VDB

RHSA-2024:4034

RHSA-2024:4034 PUBLISHED CVSS 7.5 HIGH

A vulnerability was discovered with the implementation of the HTTP/2 protocol in the Go programming language. There were insufficient limitations on the amount of CONTINUATION frames sent within a single stream. An attacker could potentially exploit this to cause a Denial of Service (DoS) attack.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatservice-interconnect/skupper-service-controller-rhel9@sha256:958aa99f850af72491ae40ff3252923cfd638307e6f3af54b34c38fd70286459_arm64 as a component of Red Hat Service Interconnect 1*
Red Hatservice-interconnect/skupper-controller-podman-container-rhel9@sha256:b32e96d024cd877c3501b338e9d20218218359ebdf88b3e0745c59b38bdcc268_arm64 as a component of Red Hat Service Interconnect 1*
Red Hatservice-interconnect/skupper-config-sync-rhel9@sha256:f4073ebfafda5d847abb3b4429e35ece7107866dead94ec5a90c009905105352_amd64 as a component of Red Hat Service Interconnect 1service-interconnect/skupper-config-sync-rhel9@sha256:f4073ebfafda5d847abb3b4429e35ece7107866dead94ec5a90c009905105352_amd64, *
Red Hatservice-interconnect/skupper-service-controller-rhel9@sha256:0a38f9096db65c7f2abc64749d34ee2277d46e0d037e0a40e89c2d39cc5be7f0_ppc64le as a component of Red Hat Service Interconnect 1service-interconnect/skupper-service-controller-rhel9@sha256:0a38f9096db65c7f2abc64749d34ee2277d46e0d037e0a40e89c2d39cc5be7f0_ppc64le, service-interconnect/skupper-service-controller-rhel9@sha256:0a38f9096db65c7f2abc64749d34ee2277d46e0d037e0a40e89c2d39cc5be7f0_ppc64le
Red Hatservice-interconnect/skupper-controller-podman-rhel9@sha256:b32e96d024cd877c3501b338e9d20218218359ebdf88b3e0745c59b38bdcc268_arm64 as a component of Red Hat Service Interconnect 1service-interconnect/skupper-controller-podman-rhel9@sha256:b32e96d024cd877c3501b338e9d20218218359ebdf88b3e0745c59b38bdcc268_arm64, *
Red Hatservice-interconnect/skupper-flow-collector-rhel9@sha256:ec468a0f7e21c47f1a092deb64f330490a45751991336cd97473dced366afd75_arm64 as a component of Red Hat Service Interconnect 1*
Red Hatservice-interconnect/skupper-controller-podman-container-rhel9@sha256:ce560444ad40e6cf92fa446cb8a50b081b91c292e0588965c42e86476b39a23f_amd64 as a component of Red Hat Service Interconnect 1service-interconnect/skupper-controller-podman-container-rhel9@sha256:ce560444ad40e6cf92fa446cb8a50b081b91c292e0588965c42e86476b39a23f_amd64, service-interconnect/skupper-controller-podman-container-rhel9@sha256:ce560444ad40e6cf92fa446cb8a50b081b91c292e0588965c42e86476b39a23f_amd64
Red Hatservice-interconnect/skupper-flow-collector-rhel9@sha256:f5bc6ca008d1429b187b7283167c610c670ffb41168bc63a86a8ca7b6d9d9fe7_amd64 as a component of Red Hat Service Interconnect 1*
Red Hatservice-interconnect/skupper-config-sync-rhel9@sha256:7417dd94c72f697b0194ec3430aefcd53074c5c353b210298b7012f5b35511da_arm64 as a component of Red Hat Service Interconnect 1*
Red Hatservice-interconnect/skupper-flow-collector-rhel9@sha256:127780faef70d6015eff3c3ba0a108fa26ba18b1794e5b60c8ee2bb696ae4232_s390x as a component of Red Hat Service Interconnect 1*
Red Hatservice-interconnect/skupper-site-controller-rhel9@sha256:b06235b32b81d24d40761b358eff2db65a7f18db8cdee7c099b8833ad66a2fcd_s390x as a component of Red Hat Service Interconnect 1*, service-interconnect/skupper-site-controller-rhel9@sha256:b06235b32b81d24d40761b358eff2db65a7f18db8cdee7c099b8833ad66a2fcd_s390x
Red Hatservice-interconnect/skupper-controller-podman-rhel9@sha256:1971d75601f7495ecb0375f3547f5ac718466ac8bcbe13d0eb3b30ce4db75b3d_ppc64le as a component of Red Hat Service Interconnect 1*, service-interconnect/skupper-controller-podman-rhel9@sha256:1971d75601f7495ecb0375f3547f5ac718466ac8bcbe13d0eb3b30ce4db75b3d_ppc64le
Red Hatservice-interconnect/skupper-controller-podman-rhel9@sha256:ce560444ad40e6cf92fa446cb8a50b081b91c292e0588965c42e86476b39a23f_amd64 as a component of Red Hat Service Interconnect 1service-interconnect/skupper-controller-podman-rhel9@sha256:ce560444ad40e6cf92fa446cb8a50b081b91c292e0588965c42e86476b39a23f_amd64, service-interconnect/skupper-controller-podman-rhel9@sha256:ce560444ad40e6cf92fa446cb8a50b081b91c292e0588965c42e86476b39a23f_amd64
Red Hatservice-interconnect/skupper-router-rhel9@sha256:c77ee9fafbbfb708007d93616aa853379db2af25e23c49ebf3ce703ff4b23f28_arm64 as a component of Red Hat Service Interconnect 1*
Red Hatservice-interconnect/skupper-controller-podman-container-rhel9@sha256:2f76950fa9874ba93b437d218c7eb4923871072e29c51fe057cda5589e3dde0a_s390x as a component of Red Hat Service Interconnect 1service-interconnect/skupper-controller-podman-container-rhel9@sha256:2f76950fa9874ba93b437d218c7eb4923871072e29c51fe057cda5589e3dde0a_s390x, service-interconnect/skupper-controller-podman-container-rhel9@sha256:2f76950fa9874ba93b437d218c7eb4923871072e29c51fe057cda5589e3dde0a_s390x
Red Hatservice-interconnect/skupper-config-sync-rhel9@sha256:f4073ebfafda5d847abb3b4429e35ece7107866dead94ec5a90c009905105352_amd64 as a component of Red Hat Service Interconnect 1*
Red Hatservice-interconnect/skupper-operator-bundle@sha256:1149aa94f8b90f5d3465be98b5987e87aa98360a52d2feb5f1db440652a11173_arm64 as a component of Red Hat Service Interconnect 1*
Red Hatservice-interconnect/skupper-controller-podman-rhel9@sha256:ce560444ad40e6cf92fa446cb8a50b081b91c292e0588965c42e86476b39a23f_amd64 as a component of Red Hat Service Interconnect 1*
Red Hatservice-interconnect/skupper-service-controller-rhel9@sha256:9af0f0a5d3778297728506b779b638a185e129e74876a1a57efef522b0b7c38b_amd64 as a component of Red Hat Service Interconnect 1service-interconnect/skupper-service-controller-rhel9@sha256:9af0f0a5d3778297728506b779b638a185e129e74876a1a57efef522b0b7c38b_amd64, service-interconnect/skupper-service-controller-rhel9@sha256:9af0f0a5d3778297728506b779b638a185e129e74876a1a57efef522b0b7c38b_amd64
Red Hatservice-interconnect/skupper-controller-podman-container-rhel9@sha256:2f76950fa9874ba93b437d218c7eb4923871072e29c51fe057cda5589e3dde0a_s390x as a component of Red Hat Service Interconnect 1*

…and 37 more

Timeline

  • Jun 20, 2024 CVE Published
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 29, 2026 Distribution Patch
  • Apr 29, 2026 Security Advisory
  • Aug 4, 2026 CVE Updated
  • Aug 4, 2026 Distribution Patch
  • Aug 4, 2026 Security Advisory

References

…and 3 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›