Read the docs
TI-2023-24278 Aliases CVE-2023-45288GHSA-4v7x-pqxf-cx7m

HTTP/2 CONTINUATION flood in net/http

Priority HIGH 81CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 70 fixed, 28 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-400.

Summary

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no memory is allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header frames we will process before closing a connection.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.89455 99th percentileScored 2026-11-07
Fix Partial net/http (Go standard library): 1.21.9, 1.22.2golang.org/x/net/http2 (golang.org/x/net): 0.23.0+3 more productsRed Hat: 96 advisoriesRed Hat: 70 fixed, 28 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarynet/httpbefore 1.21.9; 1.22.0-0 to before 1.22.21.21.9, 1.22.2Patch availableCNA
Go standard librarygolang.org/x/net/http2before 0.23.00.23.0Patch availableCNA
—net/http (Go)before 1.21.91.21.9Patch availableGHSA-4v7x-pqxf-cx7m
—golang.org/x/net/http2 (Go)before 0.23.00.23.0Patch availableGHSA-4v7x-pqxf-cx7m
—net/http (Go)1.22.0-0 to before 1.22.21.22.2Patch availableGHSA-4v7x-pqxf-cx7m
—golang.org/x/net (Go)before 0.23.00.23.0Patch availableGHSA-4v7x-pqxf-cx7m
  • net/http VendorGo standard library Affected before 1.21.9; 1.22.0-0 to before 1.22.2 Fixed in 1.21.9, 1.22.2 Patch available CNA
  • golang.org/x/net/http2 VendorGo standard library Affected before 0.23.0 Fixed in 0.23.0 Patch available CNA
  • net/http (Go) Vendor— Affected before 1.21.9 Fixed in 1.21.9 Patch available GHSA-4v7x-pqxf-cx7m
  • golang.org/x/net/http2 (Go) Vendor— Affected before 0.23.0 Fixed in 0.23.0 Patch available GHSA-4v7x-pqxf-cx7m
  • net/http (Go) Vendor— Affected 1.22.0-0 to before 1.22.2 Fixed in 1.22.2 Patch available GHSA-4v7x-pqxf-cx7m
  • golang.org/x/net (Go) Vendor— Affected before 0.23.0 Fixed in 0.23.0 Patch available GHSA-4v7x-pqxf-cx7m

CPE names CISA-ADP · 2

CPEVersionsRoleVendor
cpe:2.3:a:go_standard_library:net\/http:*:*:*:*:*:*:*:*———
cpe:2.3:a:golang:http2:*:*:*:*:*:*:*:*——Go standard library
  • cpe:2.3:a:go_standard_library:net\/http:*:*:*:*:*:*:*:* Versions — — ·—
  • cpe:2.3:a:golang:http2:*:*:*:*:*:*:*:* Versions — — ·Go standard library

Remediation

  • Fix · CNA net/http (Go standard library) Fixed in 1.21.9, 1.22.2
  • Fix · CNA golang.org/x/net/http2 (golang.org/x/net) Fixed in 0.23.0
  • Fix · GHSA-4v7x-pqxf-cx7m net/http (Go) Fixed in 1.21.9 Advisory →
  • Fix · GHSA-4v7x-pqxf-cx7m golang.org/x/net/http2 (Go) Fixed in 0.23.0 Advisory →
  • Fix · GHSA-4v7x-pqxf-cx7m net/http (Go) Fixed in 1.22.2 Advisory →
  • Fix · GHSA-4v7x-pqxf-cx7m golang.org/x/net (Go) Fixed in 0.23.0 Advisory →

Red Hat 96 advisories

  • RHSA-2026:83627 Released 2026-10-15 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.14.40 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.14 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/mcg-cli-rhel9, registry.redhat.io/odf4/mcg-core-rhel9 +15
  • RHSA-2025:15828 Released 2025-09-15 · Red Hat rating Important
    updated web-terminal/tooling container image
    • Red Hat Web Terminal 1.11 on RHEL 9 web-terminal/web-terminal-rhel9-operator, web-terminal/web-terminal-tooling-rhel9
  • RHSA-2025:8274 Released 2025-05-28 · Red Hat rating Important
    Errata Advisory for Red Hat OpenShift GitOps v1.14.4 security update
    • Red Hat OpenShift GitOps 1.14 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/argocd-rhel9 +7
Show 93 more Red Hat advisories
  • RHSA-2025:7753 Released 2025-05-15 · Red Hat rating Important
    Errata Advisory for Red Hat OpenShift GitOps v1.15.2 security update
    • Red Hat OpenShift GitOps 1.15 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-extensions-rhel8, openshift-gitops-1/argocd-rhel8 +7
  • RHSA-2025:4240 Released 2025-04-28 · Red Hat rating Important
    Updated 6.1 container image is now available in the Red Hat Ecosystem Catalog.
    • Red Hat Ceph Storage 6.1 Tools rhceph/keepalived-rhel9, rhceph/rhceph-6-dashboard-rhel9, rhceph/rhceph-6-rhel9 +3
  • RHSA-2024:6122 Released 2025-02-25 · Red Hat rating Important
    OpenShift Container Platform 4.18.1 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/azure-service-rhel9-operator +47
  • RHSA-2025:0832 Released 2025-02-06 · Red Hat rating Important
    OpenShift Container Platform 4.12.72 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-baremetal-machine-controllers, openshift4/ose-nutanix-machine-controllers-rhel8, openshift4/ose-openshift-apiserver-rhel8 +3
  • RHSA-2025:0536 Released 2025-01-21 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.15.0
    • cert-manager operator for Red Hat OpenShift 1.15 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2024:8692 Released 2024-11-07 · Red Hat rating Important
    OpenShift Container Platform 4.12.68 security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2024:8688 Released 2024-11-06 · Red Hat rating Important
    OpenShift Container Platform 4.13.53 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2024:8425 Released 2024-10-31 · Red Hat rating Important
    OpenShift Container Platform 4.15.37 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kube-metrics-server-rhel8 +47
  • RHSA-2024:8235 Released 2024-10-23 · Red Hat rating Important
    OpenShift Container Platform 4.14.39 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-agent-installer-api-server-rhel8, openshift4/ose-cluster-baremetal-operator-rhel8, openshift4/ose-ibm-cloud-controller-manager-rhel8 +5
  • RHSA-2024:7164 Released 2024-09-26 · Red Hat rating Important
    Migration Toolkit for Containers (MTC) 1.8.4 security and bug fix update
    • 8Base-RHMTC-1.8 rhmtc/openshift-migration-controller-rhel8, rhmtc/openshift-migration-registry-rhel8, rhmtc/openshift-migration-ui-rhel8
  • RHSA-2024:6811 Released 2024-09-25 · Red Hat rating Important
    OpenShift Container Platform 4.13.51 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-cluster-openshift-controller-manager-operator, openshift4/ose-hypershift-rhel8, openshift4/ose-openshift-apiserver-rhel8 +1
  • RHSA-2024:6642 Released 2024-09-18 · Red Hat rating Important
    OpenShift Container Platform 4.12.65 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-installer, openshift4/ose-oauth-apiserver-rhel8, rhcos
  • RHSA-2024:6406 Released 2024-09-11 · Red Hat rating Important
    OpenShift Container Platform 4.14.36 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/cloud-network-config-controller-rhel8, openshift4/driver-toolkit-rhel9, openshift4/egress-router-cni-rhel8 +47
  • RHSA-2024:6009 Released 2024-09-04 · Red Hat rating Important
    OpenShift Container Platform 4.13.49 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-coredns, openshift4/ose-installer, openshift4/ose-oauth-apiserver-rhel8 +1
  • RHSA-2024:6004 Released 2024-09-03 · Red Hat rating Important
    OpenShift Container Platform 4.16.10 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-cluster-baremetal-operator-rhel9, openshift4/ose-csi-driver-manila-rhel9, openshift4/ose-hypershift-rhel9 +2
  • RHSA-2024:6221 Released 2024-09-03 · Red Hat rating Critical
    The Red Hat OpenShift Builds 1.1.0 General Availability
    • Builds for Red Hat OpenShift
  • RHSA-2024:4960 Released 2024-08-07 · Red Hat rating Important
    OpenShift Container Platform 4.14.34 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-aws-ebs-csi-driver-rhel8, openshift4/ose-cloud-credential-operator, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8 +6
  • RHSA-2024:5013 Released 2024-08-05 · Red Hat rating Critical
    The Red Hat OpenShift Builds Client 1.1.0 General Availability
    • Builds for Red Hat OpenShift 1.1.1 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator, registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9
  • RHSA-2024:4982 Released 2024-08-01 · Red Hat rating Important
    OpenShift API for Data Protection (OADP) 1.3.3 security and bug fix update
    • 9Base-OADP-1.3 oadp/oadp-mustgather-rhel9, oadp/oadp-rhel9-operator, oadp/oadp-velero-restic-restore-helper-rhel9 +1
  • RHSA-2024:4934 Released 2024-07-31 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) git-lfs-3.2.0-1.el9_2
  • RHSA-2024:4933 Released 2024-07-31 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) git-lfs-2.11.0-2.el8_4.2
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) git-lfs-2.11.0-2.el8_4.2
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) git-lfs-2.11.0-2.el8_4.2
  • RHSA-2024:4699 Released 2024-07-25 · Red Hat rating Important
    OpenShift Container Platform 4.15.23 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-cloud-credential-operator, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8, openshift4/ose-ibm-vpc-block-csi-driver-rhel9 +4
  • RHSA-2024:4677 Released 2024-07-25 · Red Hat rating Important
    OpenShift Container Platform 4.12.61 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/cloud-network-config-controller-rhel8, openshift4/ose-aws-cloud-controller-manager-rhel8, openshift4/ose-operator-lifecycle-manager +1
  • RHSA-2024:4631 Released 2024-07-18 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.15.0 release
    • Red Hat OpenShift Dev Spaces 3 devspaces/configbump-rhel8, devspaces/dashboard-rhel8, devspaces/devspaces-rhel8-operator +4
  • RHSA-2024:4484 Released 2024-07-17 · Red Hat rating Important
    OpenShift Container Platform 4.13.45 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-aws-cloud-controller-manager-rhel8, openshift4/ose-olm-rukpak-rhel8, openshift4/ose-operator-lifecycle-manager +4
  • RHSA-2024:4545 Released 2024-07-15 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) git-lfs-3.2.0-2.el8_8.1
  • RHSA-2024:4546 Released 2024-07-15 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) git-lfs-2.13.3-3.el8_6.1
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) git-lfs-2.13.3-3.el8_6.1
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) git-lfs-2.13.3-3.el8_6.1
  • RHSA-2024:4543 Released 2024-07-15 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) git-lfs-2.13.3-5.el9_0.1
  • RHSA-2024:4464 Released 2024-07-10 · Red Hat rating Low
    Red Hat Advanced Cluster Management 2.10.4 security updates and bug fixes
    • Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 rhacm2/acm-cluster-permission-rhel9, rhacm2/console-rhel9
  • RHSA-2024:3637 Released 2024-07-01 · Red Hat rating Moderate
    Secondary Scheduler Operator for Red Hat OpenShift 1.3.0 for RHEL 9
    • OSSO 1.3 for RHEL 9 openshift-secondary-scheduler-operator/secondary-scheduler-operator-bundle, openshift-secondary-scheduler-operator/secondary-scheduler-rhel9-operator
  • RHSA-2024:1616 Released 2024-07-01 · Red Hat rating Important
    Run Once Duration Override Operator for Red Hat OpenShift 1.1.1 for RHEL 9
    • RODOO 1.1 for RHEL 9 run-once-duration-override-operator/run-once-duration-override-operator-bundle, run-once-duration-override-operator/run-once-duration-override-rhel9, run-once-duration-override-operator/run-once-duration-override-rhel9-operator
  • RHSA-2024:4006 Released 2024-06-27 · Red Hat rating Important
    OpenShift Container Platform 4.12.60 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-cluster-autoscaler-operator, openshift4/ose-console, openshift4/ose-machine-api-operator +2
  • RHSA-2024:4146 Released 2024-06-27 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) golang-1.19.13-7.el9_2, golang-bin-1.19.13-7.el9_2, golang-docs-1.19.13-7.el9_2 +4
  • RHSA-2024:4125 Released 2024-06-26 · Red Hat rating Important
    Red Hat Service Interconnect 1.4.5 Release security update
    • 9Base-Service-Interconnect-1.4 skupper-cli-1.4.5-1.el9
    • Red Hat Service Interconnect 1.4 skupper-cli-1.4.5-1.el8
  • RHSA-2024:4041 Released 2024-06-26 · Red Hat rating Important
    OpenShift Container Platform 4.15.19 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-docker-builder, openshift4/ose-operator-lifecycle-manager-rhel9, openshift4/ose-operator-registry-rhel9 +1
  • RHSA-2024:4010 Released 2024-06-26 · Red Hat rating Important
    OpenShift Container Platform 4.14.31 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-aws-cloud-controller-manager-rhel8, openshift4/ose-olm-rukpak-rhel8, openshift4/ose-operator-lifecycle-manager +4
  • RHSA-2024:4034 Released 2024-06-20 · Red Hat rating Important
    Red Hat Service Interconnect 1.5.4 Release security update (images)
    • Red Hat Service Interconnect 1 service-interconnect/skupper-config-sync-rhel9, service-interconnect/skupper-controller-podman-container-rhel9, service-interconnect/skupper-controller-podman-rhel9 +5
  • RHSA-2024:4023 Released 2024-06-20 · Red Hat rating Important
    Release of openshift-serverless-clients kn 1.33.0 security update & enhancements
    • Red Hat OpenShift Serverless 1.0 openshift-serverless-clients-1.12.0-7.el8
  • RHSA-2024:3885 Released 2024-06-19 · Red Hat rating Important
    OpenShift Container Platform 4.13.44 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-cluster-autoscaler-operator, openshift4/ose-console, openshift4/ose-machine-api-operator
  • RHSA-2024:3889 Released 2024-06-18 · Red Hat rating Important
    OpenShift Container Platform 4.15.18 security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-aws-cloud-controller-manager-rhel9, openshift4/ose-cluster-image-registry-rhel9-operator, openshift4/ose-operator-marketplace-rhel9 +1
  • RHSA-2024:3781 Released 2024-06-10 · Red Hat rating Moderate
    Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.4 for RHEL 8 automation-controller-venv-tower-4.5.7-1.el8ap, automation-hub-4.9.2-1.el8ap, python39-aiohttp-3.9.5-1.el8ap +25
    • Red Hat Ansible Automation Platform 2.4 for RHEL 9 automation-controller-venv-tower-4.5.7-1.el9ap, automation-hub-4.9.2-1.el9ap, python-aiohttp-3.9.5-1.el9ap +25
  • RHSA-2024:3523 Released 2024-06-10 · Red Hat rating Important
    OpenShift Container Platform 4.14.28 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-operator-registry, openshift4/ose-powervs-block-csi-driver-rhel8
  • RHSA-2024:3680 Released 2024-06-06 · Red Hat rating Important
    Red Hat OpenShift Service Mesh Containers for 2.4.8 security update
    • RHOSSM 2.4 for RHEL 8 openshift-service-mesh/prometheus-rhel8
  • RHSA-2024:3621 Released 2024-06-05 · Red Hat rating Important
    Red Hat OpenShift distributed tracing 3.2.0 operator/operand containers update
    • Red Hat OpenShift distributed tracing 3.2 rhosdt/jaeger-agent-rhel8, rhosdt/jaeger-all-in-one-rhel8, rhosdt/jaeger-collector-rhel8 +16
  • RHSA-2024:3331 Released 2024-05-30 · Red Hat rating Important
    OpenShift Container Platform 4.14.27 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-cluster-autoscaler-operator, openshift4/ose-ironic-rhel9, openshift4/ose-machine-api-operator
  • RHSA-2024:3479 Released 2024-05-29 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2 director Operator container images security update
    • Red Hat OpenStack Platform 16.2 rhosp-rhel8/osp-director-agent, rhosp-rhel8/osp-director-downloader, rhosp-rhel8/osp-director-operator +1
  • RHSA-2024:2728 Released 2024-05-29 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1 director Operator container images security update
    • Red Hat OpenStack Platform 17.1 rhosp-rhel9/osp-director-agent, rhosp-rhel9/osp-director-downloader, rhosp-rhel9/osp-director-operator +1
  • RHSA-2024:3327 Released 2024-05-29 · Red Hat rating Important
    OpenShift Container Platform 4.15.15 security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-ironic-rhel9, openshift4/ose-powervs-block-csi-driver-rhel9, openshift4/ose-telemeter-rhel9
  • RHSA-2024:3467 Released 2024-05-29 · Red Hat rating Important
    Red Hat OpenStack Platform 16.1 (etcd) security update
    • Red Hat OpenStack Platform 16.1 etcd-3.3.23-16.el8ost
  • RHSA-2024:3346 Released 2024-05-23 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 8) git-lfs-3.4.1-2.el8_10
  • RHSA-2024:2875 Released 2024-05-23 · Red Hat rating Important
    OpenShift Container Platform 4.13.42 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-aws-pod-identity-webhook-rhel8, openshift4/ose-cloud-credential-operator, openshift4/ose-cluster-etcd-rhel8-operator +3
  • RHSA-2024:3352 Released 2024-05-23 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2 (etcd) security update
    • Red Hat OpenStack Platform 16.2 etcd-3.3.23-16.el8ost
  • RHSA-2024:2901 Released 2024-05-23 · Red Hat rating Low
    Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.12.1-394 Security Update
    • OpenShift Custom Metrics Autoscaler 2 custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel8, custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel8, custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle +2
  • RHSA-2024:2930 Released 2024-05-23 · Red Hat rating Important
    logging for Red Hat OpenShift security update
    • RHOL 5.7 for RHEL 8 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel8-operator, openshift-logging/elasticsearch-operator-bundle +15
  • RHSA-2024:2932 Released 2024-05-23 · Red Hat rating Important
    logging for Red Hat OpenShift security update
    • RHOL 5.8 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/elasticsearch-operator-bundle +14
  • RHSA-2024:2929 Released 2024-05-23 · Red Hat rating Important
    logging for Red Hat OpenShift security update
    • RHOL 5.6 for RHEL 8 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel8-operator, openshift-logging/elasticsearch-operator-bundle +15
  • RHSA-2024:3315 Released 2024-05-23 · Red Hat rating Important
    OpenShift Virtualization 4.13.9 Images security update
    • CNV 4.13 for RHEL 9 container-native-virtualization/hostpath-provisioner-operator-rhel9, container-native-virtualization/hyperconverged-cluster-operator-rhel9, container-native-virtualization/hyperconverged-cluster-webhook-rhel9 +13
  • RHSA-2024:3316 Released 2024-05-23 · Red Hat rating Important
    Migration Toolkit for Applications security and bug fix update
    • MTA 7.0 for RHEL 9 mta/mta-analyzer-addon-rhel9, mta/mta-analyzer-lsp-rhel9, mta/mta-cli-rhel9 +3
  • RHSA-2024:3314 Released 2024-05-23 · Red Hat rating Important
    OpenShift Virtualization 4.15.2 Images security update
    • CNV 4.15 for RHEL 9 container-native-virtualization/aaq-controller-rhel9, container-native-virtualization/aaq-operator-rhel9, container-native-virtualization/aaq-server-rhel9 +47
  • RHSA-2024:2933 Released 2024-05-23 · Red Hat rating Important
    logging for Red Hat OpenShift security update
    • RHOL 5.9 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/eventrouter-rhel9 +9
  • RHSA-2024:2729 Released 2024-05-22 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1 (etcd) security update
    • Red Hat OpenStack Platform 17.1 etcd-3.4.26-8.el9ost
  • RHSA-2024:3259 Released 2024-05-22 · Red Hat rating Important
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.21.2-3.module+el8.10.0+21244+5b2d9000.aarch64::go-toolset:rhel8, delve-1.21.2-3.module+el8.10.0+21244+5b2d9000.ppc64le::go-toolset:rhel8, delve-1.21.2-3.module+el8.10.0+21244+5b2d9000.src::go-toolset:rhel8 +19
  • RHSA-2024:2936 Released 2024-05-21 · Red Hat rating Important
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.src::go-toolset:rhel8, delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64::go-toolset:rhel8, go-toolset-1.19.13-1.module+el8.8.0+20380+7171fefb.aarch64::go-toolset:rhel8 +18
  • RHSA-2024:2935 Released 2024-05-21 · Red Hat rating Important
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) delve-1.7.2-1.module+el8.6.0+12972+ebab5911.src::go-toolset:rhel8, delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64::go-toolset:rhel8, go-toolset-1.17.13-1.module+el8.6.0+21758+c87a29d6.aarch64::go-toolset:rhel8 +18
  • RHSA-2024:2941 Released 2024-05-21 · Red Hat rating Important
    RHACS 4.4 enhancement and security update
    • RHACS 4.4 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-collector-slim-rhel8 +10
  • RHSA-2024:2865 Released 2024-05-21 · Red Hat rating Important
    OpenShift Container Platform 4.15.14 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-aws-pod-identity-webhook-rhel9, openshift4/ose-azure-cloud-node-manager-rhel9, openshift4/ose-azure-cluster-api-controllers-rhel9 +3
  • RHSA-2024:2892 Released 2024-05-20 · Red Hat rating Important
    go-toolset-1.19-golang security update
    • Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7) go-toolset-1.19-golang-1.19.13-7.el7_9, go-toolset-1.19-golang-bin-1.19.13-7.el7_9, go-toolset-1.19-golang-docs-1.19.13-7.el7_9 +4
    • Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7) go-toolset-1.19-golang-1.19.13-7.el7_9, go-toolset-1.19-golang-bin-1.19.13-7.el7_9, go-toolset-1.19-golang-docs-1.19.13-7.el7_9 +4
  • RHSA-2024:2782 Released 2024-05-16 · Red Hat rating Important
    OpenShift Container Platform 4.12.57 security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-cluster-etcd-rhel8-operator, openshift4/ose-cluster-monitoring-operator, openshift4/ose-docker-registry +3
  • RHSA-2024:2773 Released 2024-05-15 · Red Hat rating Important
    OpenShift Container Platform 4.15.13 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-agent-installer-node-agent-rhel9, openshift4/ose-azure-workload-identity-webhook-rhel8, openshift4/ose-cluster-api-rhel9 +3
  • RHSA-2024:2671 Released 2024-05-09 · Red Hat rating Important
    Red Hat build of MicroShift 4.14.24 security update
    • Red Hat OpenShift Container Platform 4.14 microshift-4.14.24-202405021453.p0.g6e3abf7.assembly.4.14.24.el9, microshift-greenboot-4.14.24-202405021453.p0.g6e3abf7.assembly.4.14.24.el9, microshift-networking-4.14.24-202405021453.p0.g6e3abf7.assembly.4.14.24.el9 +2
  • RHSA-2024:2672 Released 2024-05-09 · Red Hat rating Important
    OpenShift Container Platform 4.14.24 packages and security update
    • Red Hat OpenShift Container Platform 4.14 cri-o-1.27.6-2.rhaos4.14.gitb3bd0bf.el8, cri-o-1.27.6-2.rhaos4.14.gitb3bd0bf.el9, openshift-4.14.0-202404301807.p0.gfd36fb9.assembly.stream.el8 +16
  • RHSA-2024:2668 Released 2024-05-09 · Red Hat rating Important
    OpenShift Container Platform 4.14.24 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-cluster-etcd-rhel8-operator, openshift4/ose-docker-registry, openshift4/ose-insights-rhel8-operator +1
  • RHSA-2024:2667 Released 2024-05-09 · Red Hat rating Important
    Red Hat build of MicroShift 4.15.12 security update
    • Red Hat OpenShift Container Platform 4.15 microshift-4.15.12-202405021504.p0.ge0938ef.assembly.4.15.12.el9, microshift-greenboot-4.15.12-202405021504.p0.ge0938ef.assembly.4.15.12.el9, microshift-networking-4.15.12-202405021504.p0.ge0938ef.assembly.4.15.12.el9 +4
  • RHSA-2024:2664 Released 2024-05-09 · Red Hat rating Important
    OpenShift Container Platform 4.15.12 security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-cluster-etcd-rhel9-operator
  • RHSA-2024:2724 Released 2024-05-07 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.4.1-2.el9_4
  • RHSA-2024:2699 Released 2024-05-06 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 8) git-lfs-3.2.0-3.el8_9
  • RHSA-2024:2049 Released 2024-05-02 · Red Hat rating Important
    OpenShift Container Platform 4.13.41 packages and security update
    • Red Hat OpenShift Container Platform 4.13 openshift-4.13.0-202404222036.p0.g4818370.assembly.stream.el8, openshift-4.13.0-202404222036.p0.g4818370.assembly.stream.el9, openshift-hyperkube-4.13.0-202404222036.p0.g4818370.assembly.stream.el8 +18
  • RHSA-2024:2068 Released 2024-05-02 · Red Hat rating Important
    OpenShift Container Platform 4.15.11 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-docker-registry-rhel9, openshift4/ose-insights-rhel9-operator, openshift4/ose-ironic-rhel9
  • RHSA-2024:2625 Released 2024-04-30 · Red Hat rating Important
    rhc-worker-script security and enhancement update
    • Red Hat Enterprise Linux Client (v. 7) rhc-worker-script-0.8-1.el7_9
    • Red Hat Enterprise Linux Server (v. 7) rhc-worker-script-0.8-1.el7_9
    • Red Hat Enterprise Linux Workstation (v. 7) rhc-worker-script-0.8-1.el7_9
  • RHSA-2024:2562 Released 2024-04-30 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.21.9-2.el9_4, golang-1.21.9-2.el9_4, golang-bin-1.21.9-2.el9_4 +4
  • RHSA-2024:2079 Released 2024-04-29 · Red Hat rating Important
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.2.0-2.el9_3
  • RHSA-2024:2088 Released 2024-04-29 · Red Hat rating Important
    Red Hat build of Cryostat security update
    • Cryostat 2 on RHEL 8 cryostat-tech-preview/cryostat-grafana-dashboard-rhel8, cryostat-tech-preview/cryostat-operator-bundle, cryostat-tech-preview/cryostat-reports-rhel8 +3
  • RHSA-2024:1897 Released 2024-04-26 · Red Hat rating Important
    OpenShift Container Platform 4.14.22 packages and security update
    • Red Hat OpenShift Container Platform 4.14 buildah-1:1.29.1-10.4.rhaos4.14.el8, buildah-1:1.29.1-10.4.rhaos4.14.el9, buildah-tests-1:1.29.1-10.4.rhaos4.14.el8 +47
  • RHSA-2024:1892 Released 2024-04-26 · Red Hat rating Important
    OpenShift Container Platform 4.15.10 packages and security update
    • Red Hat OpenShift Container Platform 4.15 openshift-4.15.0-202404151212.p0.g8974577.assembly.stream.el8, openshift-4.15.0-202404151212.p0.g8974577.assembly.stream.el9, openshift-hyperkube-4.15.0-202404151212.p0.g8974577.assembly.stream.el8 +1
  • RHSA-2024:1899 Released 2024-04-26 · Red Hat rating Important
    OpenShift Container Platform 4.12.56 security update
    • Red Hat OpenShift Container Platform 4.12 openshift-4.12.0-202404161006.p0.g054f0ba.assembly.stream.el8, openshift-4.12.0-202404161006.p0.g054f0ba.assembly.stream.el9, openshift-hyperkube-4.12.0-202404161006.p0.g054f0ba.assembly.stream.el8 +1
  • RHSA-2024:2062 Released 2024-04-25 · Red Hat rating Important
    Service Telemetry Framework 1.5.4 security update
    • Service Telemetry Framework 1.5 for RHEL 8 stf/sg-core-rhel8
  • RHSA-2024:2060 Released 2024-04-25 · Red Hat rating Important
    OpenShift Virtualization 4.14.5 Images security update
    • CNV 4.14 for RHEL 9 container-native-virtualization/bridge-marker-rhel9, container-native-virtualization/cluster-network-addons-operator-rhel9, container-native-virtualization/cnv-containernetworking-plugins-rhel9 +41
  • RHSA-2024:1962 Released 2024-04-23 · Red Hat rating Important
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.20.2-1.module+el8.9.0+18926+5193682d.src::go-toolset:rhel8, delve-1.20.2-1.module+el8.9.0+18926+5193682d.x86_64::go-toolset:rhel8, go-toolset-1.20.12-1.module+el8.9.0+21033+5795bdf6.aarch64::go-toolset:rhel8 +17
  • RHSA-2024:1963 Released 2024-04-23 · Red Hat rating Important
    golang security update
    • Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.20.12-4.el9_3, golang-1.20.12-4.el9_3, golang-bin-1.20.12-4.el9_3 +4
  • RHSA-2024:1683 Released 2024-04-08 · Red Hat rating Important
    OpenShift Container Platform 4.13.39 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-hyperkube
  • RHSA-2024:1681 Released 2024-04-08 · Red Hat rating Important
    OpenShift Container Platform 4.14.20 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-hyperkube-rhel9
  • RHSA-2024:1679 Released 2024-04-08 · Red Hat rating Important
    OpenShift Container Platform 4.12.55 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-hyperkube
  • RHSA-2024:1668 Released 2024-04-08 · Red Hat rating Important
    OpenShift Container Platform 4.15.8 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-hyperkube-rhel9

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Cost Management Metrics OperatorAffectedNo fix yet
Fence Agents Remediation OperatorAffectedNo fix planned: Will not fix
Machine Deletion Remediation OperatorAffectedNo fix yet
Migration Toolkit for Applications 6AffectedNo fix planned: Will not fix
Multicluster Engine for KubernetesAffectedNo fix yet
NBDE Tang ServerAffectedNo fix planned: Will not fix
Node HealthCheck OperatorAffectedNo fix planned: Will not fix
Node Maintenance OperatorAffectedNo fix planned: Will not fix
OpenShift Developer Tools and ServicesAffectedNo fix yet
Red Hat 3scale API Management Platform 2AffectedNo fix yet
Red Hat Advanced Cluster Security 3AffectedNo fix planned: Out of support scope
Red Hat Certification Program for Red Hat Enterprise Linux 9AffectedNo fix yet: Fix deferred
Red Hat Certification for Red Hat Enterprise Linux 8AffectedNo fix yet: Fix deferred
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Red Hat OpenShift Container Platform 3.11AffectedNo fix planned: Out of support scope
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform Assisted Installer 1AffectedNo fix yet
Red Hat OpenShift GitOpsAffectedNo fix yet: Fix deferred
Red Hat OpenShift distributed tracing 2AffectedNo fix yet
Red Hat OpenShift on AWSAffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 18.0AffectedNo fix planned: Will not fix
Red Hat Openshift Container Storage 4AffectedNo fix yet
Red Hat Openshift Data Foundation 4AffectedNo fix yet
Red Hat Openshift Sandboxed ContainersAffectedNo fix yet
Red Hat Software CollectionsAffectedNo fix planned: Out of support scope
Red Hat Storage 3AffectedNo fix planned: Out of support scope
Self Node Remediation OperatorAffectedNo fix yet
cert-manager Operator for Red Hat OpenShiftAffectedNo fix yet
8Base-MTV-2.6Fixed—
8Base-RHMTC-1.8Fixed RHSA-2024:7164
9Base-OADP-1.3Fixed RHSA-2024:4982
9Base-Service-Interconnect-1.4Fixed RHSA-2024:4125
Builds for Red Hat OpenShiftFixed RHSA-2024:6221
Builds for Red Hat OpenShift 1.1.1Fixed RHSA-2024:5013
CNV 4.12 for RHEL 8Fixed—
CNV 4.13 for RHEL 9Fixed RHSA-2024:3315
CNV 4.14 for RHEL 9Fixed RHSA-2024:2060
CNV 4.15 for RHEL 9Fixed RHSA-2024:3314
Cryostat 2 on RHEL 8Fixed RHSA-2024:2088
LVMS 4.12 for RHEL 8Fixed—
LVMS 4.13 for RHEL 8Fixed—
LVMS 4.14 for RHEL 9Fixed—
LVMS 4.15 for RHEL 9Fixed—
LVMS 4.16 for RHEL 9Fixed—
MTA 7.0 for RHEL 9Fixed RHSA-2024:3316
OSSO 1.3 for RHEL 9Fixed RHSA-2024:3637
OpenShift Custom Metrics Autoscaler 2Fixed RHSA-2024:2901
OpenShift Pipelines version 1.15 for RHEL 8Fixed—
RHACS 4.4 for RHEL 8Fixed RHSA-2024:2941
RHOL 5.6 for RHEL 8Fixed RHSA-2024:2929
RHOL 5.7 for RHEL 8Fixed RHSA-2024:2930
RHOL 5.8 for RHEL 9Fixed RHSA-2024:2932
RHOL 5.9 for RHEL 9Fixed RHSA-2024:2933
RHOSSM 2.4 for RHEL 8Fixed RHSA-2024:3680
RODOO 1.1 for RHEL 9Fixed RHSA-2024:1616
Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9Fixed RHSA-2024:4464
Red Hat Ansible Automation Platform 2.4 for RHEL 8Fixed RHSA-2024:3781
Red Hat Ansible Automation Platform 2.4 for RHEL 9Fixed RHSA-2024:3781
Red Hat Ceph Storage 5.3 ToolsFixed—
Red Hat Ceph Storage 6.1 ToolsFixed RHSA-2025:4240
Red Hat Ceph Storage 7.1 ToolsFixed—
Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2024:2892
Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2024:2892
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2024:1962, RHSA-2024:2699, RHSA-2024:3259, RHSA-2024:3346
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:1963, RHSA-2024:2079, RHSA-2024:2562, RHSA-2024:2724
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2024:4933
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2024:4546
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2024:4933
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2024:4546
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2024:4543
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2024:2935
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2024:2936, RHSA-2024:4545
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2024:4146, RHSA-2024:4934
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2024:4933
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2024:4546
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2024:2625
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2024:2625
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2024:2625
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2024:1679, RHSA-2024:1899, RHSA-2024:2782, RHSA-2024:4006, RHSA-2024:4677, RHSA-2024:6642, RHSA-2024:8692, RHSA-2025:0832
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2024:1683, RHSA-2024:2049, RHSA-2024:2875, RHSA-2024:3885, RHSA-2024:4484, RHSA-2024:6009, RHSA-2024:6811, RHSA-2024:8688
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2024:1681, RHSA-2024:1897, RHSA-2024:2668, RHSA-2024:2671, RHSA-2024:2672, RHSA-2024:3331, RHSA-2024:3523, RHSA-2024:4010, RHSA-2024:4960, RHSA-2024:6406, RHSA-2024:8235
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2024:1668, RHSA-2024:1892, RHSA-2024:2068, RHSA-2024:2664, RHSA-2024:2667, RHSA-2024:2773, RHSA-2024:2865, RHSA-2024:3327, RHSA-2024:3889, RHSA-2024:4041, RHSA-2024:4699, RHSA-2024:8425
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2024:6004
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2024:6122
Red Hat OpenShift Dev Spaces 3Fixed RHSA-2024:4631
Red Hat OpenShift GitOps 1.14Fixed RHSA-2025:8274
Red Hat OpenShift GitOps 1.15Fixed RHSA-2025:7753
Red Hat OpenShift Serverless 1.0Fixed RHSA-2024:4023
Red Hat OpenShift distributed tracing 3.2Fixed RHSA-2024:3621
Red Hat OpenStack Platform 16.1Fixed RHSA-2024:3467
Red Hat OpenStack Platform 16.2Fixed RHSA-2024:3352, RHSA-2024:3479
Red Hat OpenStack Platform 17.1Fixed RHSA-2024:2728, RHSA-2024:2729
Red Hat Openshift Data Foundation 4.14Fixed RHSA-2026:83627
Red Hat Service Interconnect 1Fixed RHSA-2024:4034
Red Hat Service Interconnect 1.4Fixed RHSA-2024:4125
Red Hat Web Terminal 1.11 on RHEL 9Fixed RHSA-2025:15828
Service Telemetry Framework 1.5 for RHEL 8Fixed RHSA-2024:2062
cert-manager operator for Red Hat OpenShift 1.15Fixed RHSA-2025:0536
Not affected: 26 products
  • 8Base-RHMTC-1.8
  • 9Base-OADP-1.3
  • Builds for Red Hat OpenShift 1.1.1
  • CNV 4.13 for RHEL 9
  • Ironic content for Red Hat OpenShift Container Platform 4.15
  • MTA 7.0 for RHEL 8
  • MTA 7.0 for RHEL 9
  • Network Observability Operator
  • Power monitoring for Red Hat OpenShift
  • RHOSSM 2.4 for RHEL 8
  • Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9
  • Red Hat Ansible Automation Platform 1.2
  • Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux AppStream E4S (v.8.6)
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Dev Spaces 3
  • Red Hat Openshift Data Foundation 4.14
  • Red Hat Quay 3
  • Service Telemetry Framework 1.5 for RHEL 8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-45288
  2. 2026-10-03 Alias added: GHSA-4v7x-pqxf-cx7m
  3. 2026-10-16 Fix available: RHSA-2026:83627 · Red Hat
  4. 2026-10-16 Fix available: Red Hat Openshift Data Foundation 4.14 · Red Hat
  5. 2026-10-30 Fix available: 8Base-MTV-2.6, CNV 4.12 for RHEL 8, LVMS 4.12 for RHEL 8 +3 · Red Hat

References

Advisory 1

Other 12

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2024-16309 Panic when parsing invalid palette-color images in golang.org/x/image CVSS 3.1HIGH 7.5
  • TI-2022-20112 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c CVSS 3.1HIGH 7.5
  • TI-2022-12772 Limited directory traversal vulnerability on Windows in golang.org/x/crypto CVSS 3.1HIGH 7.5
See all 297 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences