Important: Red Hat Security Advisory: Network Observability security update

🗓️ 20 Oct 2023 16:49:58Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 53 Views

Security update for golang and HTTP/2 server

Reporter	Title	Published	Views	Family All 4017
vulnersOsv	com.atlan:package-toolkit-testing (>=5.3.1 <=6.1.2), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv5 (>=2.6.0 <=2.8.0) +827 more potentially affected by CVE-2023-44487 via org.eclipse.jetty.http2:jetty-http2-common (>=12.0.0 <=12.0.19)	10 Oct 202321:28	–	vulnersosv
vulnersOsv	com.ericsson.research.trap.transports:wshttp-server-netty (=1.4.2), com.github.kristofa:brave-grpc (>=3.6.0 <=3.7.0) +95 more potentially affected by CVE-2023-44487 via io.netty:netty-codec-http2 (>=4.1.0.Beta4 <=4.1.0.Final)	10 Oct 202322:22	–	vulnersosv
vulnersOsv	ai.mantik:bridge-protocol_2.13 (>=0.4.0 <=0.4.0-rc1), ai.mantik:componently_2.13 (>=0.4.0 <=0.4.0-rc1) +858 more potentially affected by CVE-2023-44487 via com.typesafe.akka:akka-http-core_2.13 (>=10.1.8 <=10.5.2)	10 Oct 202321:28	–	vulnersosv
vulnersOsv	com.atlan:package-toolkit-testing (>=5.3.1 <=6.1.2), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv5 (>=2.6.0 <=2.8.0) +705 more potentially affected by CVE-2023-44487 via org.eclipse.jetty.http2:jetty-http2-server (>=12.0.0 <=12.0.19)	10 Oct 202321:28	–	vulnersosv
vulnersOsv	ai.agnos:reactive-sparql_2.12 (>=0.3.0 <=0.3.1), ai.lum:odinson-rest-api_2.12 (>=0.2.0 <=0.5.0) +1253 more potentially affected by CVE-2023-44487 via com.typesafe.akka:akka-http-core_2.12 (>=10.0.0-RC2 <=10.5.2)	10 Oct 202321:28	–	vulnersosv
Vulnrichment	CVE-2023-29406 Insufficient sanitization of Host header in net/http	11 Jul 202319:23	–	vulnrichment
Vulnrichment	CVE-2023-29409 Large RSA keys can cause high CPU usage in crypto/tls	2 Aug 202319:47	–	vulnrichment
Vulnrichment	CVE-2023-39318 Improper handling of HTML-like comments in script contexts in html/template	8 Sep 202316:13	–	vulnrichment
Vulnrichment	CVE-2023-39319 Improper handling of special tags within script contexts in html/template	8 Sep 202316:13	–	vulnrichment
Vulnrichment	CVE-2023-39321 Panic when processing post-handshake message on QUIC connections in crypto/tls	8 Sep 202316:13	–	vulnrichment

Source	Link
access	www.access.redhat.com/security/updates/classification/
access	www.access.redhat.com/security/vulnerabilities/RHSB-2023-003
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

13 Aug 2026 22:36Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

EPSS0.99999

SSVC

golang http/2 security update ddos attack cve-2023-44487 cve-2023-39325 cve-2023-29406 cve-2023-29409 cve-2023-39318 cve-2023-39319 cve-2023-39321 cve-2023-39322