TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m
HTTP/2 CONTINUATION flood in net/http
Priority HIGH 81
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
RHSA-2025:4240
Updated 6.1 container image is now available in the Red Hat Ecosystem Catalog.
Released 2025-04-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 6.1 Tools rhceph/keepalived-rhel9, rhceph/rhceph-6-dashboard-rhel9, rhceph/rhceph-6-rhel9 +3
Fixes 6 records
TI-2024-16306 CVE-2024-24789 · GHSA-236w-p7wf-5ph8
Mishandling of corrupt central directory record in archive/zip
Priority MEDIUM 58
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations.
TI-2024-16307 CVE-2024-24790 · GHSA-49gw-vxvf-fc2g
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
Priority MEDIUM 53
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
TI-2024-22606 CVE-2024-34156 · GHSA-crqm-pwhx-j97f
Stack exhaustion in Decoder.Decode in encoding/gob
Priority MEDIUM 41
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion.
TI-2023-20466 CVE-2023-39325 · GHSA-4374-p667-p6c8
HTTP/2 rapid reset can cause excessive work in net/http
Priority LOW 39
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption.
TI-2024-16305 CVE-2024-24788 · GHSA-2jwv-jmq4-4j3r
Malformed DNS message can cause infinite loop in net
Priority LOW 28
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.