TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m
HTTP/2 CONTINUATION flood in net/http
Priority HIGH 81
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
RHSA-2024:3479
Red Hat OpenStack Platform 16.2 director Operator container images security update
Released 2024-05-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenStack Platform 16.2 rhosp-rhel8/osp-director-agent, rhosp-rhel8/osp-director-downloader, rhosp-rhel8/osp-director-operator +1
Fixes 4 records
TI-2023-19273 CVE-2023-37788 · GHSA-4r8x-2p26-976p
goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service (DoS) via unspecified vectors.
Priority HIGH 72
goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service (DoS) via unspecified vectors.
TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
TI-2023-20467 CVE-2023-39326 · GHSA-9f76-wg39-x86h
Denial of service via chunk extensions in net/http
Priority LOW 26
A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body.