Lucene search
GoogleOSV:ALSA-2023:5863HistoryOct 18, 2023 - 12:00 a.m.
Moderate: grafana security update
2023-10-1800:00:00
Google
osv.dev
8
grafana
open source
metrics dashboard
graph editor
graphite
influxdb
opentsdb
golang
net/http
http/2
ddos attack
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.
Security Fix(es):
- grafana: golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325)
- HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
A AlmaLinux Security Bulletin which addresses further details about this flaw is available in the References section.
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
nessus
nessus
Oracle Linux 9 : grafana (ELSA-2023-5867)
2023-10-23 00:00:00
AlmaLinux 9 : grafana (ALSA-2023:5867)
2023-10-19 00:00:00
redhat
redhat
(RHSA-2023:6788) Important: Red Hat OpenShift GitOps security update
2023-11-08 02:03:11
(RHSA-2023:7699) Important: Red Hat OpenShift Pipelines Client tkn for 1.10.6 release and security update
2023-12-07 14:19:13
(RHSA-2023:5867) Moderate: grafana security update
2023-10-18 21:59:20
oraclelinux
oraclelinux
olcne security update
2023-12-07 00:00:00
olcne security update
2023-12-07 00:00:00
conmon security update
2023-12-19 00:00:00
ibm
ibm
Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes API server security vulnerabilities (CVE-2023-39325 and CVE-2023-44487)
2023-12-08 09:00:02
rocky
rocky
toolbox security update
2023-11-11 23:00:15
go-toolset:rhel8 security update
2023-10-24 18:35:47
grafana security update
2023-10-24 18:35:47
almalinux
almalinux
Moderate: grafana security update
2023-10-18 00:00:00
Moderate: grafana security update
2023-10-18 00:00:00
Important: go-toolset:rhel8 security update
2023-10-16 00:00:00
openvas
openvas
openSUSE: Security Advisory for go1.21 (SUSE-SU-2023:4069-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for go1.20 (SUSE-SU-2023:4068-1)
2024-03-04 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-1082)
2024-01-09 00:00:00
osv
osv
Traefik vulnerable to HTTP/2 request causing denial of service
2023-10-17 02:37:42
Moderate: grafana security update
2023-10-24 18:35:47
Moderate: grafana security update
2023-10-18 00:00:00
ubuntucve
ubuntucve
CVE-2023-44487
2023-10-10 00:00:00
CVE-2024-4438
2024-05-08 00:00:00
redhatcve
redhatcve
github
github
Traefik vulnerable to HTTP/2 request causing denial of service
2023-10-17 02:37:42
freebsd
freebsd
traefik -- Resource exhaustion by malicious HTTP/2 client
2023-10-10 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: golang-1.21.3-1.fc39
2023-11-03 19:02:38
[SECURITY] Fedora 38 Update: golang-1.20.10-2.fc38
2023-10-29 01:34:45
[SECURITY] Fedora 37 Update: golang-1.20.10-3.fc37
2023-10-29 01:47:29
amazon
amazon
Important: golang
2023-10-16 13:45:00
Important: golang
2023-10-16 13:45:00
cve
cve
CVE-2024-4438
2024-05-08 09:15:09
CVE-2023-6596
2024-04-25 16:15:10
cvelist
cvelist
cbl_mariner
cbl_mariner
prion
prion
Design/Logic Flaw
2023-10-11 22:15:00