TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m
HTTP/2 CONTINUATION flood in net/http
Priority HIGH 81
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
RHSA-2024:6004
OpenShift Container Platform 4.16.10 bug fix and security update
Released 2024-09-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.16 openshift4/ose-cluster-baremetal-operator-rhel9, openshift4/ose-csi-driver-manila-rhel9, openshift4/ose-hypershift-rhel9 +2
Fixes 7 records
TI-2024-16306 CVE-2024-24789 · GHSA-236w-p7wf-5ph8
Mishandling of corrupt central directory record in archive/zip
Priority MEDIUM 58
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations.
TI-2024-03796 CVE-2024-4076 · GHSA-gfw8-mh94-9w58
Assertion failure when serving both stale cache data and authoritative zone content
Priority MEDIUM 43
Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure.
TI-2024-01838 CVE-2024-1975 · GHSA-xv2w-3fww-7hvf
SIG(0) can be used to exhaust CPU resources
Priority MEDIUM 43
If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of…
TI-2024-01615 CVE-2024-1737 · GHSA-9xxq-vvgh-v3r9
BIND's database will be slow if a very large number of RRs exist at the same name
Priority MEDIUM 43
Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling…
TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
Priority MEDIUM 41
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.
TI-2024-05657 CVE-2024-6104 · GHSA-v6v8-xj6m-xwqh
go-retryablehttp can leak basic auth credentials to log files
Priority LOW 27
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.