Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2024:0694
HistoryFeb 07, 2024 - 6:43 p.m.

(RHSA-2024:0694) Moderate: Logging Subsystem 5.7.11 - Red Hat OpenShift

2024-02-0718:43:19
access.redhat.com
20
red hat openshift
logging subsystem
security fix
golang
denial of service
resource consumption
http requests
cve-2023-39326

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

20.4%

JSON

Logging Subsystem 5.7.11 - Red Hat OpenShift

Security Fix(es):

  • golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Related

nessus 41
osv 98
openvas 6
redhat 12
cve 1
amazon 2
ibm 6
cbl_mariner 3
cvelist 1
oraclelinux 13
cgr 1
alpinelinux 1
nvd 1
ubuntucve 1
redhatcve 1
wolfi 1
prion 1
debiancve 1
veracode 1
almalinux 6
fedora 1
nessus
nessus
EulerOS 2.0 SP9 : golang (EulerOS-SA-2024-1174)
2024-02-08 00:00:00
AlmaLinux 9 : skopeo (ALSA-2024:1149)
2024-03-07 00:00:00
Oracle Linux 7 : conmon (ELSA-2024-12189)
2024-03-01 00:00:00
osv
osv
CGA-23mh-fhf7-gfm6
2024-06-06 12:09:01
CGA-wc3x-8j8r-8x3j
2024-06-06 12:26:29
CGA-6cvv-2j3x-wphx
2024-06-06 12:23:07
openvas
openvas
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-1174)
2024-02-09 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-1194)
2024-02-09 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-1335)
2024-03-13 00:00:00
redhat
redhat
(RHSA-2024:0695) Moderate: Logging 5.6.16 - Red Hat OpenShift
2024-02-07 22:47:56
(RHSA-2024:1149) Moderate: skopeo security update
2024-03-05 15:32:30
(RHSA-2024:1244) Moderate: rhc-worker-script security update
2024-03-11 15:52:47
cve
cve
CVE-2023-39326
2023-12-06 17:15:07
amazon
amazon
Medium: cni-plugins
2024-05-09 19:16:00
Medium: golist
2024-05-23 22:04:00
ibm
ibm
Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to remote attack due to golang compiler ( CVE-2023-39326 )
2024-04-11 21:22:19
Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to Golang Go Information disclosure vulnerabilitiy.(CVE-2023-39326)
2024-06-21 15:03:12
Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to Golang Go Information disclosure vulnerabilitiy.(CVE-2023-39326)
2024-06-21 15:10:44
cbl_mariner
cbl_mariner
CVE-2023-39326 affecting package golang for versions less than 1.21.6-1
2024-07-13 09:08:52
CVE-2023-39326 affecting package golang for versions less than 1.21.5-1
2024-09-19 09:11:58
CVE-2023-39326 affecting package msft-golang for versions less than 1.21.5-1
2024-09-19 09:11:58
cvelist
cvelist
CVE-2023-39326 Denial of service via chunk extensions in net/http
2023-12-06 16:27:53
oraclelinux
oraclelinux
conmon security update
2024-03-01 00:00:00
olcne security update
2024-04-02 00:00:00
conmon security update
2024-03-01 00:00:00
cgr
cgr
CVE-2023-39326 vulnerabilities
2024-05-19 03:07:16
alpinelinux
alpinelinux
CVE-2023-39326
2023-12-06 17:15:07
nvd
nvd
CVE-2023-39326
2023-12-06 17:15:07
ubuntucve
ubuntucve
CVE-2023-39326
2023-12-06 00:00:00
redhatcve
redhatcve
CVE-2023-39326
2023-12-07 12:35:00
wolfi
wolfi
CVE-2023-39326 vulnerabilities
2024-09-19 09:11:50
prion
prion
Design/Logic Flaw
2023-12-06 17:15:00
debiancve
debiancve
CVE-2023-39326
2023-12-06 17:15:07
veracode
veracode
Denial Of Service (DoS)
2023-12-12 07:10:29
almalinux
almalinux
Moderate: skopeo security update
2024-03-05 00:00:00
Moderate: buildah security update
2024-04-30 00:00:00
Moderate: containernetworking-plugins security update
2024-04-30 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: golang-1.21.6-1.fc39
2024-01-20 03:24:19

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

20.4%

JSON
Related for RHSA-2024:0694
nessus41osv98openvas6redhat12cve1amazon2ibm6cbl_mariner3cvelist1oraclelinux13cgr1alpinelinux1nvd1ubuntucve1redhatcve1wolfi1prion1debiancve1veracode1almalinux6fedora1