VDB
RHSA-2025%3A15332
RHSA-2025%3A15332
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang.org/x/net/html. This flaw allows an attacker to craft input to the parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This issue can cause a denial of service.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-cluster-image-registry-operator@sha256:f56d7d06fe837507b368bd1ae6432cd753aaf51dd667e4320cb6e0421f28a5ea_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-cluster-image-registry-operator@sha256:f56d7d06fe837507b368bd1ae6432cd753aaf51dd667e4320cb6e0421f28a5ea_amd64, registry.redhat.io/openshift4/ose-cluster-image-registry-operator@sha256:f56d7d06fe837507b368bd1ae6432cd753aaf51dd667e4320cb6e0421f28a5ea_amd64, registry.redhat.io/openshift4/ose-cluster-image-registry-operator@sha256:f56d7d06fe837507b368bd1ae6432cd753aaf51dd667e4320cb6e0421f28a5ea_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-capi-operator-container-rhel8@sha256:a766265fed08cd1e0dff2da0b17247bb21dbcab5620ac7863ddead41ac192f13_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-cluster-capi-operator-container-rhel8@sha256:a766265fed08cd1e0dff2da0b17247bb21dbcab5620ac7863ddead41ac192f13_amd64, registry.redhat.io/openshift4/ose-cluster-capi-operator-container-rhel8@sha256:a766265fed08cd1e0dff2da0b17247bb21dbcab5620ac7863ddead41ac192f13_amd64, registry.redhat.io/openshift4/ose-cluster-capi-operator-container-rhel8@sha256:a766265fed08cd1e0dff2da0b17247bb21dbcab5620ac7863ddead41ac192f13_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel8@sha256:76180e067fef5b08d9ae32eefb38f3ccdf7178eafd3a258d0cfa90eee68c2c82_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel8@sha256:76180e067fef5b08d9ae32eefb38f3ccdf7178eafd3a258d0cfa90eee68c2c82_amd64, registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel8@sha256:76180e067fef5b08d9ae32eefb38f3ccdf7178eafd3a258d0cfa90eee68c2c82_amd64, registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel8@sha256:76180e067fef5b08d9ae32eefb38f3ccdf7178eafd3a258d0cfa90eee68c2c82_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-ibm-cloud-controller-manager-rhel8@sha256:b816945718eee717f164b6121ab523c42a1ffbee52692ff018ff80d7f040d59b_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, registry.redhat.io/openshift4/ose-ibm-cloud-controller-manager-rhel8@sha256:b816945718eee717f164b6121ab523c42a1ffbee52692ff018ff80d7f040d59b_amd64, registry.redhat.io/openshift4/ose-ibm-cloud-controller-manager-rhel8@sha256:b816945718eee717f164b6121ab523c42a1ffbee52692ff018ff80d7f040d59b_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:fa7d0e8254dfef1898d0716f5cc741ca581e171157742986bb0f2cd3475fa504_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:fa7d0e8254dfef1898d0716f5cc741ca581e171157742986bb0f2cd3475fa504_amd64, registry.redhat.io/openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:fa7d0e8254dfef1898d0716f5cc741ca581e171157742986bb0f2cd3475fa504_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-keepalived-ipfailover@sha256:7255b94a2c8f360f6604da25b4b8f201c7e67fb3b615046485b23cc1c7bbe206_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:5d778000fffc8379540d1777bb0a68c5ec58b29f4b132622f5ca67ffef93e67c_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, registry.redhat.io/openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:5d778000fffc8379540d1777bb0a68c5ec58b29f4b132622f5ca67ffef93e67c_amd64, registry.redhat.io/openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:5d778000fffc8379540d1777bb0a68c5ec58b29f4b132622f5ca67ffef93e67c_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:5884ae0f98c101457a107be27ee3f3f91213888173a6ec6580986097e1a2a42d_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, registry.redhat.io/openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:5884ae0f98c101457a107be27ee3f3f91213888173a6ec6580986097e1a2a42d_amd64, registry.redhat.io/openshift4/ose-azure-file-csi-driver-operator-rhel8@sha256:5884ae0f98c101457a107be27ee3f3f91213888173a6ec6580986097e1a2a42d_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cli@sha256:df31d6a075c6cedfdb5408f4d78ed4639af4a1d7439e7e522baf645862f2c277_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, registry.redhat.io/openshift4/ose-cli@sha256:df31d6a075c6cedfdb5408f4d78ed4639af4a1d7439e7e522baf645862f2c277_amd64, registry.redhat.io/openshift4/ose-cli@sha256:df31d6a075c6cedfdb5408f4d78ed4639af4a1d7439e7e522baf645862f2c277_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-ibm-vpc-node-label-updater-rhel8@sha256:6270ae546257918fe84e5aa42be8ca0db8363ca0ca5219687bf05a0b532d596e_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, registry.redhat.io/openshift4/ose-ibm-vpc-node-label-updater-rhel8@sha256:6270ae546257918fe84e5aa42be8ca0db8363ca0ca5219687bf05a0b532d596e_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-storage-operator@sha256:89ef901f34d0591fa193f634536c47a8d3f66e1f2fe3aabdd64e228c88a5227c_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, registry.redhat.io/openshift4/ose-cluster-storage-operator@sha256:89ef901f34d0591fa193f634536c47a8d3f66e1f2fe3aabdd64e228c88a5227c_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-openshift-controller-manager-operator@sha256:d254dc0767a6edb8b9f2999cd907054151d83f4b96f8b0ef9833223be5c71aeb_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, registry.redhat.io/openshift4/ose-cluster-openshift-controller-manager-operator@sha256:d254dc0767a6edb8b9f2999cd907054151d83f4b96f8b0ef9833223be5c71aeb_amd64 |
| Red Hat | registry.redhat.io/openshift4/driver-toolkit-rhel8@sha256:9f5e17d8432fbeb0f1e7b1acac68a6407d6205a6c7d6a943f6c9b196beac4e9c_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, registry.redhat.io/openshift4/driver-toolkit-rhel8@sha256:9f5e17d8432fbeb0f1e7b1acac68a6407d6205a6c7d6a943f6c9b196beac4e9c_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-policy-controller-rhel8@sha256:37370c3b631d15c3fca40f1898804a7aef7a122b83ca80def93e05cdfacc06b4_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-cluster-policy-controller-rhel8@sha256:37370c3b631d15c3fca40f1898804a7aef7a122b83ca80def93e05cdfacc06b4_amd64, registry.redhat.io/openshift4/ose-cluster-policy-controller-rhel8@sha256:37370c3b631d15c3fca40f1898804a7aef7a122b83ca80def93e05cdfacc06b4_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-ibmcloud-cluster-api-controllers-rhel8@sha256:3337f1a1e0a3c2cd4d7b2959629a820edd6a10628a8e7d0c8b530a113e5456c6_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-ibmcloud-cluster-api-controllers-rhel8@sha256:3337f1a1e0a3c2cd4d7b2959629a820edd6a10628a8e7d0c8b530a113e5456c6_amd64, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-openshift-controller-manager-rhel8@sha256:85eeb87f0fb3d12e6aba82a575e40ab8016692428ccc24ff02e5e5ed803bf11d_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-openshift-controller-manager-rhel8@sha256:85eeb87f0fb3d12e6aba82a575e40ab8016692428ccc24ff02e5e5ed803bf11d_amd64, registry.redhat.io/openshift4/ose-openshift-controller-manager-rhel8@sha256:85eeb87f0fb3d12e6aba82a575e40ab8016692428ccc24ff02e5e5ed803bf11d_amd64, registry.redhat.io/openshift4/ose-openshift-controller-manager-rhel8@sha256:85eeb87f0fb3d12e6aba82a575e40ab8016692428ccc24ff02e5e5ed803bf11d_amd64 |
| Red Hat | registry.redhat.io/openshift4/ovirt-csi-driver-rhel8-operator@sha256:78ad1ba41573fc9e40e28d695826b7d89b53fd25ebdaf74fdbbfd744a3f7b4eb_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ovirt-csi-driver-rhel8-operator@sha256:78ad1ba41573fc9e40e28d695826b7d89b53fd25ebdaf74fdbbfd744a3f7b4eb_amd64, *, registry.redhat.io/openshift4/ovirt-csi-driver-rhel8-operator@sha256:78ad1ba41573fc9e40e28d695826b7d89b53fd25ebdaf74fdbbfd744a3f7b4eb_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-tests@sha256:63329033a70d4fcbc7442aed30b4945235e62164363ee696db0864322b286483_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-tests@sha256:63329033a70d4fcbc7442aed30b4945235e62164363ee696db0864322b286483_amd64, registry.redhat.io/openshift4/ose-tests@sha256:63329033a70d4fcbc7442aed30b4945235e62164363ee696db0864322b286483_amd64, registry.redhat.io/openshift4/ose-tests@sha256:63329033a70d4fcbc7442aed30b4945235e62164363ee696db0864322b286483_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-platform-operators-manager-rhel8@sha256:a6fbdc56f55d0f5f08bc237c417b853866bfbe23183680528175512b356c8b78_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-scheduler-operator@sha256:c9901c150d3a3ee55afa44a931a4794a5fb2e54bba35c495831caf301676ed3f_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-cluster-kube-scheduler-operator@sha256:c9901c150d3a3ee55afa44a931a4794a5fb2e54bba35c495831caf301676ed3f_amd64, registry.redhat.io/openshift4/ose-cluster-kube-scheduler-operator@sha256:c9901c150d3a3ee55afa44a931a4794a5fb2e54bba35c495831caf301676ed3f_amd64, registry.redhat.io/openshift4/ose-cluster-kube-scheduler-operator@sha256:c9901c150d3a3ee55afa44a931a4794a5fb2e54bba35c495831caf301676ed3f_amd64 |
…and 360 more
Timeline
- Sep 11, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jul 19, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:15332 advisory
- https://access.redhat.com/security/cve/CVE-2024-45338 advisory
- https://access.redhat.com/security/cve/CVE-2024-45339 advisory
- https://access.redhat.com/security/cve/CVE-2025-30204 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15332.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2333122 issue
- https://www.cve.org/CVERecord?id=CVE-2024-45338 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45338 advisory
- https://go.dev/cl/637536 advisory
- https://go.dev/issue/70906 advisory
- https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ advisory
- https://pkg.go.dev/vuln/GO-2024-3333 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2342463 issue
- https://www.cve.org/CVERecord?id=CVE-2024-45339 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45339 advisory
- https://github.com/golang/glog/pull/74 advisory
- https://github.com/golang/glog/pull/74/commits/b8741656e406e66d6992bc2c9575e460ecaa0ec2 advisory
- https://groups.google.com/g/golang-announce/c/H-Q4ouHWyKs advisory
- https://owasp.org/www-community/vulnerabilities/Insecure_Temporary_File advisory
…and 7 more