VDB
RHSA-2024:10135
RHSA-2024:10135
PUBLISHED
CVSS 6.199999809265137 MEDIUM
A flaw was found in curl. When an application configures libcurl to use HTTP/2 server push and the amount of received headers for the push surpasses the maximum allowed limit, libcurl aborts the server push. When aborting, libcurl does not free all the previously allocated headers, resulting in a memory leak.
Risk Scores
CVSS 3.1
6.199999809265137
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | service-interconnect/skupper-config-sync-rhel9@sha256:51c106e22bc98c6678dafc2f42e387f6e6158e686436e6f89747703dd9c1bbbc_amd64 as a component of 9Base-Service-Interconnect-1.4 | * |
| Red Hat | service-interconnect/skupper-service-controller-rhel9@sha256:34ce86c11588f0c7b2ba40ff988a8b6ac7ae6d29182e94d3a65e5756c68578f8_amd64 as a component of 9Base-Service-Interconnect-1.4 | * |
| Red Hat | service-interconnect/skupper-flow-collector-rhel9@sha256:58ec0e5cb8a9544153410867797e40055928dbd589e652e02bf4cddff083f5f6_amd64 as a component of 9Base-Service-Interconnect-1.4 | * |
| Red Hat | service-interconnect/skupper-site-controller-rhel9@sha256:cce081bb2d5ae131770dfd095c2e8ad2fcc616d9b3fc487f9252c8f721f1b2ba_amd64 as a component of 9Base-Service-Interconnect-1.4 | * |
| Red Hat | service-interconnect/skupper-router-rhel9@sha256:958ec2e1c85c49252d7b49a7b0073a0e73dffac31e46bad2b0a788114cb13c74_amd64 as a component of 9Base-Service-Interconnect-1.4 | * |
| Red Hat | service-interconnect/skupper-operator-bundle@sha256:32c03556f3eb7f87c0624b105e8d9aac7dcfaea71adf16e4e9825586829880c1_amd64 as a component of 9Base-Service-Interconnect-1.4 | * |
Timeline
- Nov 21, 2024 CVE Published
- Oct 16, 2026 CVE Updated
- Oct 16, 2026 Distribution Patch
- Oct 16, 2026 Distribution Patch
- Oct 16, 2026 Security Advisory
- Oct 16, 2026 Security Advisory
- Oct 16, 2026 Security Advisory
- Oct 16, 2026 Security Advisory
- Oct 16, 2026 Security Advisory
- Oct 16, 2026 Security Advisory
- Oct 16, 2026 Security Advisory
- Oct 16, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:10135 advisory
- https://access.redhat.com/security/updates/classification/#low advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2263240 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2321987 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10135.json advisory
- https://access.redhat.com/security/cve/CVE-2024-2398 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2270498 issue
- https://www.cve.org/CVERecord?id=CVE-2024-2398 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-2398 advisory
- https://curl.se/docs/CVE-2024-2398.html advisory
- https://access.redhat.com/security/cve/CVE-2024-6119 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2306158 issue
- https://www.cve.org/CVERecord?id=CVE-2024-6119 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-6119 advisory
- https://github.com/openssl/openssl/security/advisories/GHSA-5qrj-vq78-58fj advisory
- https://access.redhat.com/security/cve/CVE-2024-6345 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2297771 issue
- https://www.cve.org/CVERecord?id=CVE-2024-6345 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-6345 advisory
- https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0 advisory
…and 43 more