Red Hat Security Advisory

RHSA-2024:0948

OpenShift Container Platform 4.13.35 security update

Released 2024-02-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.13 podman-3:4.4.1-5.1.rhaos4.13.el8, podman-3:4.4.1-6.1.1.rhaos4.13.el9, podman-catatonit-3:4.4.1-5.1.rhaos4.13.el8 +10

Fixes 1 record

TI-2022-20114 CVE-2022-41723 · GHSA-vvpx-j8f3-3w6h

Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

MEDIUM 46

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04561 Published 2023-02-28 Partial fix · 1.19.6, 1.20.1 +1 CWE-400