VDB
RHSA-2025%3A0029
RHSA-2025%3A0029
PUBLISHED
CVSS 7.5 HIGH
A memory exhaustion flaw was found in the otelgrpc handler of open-telemetry. This flaw may allow a remote unauthenticated attacker to flood the peer address and port and exhaust the server's memory by sending multiple malicious requests, affecting the availability of the system.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-sdn-rhel8@sha256:89133bca5fc3d3384b2bcbcaa942823239c92b14a042a76f15875a17fb037094_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-sdn-rhel8@sha256:89133bca5fc3d3384b2bcbcaa942823239c92b14a042a76f15875a17fb037094_s390x, openshift4/ose-sdn-rhel8@sha256:89133bca5fc3d3384b2bcbcaa942823239c92b14a042a76f15875a17fb037094_s390x |
| Red Hat | openshift4/ose-oauth-apiserver-rhel8@sha256:b1e4e21f08c6549e02fee367b9d462f4ca0f0d88ca20e84d28e493ba3e35dcbc_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-oauth-apiserver-rhel8@sha256:b1e4e21f08c6549e02fee367b9d462f4ca0f0d88ca20e84d28e493ba3e35dcbc_arm64, * |
| Red Hat | openshift4/ose-libvirt-machine-controllers@sha256:dabb7d90d03812002ef35ecaddc411b25a9c681e8d0346198cec33e7560f0199_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-libvirt-machine-controllers@sha256:dabb7d90d03812002ef35ecaddc411b25a9c681e8d0346198cec33e7560f0199_amd64, openshift4/ose-libvirt-machine-controllers@sha256:dabb7d90d03812002ef35ecaddc411b25a9c681e8d0346198cec33e7560f0199_amd64 |
| Red Hat | openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:7cce91f3d3a18a9add13006dcbed6446a3fdc1e4d983d5a5f37bd73023e70eb7_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:7cce91f3d3a18a9add13006dcbed6446a3fdc1e4d983d5a5f37bd73023e70eb7_arm64, openshift4/ose-aws-ebs-csi-driver-rhel8@sha256:7cce91f3d3a18a9add13006dcbed6446a3fdc1e4d983d5a5f37bd73023e70eb7_arm64 |
| Red Hat | openshift4/ose-prom-label-proxy@sha256:3f0f95252d8bd7cd0e15d03e018f17d6d7ff209f963886d3afbea7b6eb94680c_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-prom-label-proxy@sha256:3f0f95252d8bd7cd0e15d03e018f17d6d7ff209f963886d3afbea7b6eb94680c_ppc64le, openshift4/ose-prom-label-proxy@sha256:3f0f95252d8bd7cd0e15d03e018f17d6d7ff209f963886d3afbea7b6eb94680c_ppc64le |
| Red Hat | openshift4/ose-agent-installer-utils-rhel9@sha256:6917e0822b38238365a8d86bfad4fd51613118d401c5033dea7142670aac6c19_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-agent-installer-utils-rhel9@sha256:6917e0822b38238365a8d86bfad4fd51613118d401c5033dea7142670aac6c19_arm64 |
| Red Hat | openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:03b41e319f5f427c08d92530940f707ec7759fef997a35414c8c599eb805ee8e_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:03b41e319f5f427c08d92530940f707ec7759fef997a35414c8c599eb805ee8e_s390x, openshift4/ose-kubevirt-cloud-controller-manager-rhel8@sha256:03b41e319f5f427c08d92530940f707ec7759fef997a35414c8c599eb805ee8e_s390x |
| Red Hat | openshift4/ose-cluster-machine-approver@sha256:9a2c09e1a298705181415490efdaba99126fedd18b25897e1594ce99f702f572_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-machine-approver@sha256:9a2c09e1a298705181415490efdaba99126fedd18b25897e1594ce99f702f572_ppc64le, openshift4/ose-cluster-machine-approver@sha256:9a2c09e1a298705181415490efdaba99126fedd18b25897e1594ce99f702f572_ppc64le |
| Red Hat | openshift4/ose-operator-lifecycle-manager@sha256:b9b08ab801fc476fca2ce21ac5004c93ee00efed67994514dbacb2ad75afe0cc_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-operator-lifecycle-manager@sha256:b9b08ab801fc476fca2ce21ac5004c93ee00efed67994514dbacb2ad75afe0cc_amd64, * |
| Red Hat | openshift4/ose-machine-os-images-rhel8@sha256:0c390998278043da268f94b6b09e22e30188f4b2f4a61d486061af91630449b2_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-machine-os-images-rhel8@sha256:0c390998278043da268f94b6b09e22e30188f4b2f4a61d486061af91630449b2_ppc64le, openshift4/ose-machine-os-images-rhel8@sha256:0c390998278043da268f94b6b09e22e30188f4b2f4a61d486061af91630449b2_ppc64le |
| Red Hat | openshift4/ose-cli@sha256:fc0ffb086136e7568f97e92fd9c5efe1948add08bd2e0c2c1cfe3882956c22a4_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cli@sha256:fc0ffb086136e7568f97e92fd9c5efe1948add08bd2e0c2c1cfe3882956c22a4_amd64, openshift4/ose-cli@sha256:fc0ffb086136e7568f97e92fd9c5efe1948add08bd2e0c2c1cfe3882956c22a4_amd64 |
| Red Hat | openshift4/ose-tools-rhel8@sha256:12ac571c69feda70402bfd6289612e00564ffbe462f366c887da78af5c7d3a82_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-tools-rhel8@sha256:12ac571c69feda70402bfd6289612e00564ffbe462f366c887da78af5c7d3a82_s390x, openshift4/ose-tools-rhel8@sha256:12ac571c69feda70402bfd6289612e00564ffbe462f366c887da78af5c7d3a82_s390x |
| Red Hat | openshift4/ose-libvirt-machine-controllers@sha256:f887fff0d374945c47e4c565f46282780c8af05c9e682ec7cd36f0d7b1b572bd_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-libvirt-machine-controllers@sha256:f887fff0d374945c47e4c565f46282780c8af05c9e682ec7cd36f0d7b1b572bd_s390x, openshift4/ose-libvirt-machine-controllers@sha256:f887fff0d374945c47e4c565f46282780c8af05c9e682ec7cd36f0d7b1b572bd_s390x |
| Red Hat | openshift4/ose-gcp-cluster-api-controllers-rhel8@sha256:85a5deab3048480e3703229e2273a7e32025c1faabeff7bdc4107e30e05d2d9d_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-gcp-cluster-api-controllers-rhel8@sha256:85a5deab3048480e3703229e2273a7e32025c1faabeff7bdc4107e30e05d2d9d_ppc64le, * |
| Red Hat | openshift4/ose-cluster-network-operator@sha256:785785aaf5b49a5cdffca4656f84fbd916f54cb31d303c2bc067bc47adcdc4fa_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cluster-network-operator@sha256:785785aaf5b49a5cdffca4656f84fbd916f54cb31d303c2bc067bc47adcdc4fa_s390x, openshift4/ose-cluster-network-operator@sha256:785785aaf5b49a5cdffca4656f84fbd916f54cb31d303c2bc067bc47adcdc4fa_s390x |
| Red Hat | openshift4/ose-sdn-rhel8@sha256:89133bca5fc3d3384b2bcbcaa942823239c92b14a042a76f15875a17fb037094_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-sdn-rhel8@sha256:89133bca5fc3d3384b2bcbcaa942823239c92b14a042a76f15875a17fb037094_s390x, openshift4/ose-sdn-rhel8@sha256:89133bca5fc3d3384b2bcbcaa942823239c92b14a042a76f15875a17fb037094_s390x |
| Red Hat | openshift4/ose-openstack-cinder-csi-driver-rhel8-operator@sha256:8527bc1d5bdd6dcf44c530747857e53c9b884c7eec8c904ee13e89690a0fcd77_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-openstack-cinder-csi-driver-rhel8-operator@sha256:8527bc1d5bdd6dcf44c530747857e53c9b884c7eec8c904ee13e89690a0fcd77_s390x, openshift4/ose-openstack-cinder-csi-driver-rhel8-operator@sha256:8527bc1d5bdd6dcf44c530747857e53c9b884c7eec8c904ee13e89690a0fcd77_s390x |
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:2536d8d671006fdc2f10d287c7cb4e88e4a2f1abd1da23b13402ff2df6e154c8_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-cluster-image-registry-operator@sha256:2536d8d671006fdc2f10d287c7cb4e88e4a2f1abd1da23b13402ff2df6e154c8_arm64 |
| Red Hat | openshift4/ose-k8s-prometheus-adapter@sha256:81a96692a41580557c1b45de2cdbcd427b1f20cabb26aedac15a5061093794ca_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-k8s-prometheus-adapter@sha256:81a96692a41580557c1b45de2cdbcd427b1f20cabb26aedac15a5061093794ca_arm64, * |
| Red Hat | openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:07bea8a9b6dc37f8764b28cc5772742f1af7c36aaa4ec3ff7ec6b70029a3e8da_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:07bea8a9b6dc37f8764b28cc5772742f1af7c36aaa4ec3ff7ec6b70029a3e8da_amd64 |
…and 1310 more
Timeline
- Jan 9, 2025 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 4, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:0029 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2251198 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2294000 issue
- https://issues.redhat.com/browse/OCPBUGS-39368 advisory
- https://issues.redhat.com/browse/OCPBUGS-45331 advisory
- https://issues.redhat.com/browse/OCPBUGS-45464 advisory
- https://issues.redhat.com/browse/OCPBUGS-46487 advisory
- https://issues.redhat.com/browse/OCPBUGS-46559 advisory
- https://issues.redhat.com/browse/OCPBUGS-46595 advisory
- https://issues.redhat.com/browse/OCPBUGS-47320 advisory
- https://issues.redhat.com/browse/OCPBUGS-47537 advisory
- https://issues.redhat.com/browse/OCPBUGS-47546 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0029.json advisory
- https://access.redhat.com/security/cve/CVE-2023-47108 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-47108 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-47108 advisory
- https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-8pgv-569h-w5rw advisory
- https://access.redhat.com/security/cve/CVE-2024-6104 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-6104 advisory
…and 1 more