openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:d69529dca169d54a876689a2b35462471205b94c1d9479b6383a184b608319d6_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:d69529dca169d54a876689a2b35462471205b94c1d9479b6383a184b608319d6_arm64, openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:d69529dca169d54a876689a2b35462471205b94c1d9479b6383a184b608319d6_arm64, * |
| Red Hat | openshift4/ose-smb-csi-driver-rhel9@sha256:cd4a9ac5d41797c6f355abec2cbddd158b95ca51d96dda857dd81480fa4799b0_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-smb-csi-driver-rhel9@sha256:cd4a9ac5d41797c6f355abec2cbddd158b95ca51d96dda857dd81480fa4799b0_amd64, * |
| Red Hat | openshift4/ose-sriov-network-config-daemon-rhel9@sha256:af8905b88da969815b86ac6044650717c7c3a446c1713e9f21120b27a422e8aa_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-sriov-network-config-daemon-rhel9@sha256:af8905b88da969815b86ac6044650717c7c3a446c1713e9f21120b27a422e8aa_ppc64le, * |
| Red Hat | openshift4/ose-sriov-infiniband-cni-rhel9@sha256:3834ddc8dc6498275622e21c74ba050c98fa18c81736a25c3b1fdd7077d8e942_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, * |
| Red Hat | openshift4/ose-local-storage-mustgather-rhel9@sha256:e0b3388b70677e7a59cbdee52ae2eb737aee523c45926c1fa9fb3c844189df66_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-local-storage-mustgather-rhel9@sha256:e0b3388b70677e7a59cbdee52ae2eb737aee523c45926c1fa9fb3c844189df66_ppc64le, openshift4/ose-local-storage-mustgather-rhel9@sha256:e0b3388b70677e7a59cbdee52ae2eb737aee523c45926c1fa9fb3c844189df66_ppc64le |
| Red Hat | openshift4/ose-sriov-network-device-plugin-rhel9@sha256:348abc1ff9e0f4be2774123189b37340792664549c2d42be6dbb72429eb6b057_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-sriov-network-device-plugin-rhel9@sha256:348abc1ff9e0f4be2774123189b37340792664549c2d42be6dbb72429eb6b057_ppc64le, openshift4/ose-sriov-network-device-plugin-rhel9@sha256:348abc1ff9e0f4be2774123189b37340792664549c2d42be6dbb72429eb6b057_ppc64le, * |
| Red Hat | openshift4/rdma-cni-rhel9@sha256:3e1325cb0c2cf1b435f2863961ac9bccbe1e24b354f1dbcf1d368e1bd1d255f9_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, * |
| Red Hat | openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:6e8bed51ea0af10e97267aaff5bc1e02081c554d7ae6b38497145a3c7f451198_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:6e8bed51ea0af10e97267aaff5bc1e02081c554d7ae6b38497145a3c7f451198_s390x, openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:6e8bed51ea0af10e97267aaff5bc1e02081c554d7ae6b38497145a3c7f451198_s390x |
| Red Hat | openshift4/ose-cloud-event-proxy-rhel9@sha256:53d90acf2dd29bc472fc8105a9a1c3daefe905f80b261aa3fe2135e3b6e0847c_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cloud-event-proxy-rhel9@sha256:53d90acf2dd29bc472fc8105a9a1c3daefe905f80b261aa3fe2135e3b6e0847c_ppc64le, *, openshift4/ose-cloud-event-proxy-rhel9@sha256:53d90acf2dd29bc472fc8105a9a1c3daefe905f80b261aa3fe2135e3b6e0847c_ppc64le |
| Red Hat | openshift4/ose-dpu-daemon-rhel9@sha256:9b72756f51586866e76289abaafaf77f6826ddf44e83a27b8870d0bf6056c2d4_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-dpu-daemon-rhel9@sha256:9b72756f51586866e76289abaafaf77f6826ddf44e83a27b8870d0bf6056c2d4_ppc64le, * |
| Red Hat | openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:4f0229e235be294885c6c571c515a73ff5c1d4445b360d3112d615538317ce81_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:4f0229e235be294885c6c571c515a73ff5c1d4445b360d3112d615538317ce81_arm64, openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:4f0229e235be294885c6c571c515a73ff5c1d4445b360d3112d615538317ce81_arm64 |
| Red Hat | openshift4/ose-cluster-nfd-rhel9-operator@sha256:dc9ce558c4eb0e83fda3325f70dd9dda28d21bfe052e2dd7e89d9c56f0007e61_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cluster-nfd-rhel9-operator@sha256:dc9ce558c4eb0e83fda3325f70dd9dda28d21bfe052e2dd7e89d9c56f0007e61_arm64, openshift4/ose-cluster-nfd-rhel9-operator@sha256:dc9ce558c4eb0e83fda3325f70dd9dda28d21bfe052e2dd7e89d9c56f0007e61_arm64 |
| Red Hat | openshift4/metallb-rhel9-operator@sha256:4c3ab3e6976504d7d77cda951e7acbd1b856a6c6108e0252bf47fbdeb968f50c_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/metallb-rhel9-operator@sha256:4c3ab3e6976504d7d77cda951e7acbd1b856a6c6108e0252bf47fbdeb968f50c_s390x |
| Red Hat | openshift4/ose-dpu-rhel9-operator@sha256:9fd64f6f0ca56101fe53ed51c88cc4ce35e5355003b08f304560f3c4991ff37f_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, *, openshift4/ose-dpu-rhel9-operator@sha256:9fd64f6f0ca56101fe53ed51c88cc4ce35e5355003b08f304560f3c4991ff37f_ppc64le |
| Red Hat | openshift4/ingress-node-firewall-rhel9@sha256:96b3521b7b8c1f56e7391dd007776b3fd4393d7a0d1e025abe7e10f80c7434fd_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ingress-node-firewall-rhel9@sha256:96b3521b7b8c1f56e7391dd007776b3fd4393d7a0d1e025abe7e10f80c7434fd_ppc64le, openshift4/ingress-node-firewall-rhel9@sha256:96b3521b7b8c1f56e7391dd007776b3fd4393d7a0d1e025abe7e10f80c7434fd_ppc64le |
| Red Hat | openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:e61857c8efd324b8160a53e0a5a34e42c679eb26d01a621f26a1a1dd097566bd_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:e61857c8efd324b8160a53e0a5a34e42c679eb26d01a621f26a1a1dd097566bd_arm64, openshift4/ose-kubernetes-nmstate-handler-rhel9@sha256:e61857c8efd324b8160a53e0a5a34e42c679eb26d01a621f26a1a1dd097566bd_arm64, * |
…and 362 more
Timeline
- Oct 15, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:7921 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2245180 issue
- https://issues.redhat.com/browse/OCPBUGS-37668 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7921.json advisory
- https://access.redhat.com/security/cve/CVE-2023-45142 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-45142 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-45142 advisory
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr advisory