Lucene search
RedHatRHSA-2024:0766HistoryFeb 28, 2024 - 8:08 a.m.
(RHSA-2024:0766) Critical: OpenShift Container Platform 4.15.0 security update
2024-02-2808:08:17
access.redhat.com
13
openshift container platform
critical
security update
dos vulnerability
cve-2023-45142
cve-2023-47108
cve-2023-48795
cve-2023-39325
cve-2023-44487
Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
- opentelemetry: DoS vulnerability in otelhttp (CVE-2023-45142)
- opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound
cardinality metrics (CVE-2023-47108) - ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
(CVE-2023-48795)
*golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) (CVE-2023-44487)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s)
listed in the References section.
Related
redhat
redhat
amazon
amazon
Important: amazon-cloudwatch-agent
2024-01-19 01:51:00
Important: golang
2023-10-16 13:45:00
Important: golang
2023-10-16 13:45:00
nessus
nessus
Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2024-498)
2024-01-23 00:00:00
Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2024-2424)
2024-01-23 00:00:00
Oracle Linux 9 : grafana (ELSA-2023-5867)
2023-10-23 00:00:00
ibm
ibm
Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to denial of service due to OpenTelemetry go module ( CVE-2023-45142, CVE-2023-47108 )
2024-03-20 17:49:09
rocky
rocky
toolbox security update
2023-11-11 23:00:15
go-toolset:rhel8 security update
2023-10-24 18:35:47
grafana security update
2023-10-24 18:35:47
oraclelinux
oraclelinux
olcne security update
2023-12-07 00:00:00
olcne security update
2023-12-07 00:00:00
grafana security update
2023-10-20 00:00:00
osv
osv
Traefik vulnerable to HTTP/2 request causing denial of service
2023-10-17 02:37:42
Moderate: toolbox security update
2023-10-24 00:00:00
Moderate: toolbox security update
2023-11-11 23:00:15
almalinux
almalinux
Moderate: grafana security update
2023-10-18 00:00:00
Moderate: grafana security update
2023-10-18 00:00:00
Important: go-toolset:rhel8 security update
2023-10-16 00:00:00
openvas
openvas
openSUSE: Security Advisory for go1.21 (SUSE-SU-2023:4069-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for go1.20 (SUSE-SU-2023:4068-1)
2024-03-04 00:00:00
Fedora: Security Advisory for golang-x-mod (FEDORA-2024-ae653fb07b)
2024-01-18 00:00:00
redhatcve
redhatcve
github
github
Traefik vulnerable to HTTP/2 request causing denial of service
2023-10-17 02:37:42
ubuntucve
ubuntucve
CVE-2023-44487
2023-10-10 00:00:00
CVE-2024-4438
2024-05-08 00:00:00
freebsd
freebsd
traefik -- Resource exhaustion by malicious HTTP/2 client
2023-10-10 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: golang-x-mod-0.14.0-1.fc38
2024-01-18 01:26:30
[SECURITY] Fedora 39 Update: golang-x-mod-0.14.0-1.fc39
2024-01-18 01:47:10
[SECURITY] Fedora 39 Update: golang-1.21.3-1.fc39
2023-11-03 19:02:38
cve
cve
CVE-2024-4438
2024-05-08 09:15:09
CVE-2023-6596
2024-04-25 16:15:10
cvelist
cvelist
cbl_mariner
cbl_mariner
veracode
veracode
Denial Of Service
2023-11-13 11:23:08
prion
prion
Code injection
2023-11-10 19:15:00
Design/Logic Flaw
2023-10-12 17:15:00