TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m
HTTP/2 CONTINUATION flood in net/http
Priority HIGH 81
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
RHSA-2025:0832
OpenShift Container Platform 4.12.72 bug fix and security update
Released 2025-02-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.12 openshift4/ose-baremetal-machine-controllers, openshift4/ose-nutanix-machine-controllers-rhel8, openshift4/ose-openshift-apiserver-rhel8 +3
Fixes 4 records
TI-2023-20466 CVE-2023-39325 · GHSA-4374-p667-p6c8
HTTP/2 rapid reset can cause excessive work in net/http
Priority LOW 39
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption.
TI-2023-06044 CVE-2023-6597 · GHSA-797f-63wg-8chv
An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions…
Priority LOW 36
An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.
TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63
Non-linear parsing of case-insensitive content in golang.org/x/net/html
Priority LOW 32
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.