VDB
RHSA-2024%3A8315
RHSA-2024%3A8315
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/log-file-metric-exporter-rhel9@sha256:b5fa7d006c1353b32b64f44347fb45d948bcad223e873186316bf26a5c2c71ae_ppc64le as a component of RHOL 5.9 for RHEL 9 | openshift-logging/log-file-metric-exporter-rhel9@sha256:b5fa7d006c1353b32b64f44347fb45d948bcad223e873186316bf26a5c2c71ae_ppc64le |
| Red Hat | openshift-logging/eventrouter-rhel9@sha256:0abade3bd78bea3e729c36ffbd4ff460841f45d1ef719870b095e26e31f62f7a_arm64 as a component of RHOL 5.9 for RHEL 9 | * |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel9@sha256:b5fa7d006c1353b32b64f44347fb45d948bcad223e873186316bf26a5c2c71ae_ppc64le as a component of RHOL 5.9 for RHEL 9 | openshift-logging/log-file-metric-exporter-rhel9@sha256:b5fa7d006c1353b32b64f44347fb45d948bcad223e873186316bf26a5c2c71ae_ppc64le |
| Red Hat | openshift-logging/cluster-logging-operator-bundle@sha256:629fd21c443fbe1a520215a50407b038d9edada515c7b862c27cbc3bd641bb69_amd64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/cluster-logging-operator-bundle@sha256:629fd21c443fbe1a520215a50407b038d9edada515c7b862c27cbc3bd641bb69_amd64 |
| Red Hat | openshift-logging/eventrouter-rhel9@sha256:a9b5cb331697c0745967e31a81206fd96c3aec0052ba4447ffe2c1019fedeb47_s390x as a component of RHOL 5.9 for RHEL 9 | openshift-logging/eventrouter-rhel9@sha256:a9b5cb331697c0745967e31a81206fd96c3aec0052ba4447ffe2c1019fedeb47_s390x |
| Red Hat | openshift-logging/opa-openshift-rhel9@sha256:4347ab53d8b292f2e3001aa4fa2edaa849ff8331ab5959f3683fabf5ae080cd4_amd64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/opa-openshift-rhel9@sha256:4347ab53d8b292f2e3001aa4fa2edaa849ff8331ab5959f3683fabf5ae080cd4_amd64 |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel9@sha256:2d9804cdf1dfa08c0b392b04be43c9d84e1a126fadea03bc418778aa74237f5b_s390x as a component of RHOL 5.9 for RHEL 9 | openshift-logging/log-file-metric-exporter-rhel9@sha256:2d9804cdf1dfa08c0b392b04be43c9d84e1a126fadea03bc418778aa74237f5b_s390x |
| Red Hat | openshift-logging/vector-rhel9@sha256:fa22505c9f61ec65d258125530bffe12e925be8e7f4479266c6e717eaed89aa5_s390x as a component of RHOL 5.9 for RHEL 9 | openshift-logging/vector-rhel9@sha256:fa22505c9f61ec65d258125530bffe12e925be8e7f4479266c6e717eaed89aa5_s390x |
| Red Hat | openshift-logging/cluster-logging-rhel9-operator@sha256:f2cccb73d1b2783405b5da1722220f6923eef5c13a462d9cf4bbb4875bb1e7da_s390x as a component of RHOL 5.9 for RHEL 9 | openshift-logging/cluster-logging-rhel9-operator@sha256:f2cccb73d1b2783405b5da1722220f6923eef5c13a462d9cf4bbb4875bb1e7da_s390x |
| Red Hat | openshift-logging/vector-rhel9@sha256:fa22505c9f61ec65d258125530bffe12e925be8e7f4479266c6e717eaed89aa5_s390x as a component of RHOL 5.9 for RHEL 9 | openshift-logging/vector-rhel9@sha256:fa22505c9f61ec65d258125530bffe12e925be8e7f4479266c6e717eaed89aa5_s390x |
| Red Hat | openshift-logging/logging-view-plugin-rhel9@sha256:451269d28212fbfbe2bf5e1e26c859a577ad456e585e48f0c2851bd8ccd5cae9_s390x as a component of RHOL 5.9 for RHEL 9 | openshift-logging/logging-view-plugin-rhel9@sha256:451269d28212fbfbe2bf5e1e26c859a577ad456e585e48f0c2851bd8ccd5cae9_s390x |
| Red Hat | openshift-logging/loki-rhel9-operator@sha256:dc536cc1392ea2320c425f54e50ec3b2021bbb1efccd0acf793167aec4cc344e_arm64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/loki-rhel9-operator@sha256:dc536cc1392ea2320c425f54e50ec3b2021bbb1efccd0acf793167aec4cc344e_arm64 |
| Red Hat | openshift-logging/eventrouter-rhel9@sha256:a086041b7055b8fb5c18a905710922372f835d2529f0ee7ee1e04c99fc42ab7d_amd64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/eventrouter-rhel9@sha256:a086041b7055b8fb5c18a905710922372f835d2529f0ee7ee1e04c99fc42ab7d_amd64 |
| Red Hat | openshift-logging/loki-rhel9-operator@sha256:68b0d10ca4d158b930d20b20da3c79fc44813a549b55a42c85330e5fd054b1f5_s390x as a component of RHOL 5.9 for RHEL 9 | openshift-logging/loki-rhel9-operator@sha256:68b0d10ca4d158b930d20b20da3c79fc44813a549b55a42c85330e5fd054b1f5_s390x |
| Red Hat | openshift-logging/cluster-logging-rhel9-operator@sha256:b1d679da4674db586f6314ade8264bd49e717b3fb76c9d8657526b59dc05cc74_arm64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/cluster-logging-rhel9-operator@sha256:b1d679da4674db586f6314ade8264bd49e717b3fb76c9d8657526b59dc05cc74_arm64 |
| Red Hat | openshift-logging/vector-rhel9@sha256:9c0aa87656a48d99ba3cd82350db54bb6303749e11e3a39252e1f58f18157bbe_ppc64le as a component of RHOL 5.9 for RHEL 9 | openshift-logging/vector-rhel9@sha256:9c0aa87656a48d99ba3cd82350db54bb6303749e11e3a39252e1f58f18157bbe_ppc64le |
| Red Hat | openshift-logging/eventrouter-rhel9@sha256:0abade3bd78bea3e729c36ffbd4ff460841f45d1ef719870b095e26e31f62f7a_arm64 as a component of RHOL 5.9 for RHEL 9 | * |
| Red Hat | openshift-logging/fluentd-rhel9@sha256:3087c33146d33463047876fc571943e3e5174695e595cac8ffe6ca785cbaafca_arm64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/fluentd-rhel9@sha256:3087c33146d33463047876fc571943e3e5174695e595cac8ffe6ca785cbaafca_arm64 |
| Red Hat | openshift-logging/fluentd-rhel9@sha256:8981caf7cd018f62a780e401c64ff28492916bac7b9d245665253b6afa7c2a1e_amd64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/fluentd-rhel9@sha256:8981caf7cd018f62a780e401c64ff28492916bac7b9d245665253b6afa7c2a1e_amd64 |
| Red Hat | openshift-logging/cluster-logging-rhel9-operator@sha256:b9ea673bf3367eb7ffddb144e67881fdac5d895652afce6eeff93192f51d6994_amd64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/cluster-logging-rhel9-operator@sha256:b9ea673bf3367eb7ffddb144e67881fdac5d895652afce6eeff93192f51d6994_amd64 |
…and 64 more
Timeline
- Oct 23, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:8315 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://issues.redhat.com/browse/LOG-6159 advisory
- https://issues.redhat.com/browse/LOG-6169 advisory
- https://issues.redhat.com/browse/LOG-6181 advisory
- https://issues.redhat.com/browse/LOG-6183 advisory
- https://issues.redhat.com/browse/LOG-6206 advisory
- https://issues.redhat.com/browse/LOG-6214 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8315.json advisory
- https://access.redhat.com/security/cve/CVE-2024-24791 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2295310 issue
- https://www.cve.org/CVERecord?id=CVE-2024-24791 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-24791 advisory
- https://go.dev/cl/591255 advisory
- https://go.dev/issue/67555 advisory
- https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ advisory
- https://access.redhat.com/security/cve/CVE-2024-34155 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2310527 issue
- https://www.cve.org/CVERecord?id=CVE-2024-34155 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-34155 advisory
…and 18 more