VDB
RHSA-2024%3A8991
RHSA-2024%3A8991
PUBLISHED
CVSS 7.5 HIGH
A memory leak was found in the otelhttp handler of open-telemetry. This flaw allows a remote, unauthenticated attacker to exhaust the server's memory by sending many malicious requests, affecting the availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-baremetal-rhel9-operator@sha256:9f7e72dd8ade0cd6cd59e2544cc0442cbb65ab2eaeca21f5ad868db706090bb7_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-baremetal-rhel9-operator@sha256:9f7e72dd8ade0cd6cd59e2544cc0442cbb65ab2eaeca21f5ad868db706090bb7_s390x, * |
| Red Hat | openshift4/ose-csi-livenessprobe@sha256:d7766235dc82b76291317a1af4a6b407f36f4e4f7ab705c71764fa8e206d8d96_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-csi-livenessprobe@sha256:d7766235dc82b76291317a1af4a6b407f36f4e4f7ab705c71764fa8e206d8d96_arm64, openshift4/ose-csi-livenessprobe@sha256:d7766235dc82b76291317a1af4a6b407f36f4e4f7ab705c71764fa8e206d8d96_arm64 |
| Red Hat | openshift4/ose-csi-snapshot-validation-webhook-rhel9@sha256:f264306eb793a5066b132a9071f806a4fde5c8b9de975f3995adfd0565079951_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-csi-snapshot-validation-webhook-rhel9@sha256:f264306eb793a5066b132a9071f806a4fde5c8b9de975f3995adfd0565079951_arm64, * |
| Red Hat | openshift4/ose-libvirt-machine-controllers-rhel9@sha256:409713418eefd2c2852a94b87992b5b63f0ab2e22a9a796b7e839988644d71a5_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-libvirt-machine-controllers-rhel9@sha256:409713418eefd2c2852a94b87992b5b63f0ab2e22a9a796b7e839988644d71a5_s390x, openshift4/ose-libvirt-machine-controllers-rhel9@sha256:409713418eefd2c2852a94b87992b5b63f0ab2e22a9a796b7e839988644d71a5_s390x |
| Red Hat | openshift4/kubevirt-csi-driver-rhel8@sha256:69e762d30ad88d722f6272e120df47fd2cad452c5c22866652af740f91334b6e_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/kubevirt-csi-driver-rhel8@sha256:69e762d30ad88d722f6272e120df47fd2cad452c5c22866652af740f91334b6e_amd64, *, openshift4/kubevirt-csi-driver-rhel8@sha256:69e762d30ad88d722f6272e120df47fd2cad452c5c22866652af740f91334b6e_amd64 |
| Red Hat | openshift4/ose-cluster-machine-approver-rhel9@sha256:81cd456294946a0b044e2eeb88f334807dc57c1b36125ca70f32d85cb9524ae1_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, *, openshift4/ose-cluster-machine-approver-rhel9@sha256:81cd456294946a0b044e2eeb88f334807dc57c1b36125ca70f32d85cb9524ae1_ppc64le |
| Red Hat | openshift4/ose-cluster-bootstrap-rhel9@sha256:3fc78450521b36a76cb1a29a289db718ead6ca998fc72467453ff74ba87aa1f6_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-bootstrap-rhel9@sha256:3fc78450521b36a76cb1a29a289db718ead6ca998fc72467453ff74ba87aa1f6_arm64, openshift4/ose-cluster-bootstrap-rhel9@sha256:3fc78450521b36a76cb1a29a289db718ead6ca998fc72467453ff74ba87aa1f6_arm64 |
| Red Hat | openshift4/ose-machine-api-provider-openstack-rhel9@sha256:77bd01068b2770e048621173843332e06b799cf5045c94d3854e5d6372863f1f_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-machine-api-provider-openstack-rhel9@sha256:77bd01068b2770e048621173843332e06b799cf5045c94d3854e5d6372863f1f_ppc64le, openshift4/ose-machine-api-provider-openstack-rhel9@sha256:77bd01068b2770e048621173843332e06b799cf5045c94d3854e5d6372863f1f_ppc64le |
| Red Hat | openshift4/ovirt-csi-driver-rhel9@sha256:d16ce6babf640365aa6fde2b4b32bca59a6e064af98584606d484e80a79d5440_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ovirt-csi-driver-rhel9@sha256:d16ce6babf640365aa6fde2b4b32bca59a6e064af98584606d484e80a79d5440_ppc64le, *, openshift4/ovirt-csi-driver-rhel9@sha256:d16ce6babf640365aa6fde2b4b32bca59a6e064af98584606d484e80a79d5440_ppc64le |
| Red Hat | openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:96479138b8c43173b7da2ce9a10cc0b7cffc04a2f9a07deb0f50826341646c60_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:96479138b8c43173b7da2ce9a10cc0b7cffc04a2f9a07deb0f50826341646c60_ppc64le, openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:96479138b8c43173b7da2ce9a10cc0b7cffc04a2f9a07deb0f50826341646c60_ppc64le |
| Red Hat | openshift4/ose-docker-registry-rhel9@sha256:7d9df898f6c32609976aaef87f3956698b7671ea9f9690dee5f10c5403f7d69f_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-docker-registry-rhel9@sha256:7d9df898f6c32609976aaef87f3956698b7671ea9f9690dee5f10c5403f7d69f_arm64, *, * |
| Red Hat | openshift4/ose-kube-storage-version-migrator-rhel9@sha256:7155d6c5ff3dcd2a053b462343bcd1b8b6cce6fe2b4d16ab47b4a6c3b0daba8b_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-kube-storage-version-migrator-rhel9@sha256:7155d6c5ff3dcd2a053b462343bcd1b8b6cce6fe2b4d16ab47b4a6c3b0daba8b_arm64, openshift4/ose-kube-storage-version-migrator-rhel9@sha256:7155d6c5ff3dcd2a053b462343bcd1b8b6cce6fe2b4d16ab47b4a6c3b0daba8b_arm64 |
| Red Hat | rhcos@sha256:b1625abab7630027f16c1ed2b0fac298cb161a340b49ceb2be58283842287d69_x86_64 as a component of Red Hat OpenShift Container Platform 4.15 | *, rhcos@sha256:b1625abab7630027f16c1ed2b0fac298cb161a340b49ceb2be58283842287d69_x86_64 |
| Red Hat | openshift4/ose-cluster-openshift-controller-manager-rhel9-operator@sha256:01347c9b9be277f174e08b3387666b9826319dd5d5c3c8a5a136d2a636ccd959_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-openshift-controller-manager-rhel9-operator@sha256:01347c9b9be277f174e08b3387666b9826319dd5d5c3c8a5a136d2a636ccd959_arm64, * |
| Red Hat | openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:99bdea6d1989c8eab5fd3829da56ed68c0f8fcf212217e4a8495a199ac96f652_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:99bdea6d1989c8eab5fd3829da56ed68c0f8fcf212217e4a8495a199ac96f652_ppc64le, * |
| Red Hat | openshift4/ose-openshift-apiserver-rhel9@sha256:08d3452033b874c0cee04d426a8c2205e76e2cc579c99c6d91b8be13543eec3e_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-openshift-apiserver-rhel9@sha256:08d3452033b874c0cee04d426a8c2205e76e2cc579c99c6d91b8be13543eec3e_ppc64le, * |
| Red Hat | openshift4/ose-openstack-cluster-api-controllers-rhel8@sha256:98b6e0732cb4605fc8d7e840ebb5c8d13b419c947863484c6d7a02a7ab2d2ade_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-openstack-cluster-api-controllers-rhel8@sha256:98b6e0732cb4605fc8d7e840ebb5c8d13b419c947863484c6d7a02a7ab2d2ade_arm64, *, * |
| Red Hat | openshift4/ose-apiserver-network-proxy-rhel9@sha256:87e7105c490e0fc51ec4088325ea31b9809187f3be8c5a261940d785aa354d32_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-apiserver-network-proxy-rhel9@sha256:87e7105c490e0fc51ec4088325ea31b9809187f3be8c5a261940d785aa354d32_amd64 |
| Red Hat | openshift4/ose-apiserver-network-proxy-rhel9@sha256:87e7105c490e0fc51ec4088325ea31b9809187f3be8c5a261940d785aa354d32_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-apiserver-network-proxy-rhel9@sha256:87e7105c490e0fc51ec4088325ea31b9809187f3be8c5a261940d785aa354d32_amd64, openshift4/ose-apiserver-network-proxy-rhel9@sha256:87e7105c490e0fc51ec4088325ea31b9809187f3be8c5a261940d785aa354d32_amd64, * |
| Red Hat | openshift4/ose-cluster-capi-rhel9-operator@sha256:5c81ecfa1ea65af63912d38a692ebec4458a8c6f760681d155e464d2e0f6abde_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-capi-rhel9-operator@sha256:5c81ecfa1ea65af63912d38a692ebec4458a8c6f760681d155e464d2e0f6abde_amd64, openshift4/ose-cluster-capi-rhel9-operator@sha256:5c81ecfa1ea65af63912d38a692ebec4458a8c6f760681d155e464d2e0f6abde_amd64 |
…and 1308 more
Timeline
- Nov 13, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:8991 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2245180 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2295777 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2302487 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2318052 issue
- https://issues.redhat.com/browse/OCPBUGS-30207 advisory
- https://issues.redhat.com/browse/OCPBUGS-34510 advisory
- https://issues.redhat.com/browse/OCPBUGS-42110 advisory
- https://issues.redhat.com/browse/OCPBUGS-42865 advisory
- https://issues.redhat.com/browse/OCPBUGS-42930 advisory
- https://issues.redhat.com/browse/OCPBUGS-43268 advisory
- https://issues.redhat.com/browse/OCPBUGS-43575 advisory
- https://issues.redhat.com/browse/OCPBUGS-43582 advisory
- https://issues.redhat.com/browse/OCPBUGS-43646 advisory
- https://issues.redhat.com/browse/OCPBUGS-43656 advisory
- https://issues.redhat.com/browse/OCPBUGS-43855 advisory
- https://issues.redhat.com/browse/OCPBUGS-43876 advisory
- https://issues.redhat.com/browse/OCPBUGS-43918 advisory
- https://issues.redhat.com/browse/OCPBUGS-44035 advisory
…and 19 more