TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m
HTTP/2 CONTINUATION flood in net/http
Priority HIGH 81
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
RHSA-2024:4982
OpenShift API for Data Protection (OADP) 1.3.3 security and bug fix update
Released 2024-08-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- 9Base-OADP-1.3 oadp/oadp-mustgather-rhel9, oadp/oadp-rhel9-operator, oadp/oadp-velero-restic-restore-helper-rhel9 +1
Fixes 4 records
TI-2024-16306 CVE-2024-24789 · GHSA-236w-p7wf-5ph8
Mishandling of corrupt central directory record in archive/zip
Priority MEDIUM 58
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations.
TI-2024-16307 CVE-2024-24790 · GHSA-49gw-vxvf-fc2g
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
Priority MEDIUM 53
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
TI-2024-16305 CVE-2024-24788 · GHSA-2jwv-jmq4-4j3r
Malformed DNS message can cause infinite loop in net
Priority LOW 28
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.