VDB
RHSA-2025%3A1116
RHSA-2025%3A1116
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-csi-external-resizer-rhel8@sha256:0747dd7cee97ad696084eb5a7c0467a95178f328f0f900a6783da880e1bcf807_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-csi-external-resizer-rhel8@sha256:0747dd7cee97ad696084eb5a7c0467a95178f328f0f900a6783da880e1bcf807_amd64, openshift4/ose-csi-external-resizer-rhel8@sha256:0747dd7cee97ad696084eb5a7c0467a95178f328f0f900a6783da880e1bcf807_amd64 |
| Red Hat | openshift4/ose-coredns@sha256:b36678dfb3015791c6f21db9bb2a0b84d572ad92a8a69147f2de0afac3e4edd1_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-coredns@sha256:b36678dfb3015791c6f21db9bb2a0b84d572ad92a8a69147f2de0afac3e4edd1_amd64, openshift4/ose-coredns@sha256:b36678dfb3015791c6f21db9bb2a0b84d572ad92a8a69147f2de0afac3e4edd1_amd64, openshift4/ose-coredns@sha256:b36678dfb3015791c6f21db9bb2a0b84d572ad92a8a69147f2de0afac3e4edd1_amd64 |
| Red Hat | openshift4/ose-gcp-cluster-api-controllers-rhel8@sha256:5c9001a4d60404203433d883a2b14985db3a08337889e530e70aeaa10a752a28_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-gcp-cluster-api-controllers-rhel8@sha256:5c9001a4d60404203433d883a2b14985db3a08337889e530e70aeaa10a752a28_amd64, openshift4/ose-gcp-cluster-api-controllers-rhel8@sha256:5c9001a4d60404203433d883a2b14985db3a08337889e530e70aeaa10a752a28_amd64, openshift4/ose-gcp-cluster-api-controllers-rhel8@sha256:5c9001a4d60404203433d883a2b14985db3a08337889e530e70aeaa10a752a28_amd64 |
| Red Hat | openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:37c6a80c6fe301dd03511caafa97f6e94d31ccdf3e92de231358edac727d7398_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:37c6a80c6fe301dd03511caafa97f6e94d31ccdf3e92de231358edac727d7398_amd64, openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:37c6a80c6fe301dd03511caafa97f6e94d31ccdf3e92de231358edac727d7398_amd64, openshift4/ose-azure-cluster-api-controllers-rhel8@sha256:37c6a80c6fe301dd03511caafa97f6e94d31ccdf3e92de231358edac727d7398_amd64 |
| Red Hat | openshift4/ose-cluster-autoscaler@sha256:6cea6b99a7d38a6e4b9b3294c14b33cfe2f2435c48df52c1ff6a25e7ca2e2d2a_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-cluster-autoscaler@sha256:6cea6b99a7d38a6e4b9b3294c14b33cfe2f2435c48df52c1ff6a25e7ca2e2d2a_amd64 |
| Red Hat | openshift4/ose-machine-api-provider-gcp-rhel8@sha256:2f9b4fb1f2e0ead680151fb356742f57a2c5a890c486c5a6ead2bc6ab937cca0_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-machine-api-provider-gcp-rhel8@sha256:2f9b4fb1f2e0ead680151fb356742f57a2c5a890c486c5a6ead2bc6ab937cca0_amd64, openshift4/ose-machine-api-provider-gcp-rhel8@sha256:2f9b4fb1f2e0ead680151fb356742f57a2c5a890c486c5a6ead2bc6ab937cca0_amd64, openshift4/ose-machine-api-provider-gcp-rhel8@sha256:2f9b4fb1f2e0ead680151fb356742f57a2c5a890c486c5a6ead2bc6ab937cca0_amd64 |
| Red Hat | openshift4/ose-cluster-capi-operator-container-rhel8@sha256:87b1811953fac075ca64c5bcec36bb50cdde8762a7adf008f3325823b935d32b_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-capi-operator-container-rhel8@sha256:87b1811953fac075ca64c5bcec36bb50cdde8762a7adf008f3325823b935d32b_amd64, openshift4/ose-cluster-capi-operator-container-rhel8@sha256:87b1811953fac075ca64c5bcec36bb50cdde8762a7adf008f3325823b935d32b_amd64, openshift4/ose-cluster-capi-operator-container-rhel8@sha256:87b1811953fac075ca64c5bcec36bb50cdde8762a7adf008f3325823b935d32b_amd64 |
| Red Hat | openshift4/ose-csi-snapshot-controller-rhel8@sha256:01d660b90f3d93a679f9aa1bdedbd84e450ac25e7acda355410b04382902c0f9_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-csi-snapshot-controller-rhel8@sha256:01d660b90f3d93a679f9aa1bdedbd84e450ac25e7acda355410b04382902c0f9_amd64 |
| Red Hat | openshift4/ose-powervs-block-csi-driver-operator-rhel8@sha256:4284fc2890ae27aaa31f19dcd94ca30484ccf9b81069dd33d6e9a3fe24ccf1c0_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-powervs-block-csi-driver-operator-rhel8@sha256:4284fc2890ae27aaa31f19dcd94ca30484ccf9b81069dd33d6e9a3fe24ccf1c0_amd64, *, * |
| Red Hat | openshift4/ose-prometheus-node-exporter@sha256:dea80b915c6fdfc9ae8e675a6dc8539605a5927673fbf6fe0bb45f6c6e47b83c_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-prometheus-node-exporter@sha256:dea80b915c6fdfc9ae8e675a6dc8539605a5927673fbf6fe0bb45f6c6e47b83c_amd64, *, openshift4/ose-prometheus-node-exporter@sha256:dea80b915c6fdfc9ae8e675a6dc8539605a5927673fbf6fe0bb45f6c6e47b83c_amd64 |
| Red Hat | openshift4/ose-vsphere-csi-driver-operator-rhel8@sha256:f5d4d4262a4c93368761b35272b4c75666a1ab7b56c1c5da53cb02d7cedebfa8_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-vsphere-csi-driver-operator-rhel8@sha256:f5d4d4262a4c93368761b35272b4c75666a1ab7b56c1c5da53cb02d7cedebfa8_amd64, openshift4/ose-vsphere-csi-driver-operator-rhel8@sha256:f5d4d4262a4c93368761b35272b4c75666a1ab7b56c1c5da53cb02d7cedebfa8_amd64, openshift4/ose-vsphere-csi-driver-operator-rhel8@sha256:f5d4d4262a4c93368761b35272b4c75666a1ab7b56c1c5da53cb02d7cedebfa8_amd64 |
| Red Hat | openshift4/ose-cluster-storage-operator@sha256:f35704532bc345f2fc30f97ca47fef836bbce5847681d4506fabced7df328fef_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/egress-router-cni-rhel8@sha256:19b3940761f20eb04015204d4d78ced736d0c23ef41d88e9f0b2420ab22d2ea6_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/egress-router-cni-rhel8@sha256:19b3940761f20eb04015204d4d78ced736d0c23ef41d88e9f0b2420ab22d2ea6_amd64, openshift4/egress-router-cni-rhel8@sha256:19b3940761f20eb04015204d4d78ced736d0c23ef41d88e9f0b2420ab22d2ea6_amd64, openshift4/egress-router-cni-rhel8@sha256:19b3940761f20eb04015204d4d78ced736d0c23ef41d88e9f0b2420ab22d2ea6_amd64 |
| Red Hat | openshift4/ose-csi-external-attacher@sha256:88a6353014bfefc9e647600c42124a9d7b4bf205169f80663b76242d21b205a3_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-csi-external-attacher@sha256:88a6353014bfefc9e647600c42124a9d7b4bf205169f80663b76242d21b205a3_amd64 |
| Red Hat | openshift4/ose-k8s-prometheus-adapter@sha256:85c2827a41eb7fa4f2b7bd83a3b8f3eb8384ff2505573d397accd5515f1f4858_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-k8s-prometheus-adapter@sha256:85c2827a41eb7fa4f2b7bd83a3b8f3eb8384ff2505573d397accd5515f1f4858_amd64, *, * |
| Red Hat | openshift4/ose-kuryr-controller-rhel8@sha256:a9f3b8ce47719b47416a5605edd771bcf67cad374f9f99609283a2b8219dd1b3_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-kuryr-controller-rhel8@sha256:a9f3b8ce47719b47416a5605edd771bcf67cad374f9f99609283a2b8219dd1b3_amd64, openshift4/ose-kuryr-controller-rhel8@sha256:a9f3b8ce47719b47416a5605edd771bcf67cad374f9f99609283a2b8219dd1b3_amd64, openshift4/ose-kuryr-controller-rhel8@sha256:a9f3b8ce47719b47416a5605edd771bcf67cad374f9f99609283a2b8219dd1b3_amd64 |
| Red Hat | openshift4/egress-router-cni-rhel8@sha256:19b3940761f20eb04015204d4d78ced736d0c23ef41d88e9f0b2420ab22d2ea6_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/egress-router-cni-rhel8@sha256:19b3940761f20eb04015204d4d78ced736d0c23ef41d88e9f0b2420ab22d2ea6_amd64, *, openshift4/egress-router-cni-rhel8@sha256:19b3940761f20eb04015204d4d78ced736d0c23ef41d88e9f0b2420ab22d2ea6_amd64 |
| Red Hat | openshift4/ose-hypershift-rhel8@sha256:df258d8b75d83ddc4e2e97071628d3d22fc4a52a7abaf17ca83cb1e5ca12af16_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-hypershift-rhel8@sha256:df258d8b75d83ddc4e2e97071628d3d22fc4a52a7abaf17ca83cb1e5ca12af16_amd64, openshift4/ose-hypershift-rhel8@sha256:df258d8b75d83ddc4e2e97071628d3d22fc4a52a7abaf17ca83cb1e5ca12af16_amd64, openshift4/ose-hypershift-rhel8@sha256:df258d8b75d83ddc4e2e97071628d3d22fc4a52a7abaf17ca83cb1e5ca12af16_amd64 |
| Red Hat | openshift4/ose-csi-driver-shared-resource-rhel8@sha256:05ac77993399b10a4429ed80853658c03b9d3c255be0ca2dd709c19a7ff8d6c6_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-csi-driver-shared-resource-rhel8@sha256:05ac77993399b10a4429ed80853658c03b9d3c255be0ca2dd709c19a7ff8d6c6_amd64, openshift4/ose-csi-driver-shared-resource-rhel8@sha256:05ac77993399b10a4429ed80853658c03b9d3c255be0ca2dd709c19a7ff8d6c6_amd64, openshift4/ose-csi-driver-shared-resource-rhel8@sha256:05ac77993399b10a4429ed80853658c03b9d3c255be0ca2dd709c19a7ff8d6c6_amd64 |
| Red Hat | openshift4/ose-csi-external-provisioner@sha256:5d6a320392d84c9421b75d7cfe353a94ea0f5d98d32a39c8c098b53e493c75e6_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, openshift4/ose-csi-external-provisioner@sha256:5d6a320392d84c9421b75d7cfe353a94ea0f5d98d32a39c8c098b53e493c75e6_amd64 |
…and 367 more
Timeline
- Feb 13, 2025 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Jul 19, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:1116 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2178358 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2276518 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2294000 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2333122 issue
- https://issues.redhat.com/browse/OCPBUGS-44356 advisory
- https://issues.redhat.com/browse/OCPBUGS-45332 advisory
- https://issues.redhat.com/browse/OCPBUGS-47507 advisory
- https://issues.redhat.com/browse/OCPBUGS-47540 advisory
- https://issues.redhat.com/browse/OCPBUGS-47632 advisory
- https://issues.redhat.com/browse/OCPBUGS-48259 advisory
- https://issues.redhat.com/browse/OCPBUGS-48547 advisory
- https://issues.redhat.com/browse/OCPBUGS-48559 advisory
- https://issues.redhat.com/browse/OCPBUGS-48655 advisory
- https://issues.redhat.com/browse/OCPBUGS-48656 advisory
- https://issues.redhat.com/browse/OCPBUGS-48836 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1116.json advisory
…and 30 more