Lucene search
RedHatRHSA-2023:6156HistoryOct 30, 2023 - 12:22 a.m.
(RHSA-2023:6156) Important: Red Hat OpenShift support for Windows Containers 8.1.0 security update
2023-10-3000:22:22
access.redhat.com
18
red hat openshift
windows containers
security update
golang
kubernetes
cvss score
cve.
Red Hat OpenShift support for Windows Containers allows you to deploy Windows container workloads running on Windows Server nodes.
Security Fix(es):
-
golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325)
-
kubernetes: Bypass of seccomp profile enforcement (CVE-2023-2431)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
ibm
ibm
Security Bulletin: IBM DataPower Gateway vulnerable to HTTP/2 "Rapid Reset" Denial of Service (CVE-2023-44487, CVE-2023-39325)
2023-10-26 17:35:42
redhat
redhat
(RHSA-2023:6787) Important: Network Observability security update
2023-11-08 01:53:14
oraclelinux
oraclelinux
olcne security update
2023-12-07 00:00:00
grafana security update
2023-10-20 00:00:00
grafana security update
2023-10-20 00:00:00
rocky
rocky
go-toolset:rhel8 security update
2023-10-24 18:35:47
toolbox security update
2023-11-11 23:00:15
grafana security update
2023-10-24 18:35:47
nessus
nessus
RHEL 9 : toolbox (RHSA-2023:6057)
2023-10-24 00:00:00
FreeBSD : traefik -- Resource exhaustion by malicious HTTP/2 client (7a1b2624-6a89-11ee-af06-5404a68ad561)
2023-10-14 00:00:00
AlmaLinux 9 : grafana (ALSA-2023:5867)
2023-10-19 00:00:00
redhatcve
redhatcve
osv
osv
Moderate: toolbox security update
2023-10-24 00:00:00
Moderate: toolbox security update
2023-11-11 23:00:15
Traefik vulnerable to HTTP/2 request causing denial of service
2023-10-17 02:37:42
almalinux
almalinux
Important: go-toolset:rhel8 security update
2023-10-16 00:00:00
Moderate: grafana security update
2023-10-18 00:00:00
Moderate: grafana security update
2023-10-18 00:00:00
github
github
Traefik vulnerable to HTTP/2 request causing denial of service
2023-10-17 02:37:42
Kubelet vulnerable to bypass of seccomp profile enforcement
2023-06-16 09:30:24
openvas
openvas
openSUSE: Security Advisory for go1.21 (SUSE-SU-2023:4069-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for go1.20 (SUSE-SU-2023:4068-1)
2024-03-04 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-1082)
2024-01-09 00:00:00
freebsd
freebsd
traefik -- Resource exhaustion by malicious HTTP/2 client
2023-10-10 00:00:00
ubuntucve
ubuntucve
amazon
amazon
Important: golang
2023-10-16 13:45:00
Important: golang
2023-10-16 13:45:00
cve
cve
nvd
nvd
cvelist
cvelist
CVE-2024-4438 Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform
2024-05-08 08:59:42
CVE-2023-6596 Openshift: incomplete fix for rapid reset (cve-2023-44487/cve-2023-39325)
2024-04-25 16:00:24
CVE-2023-2431 Bypass of seccomp profile enforcement
2023-06-16 07:08:33
vulnrichment
vulnrichment
fedora
fedora
[SECURITY] Fedora 37 Update: golang-1.20.10-3.fc37
2023-10-29 01:47:29
[SECURITY] Fedora 39 Update: golang-1.21.3-1.fc39
2023-11-03 19:02:38
[SECURITY] Fedora 38 Update: golang-1.20.10-2.fc38
2023-10-29 01:34:45
veracode
veracode
Profile Enforcement Bypass
2023-06-25 14:21:28
cgr
cgr
CVE-2023-2431 vulnerabilities
2024-05-19 03:07:16
debiancve
debiancve
CVE-2023-2431
2023-06-16 08:15:08
prion
prion
Design/Logic Flaw
2023-06-16 08:15:00