VDB
RHSA-2024%3A8318
RHSA-2024%3A8318
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:66d5a339049a011d73a25f7146df4606d56e9d8f871e461429589aeec884b46f_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/eventrouter-rhel8@sha256:66d5a339049a011d73a25f7146df4606d56e9d8f871e461429589aeec884b46f_arm64 |
| Red Hat | openshift-logging/loki-rhel8-operator@sha256:2b4d9e2c359adc44d48ca6e626710e206a52d4165df15877493431a8702bd297_ppc64le as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:ad436419a03ffd76260906448cbcea146357dd102b89e791fc84be75ea30bb0f_amd64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/cluster-logging-rhel8-operator@sha256:ad436419a03ffd76260906448cbcea146357dd102b89e791fc84be75ea30bb0f_amd64 |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:ad436419a03ffd76260906448cbcea146357dd102b89e791fc84be75ea30bb0f_amd64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/cluster-logging-rhel8-operator@sha256:ad436419a03ffd76260906448cbcea146357dd102b89e791fc84be75ea30bb0f_amd64 |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:26ce1f8ea4095b7de2e1671edcda2955e65c058158514978c58310fbb153f02d_s390x as a component of RHOL 5.6 for RHEL 8 | openshift-logging/logging-curator5-rhel8@sha256:26ce1f8ea4095b7de2e1671edcda2955e65c058158514978c58310fbb153f02d_s390x |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:ceab269a248bd2f83005ba856dcda25cb89422cbbc4372ffc9b163e105b4f34c_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/logging-curator5-rhel8@sha256:ceab269a248bd2f83005ba856dcda25cb89422cbbc4372ffc9b163e105b4f34c_ppc64le |
| Red Hat | openshift-logging/elasticsearch-operator-bundle@sha256:9de957ad4ba22aa1cf7b6e940067db92b73f63242d14ca86455e420e25cc5768_amd64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/elasticsearch-operator-bundle@sha256:9de957ad4ba22aa1cf7b6e940067db92b73f63242d14ca86455e420e25cc5768_amd64 |
| Red Hat | openshift-logging/logging-loki-rhel8@sha256:9bc3db630986eda876fdc8e654a0359652d3251b7d0cad68e11c002fb10f8136_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/logging-loki-rhel8@sha256:9bc3db630986eda876fdc8e654a0359652d3251b7d0cad68e11c002fb10f8136_arm64 |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:15f0fd25035aa7f0d418bb08f78e88fe549578a139d5d786a97b597494aeb7e8_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/cluster-logging-rhel8-operator@sha256:15f0fd25035aa7f0d418bb08f78e88fe549578a139d5d786a97b597494aeb7e8_ppc64le |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:56bbbb2d0fb8addf1bf66ad24aa0592c5fd7816cebeaca3c2ceb71686aa73838_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/elasticsearch-rhel8-operator@sha256:56bbbb2d0fb8addf1bf66ad24aa0592c5fd7816cebeaca3c2ceb71686aa73838_ppc64le |
| Red Hat | openshift-logging/vector-rhel8@sha256:6eca12efaca75c8caa987b17b099c7ba05b24a555055a9c51e1e1b01bbe586b3_amd64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/vector-rhel8@sha256:6eca12efaca75c8caa987b17b099c7ba05b24a555055a9c51e1e1b01bbe586b3_amd64 |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:fd0e6660c845875269bde7b401586d43b4e35888b1023e1205764ed180546e6f_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/elasticsearch-proxy-rhel8@sha256:fd0e6660c845875269bde7b401586d43b4e35888b1023e1205764ed180546e6f_arm64 |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:4850a364d67a43259d578c31eb0a801ec31610a24df003f216310e7948beb559_s390x as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:00462c85f7277e48c7ec9aea6b939a5c2ebfa04e1d63483de82c4079a915cd39_s390x as a component of RHOL 5.6 for RHEL 8 | openshift-logging/elasticsearch-rhel8-operator@sha256:00462c85f7277e48c7ec9aea6b939a5c2ebfa04e1d63483de82c4079a915cd39_s390x |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:3ceef20d893593e018931fee47792c97259686a34d1e7de08d1365300d1d16a3_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/eventrouter-rhel8@sha256:3ceef20d893593e018931fee47792c97259686a34d1e7de08d1365300d1d16a3_ppc64le |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:9d4858ed523c10e2d1ee0d993df2c8459ffce533cc76b78261e1e63f086ff2fc_arm64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:3ceef20d893593e018931fee47792c97259686a34d1e7de08d1365300d1d16a3_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/eventrouter-rhel8@sha256:3ceef20d893593e018931fee47792c97259686a34d1e7de08d1365300d1d16a3_ppc64le |
| Red Hat | openshift-logging/vector-rhel8@sha256:9398c67965d1d229e01007888558be31506558a433bed066ff47a784f474b50e_arm64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/opa-openshift-rhel8@sha256:df14d0dffae74231bed4c2f963c86939ed053935ff66028ab58293394cae7810_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/opa-openshift-rhel8@sha256:df14d0dffae74231bed4c2f963c86939ed053935ff66028ab58293394cae7810_ppc64le |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:f38ec1f8910a21d2888df425c56429d97786284ce8c9e158fc586ef42f10f4e2_s390x as a component of RHOL 5.6 for RHEL 8 | openshift-logging/fluentd-rhel8@sha256:f38ec1f8910a21d2888df425c56429d97786284ce8c9e158fc586ef42f10f4e2_s390x |
…and 106 more
Timeline
- Oct 23, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:8318 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8318.json advisory
- https://access.redhat.com/security/cve/CVE-2024-24791 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2295310 issue
- https://www.cve.org/CVERecord?id=CVE-2024-24791 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-24791 advisory
- https://go.dev/cl/591255 advisory
- https://go.dev/issue/67555 advisory
- https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ advisory
- https://access.redhat.com/security/cve/CVE-2024-34155 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2310527 issue
- https://www.cve.org/CVERecord?id=CVE-2024-34155 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-34155 advisory
- https://go.dev/cl/611238 advisory
- https://go.dev/issue/69138 advisory
- https://groups.google.com/g/golang-dev/c/S9POB9NCTdk advisory
- https://pkg.go.dev/vuln/GO-2024-3105 advisory
- https://access.redhat.com/security/cve/CVE-2024-34156 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2310528 issue
…and 12 more