Red Hat Security Advisory

RHSA-2024:1434

Red Hat OpenShift distributed tracing 3.1.1 operator/operand containers

Released 2024-03-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift distributed tracing 3.1 rhosdt/jaeger-agent-rhel8, rhosdt/jaeger-all-in-one-rhel8, rhosdt/jaeger-collector-rhel8 +16

Fixes 1 record

TI-2023-20467 CVE-2023-39326 · GHSA-9f76-wg39-x86h

Denial of service via chunk extensions in net/http

LOW 26

A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01208 Published 2023-12-06 Partial fix · 1.20.12, 1.21.5