Lucene search
RedHatRHSA-2024:2079HistoryApr 29, 2024 - 1:07 a.m.
(RHSA-2024:2079) Important: git-lfs security update
2024-04-2901:07:40
access.redhat.com
5
git-lfs
large file storage
security fix
golang
net/http
continuation frames
dos
cve
cvss score
references
unix
Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.
Security Fix(es):
- golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288,VU#421644.3)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | ppc64le | git-lfs-debuginfo | < 3.2.0-2.el9_3 | git-lfs-debuginfo-3.2.0-2.el9_3.ppc64le.rpm |
| RedHat | 9 | ppc64le | git-lfs-debugsource | < 3.2.0-2.el9_3 | git-lfs-debugsource-3.2.0-2.el9_3.ppc64le.rpm |
| RedHat | 9 | aarch64 | git-lfs | < 3.2.0-2.el9_3 | git-lfs-3.2.0-2.el9_3.aarch64.rpm |
| RedHat | 9 | ppc64le | git-lfs | < 3.2.0-2.el9_3 | git-lfs-3.2.0-2.el9_3.ppc64le.rpm |
| RedHat | 9 | x86_64 | git-lfs-debugsource | < 3.2.0-2.el9_3 | git-lfs-debugsource-3.2.0-2.el9_3.x86_64.rpm |
| RedHat | 9 | s390x | git-lfs-debuginfo | < 3.2.0-2.el9_3 | git-lfs-debuginfo-3.2.0-2.el9_3.s390x.rpm |
| RedHat | 9 | aarch64 | git-lfs-debuginfo | < 3.2.0-2.el9_3 | git-lfs-debuginfo-3.2.0-2.el9_3.aarch64.rpm |
| RedHat | 9 | s390x | git-lfs-debugsource | < 3.2.0-2.el9_3 | git-lfs-debugsource-3.2.0-2.el9_3.s390x.rpm |
| RedHat | 9 | aarch64 | git-lfs-debugsource | < 3.2.0-2.el9_3 | git-lfs-debugsource-3.2.0-2.el9_3.aarch64.rpm |
| RedHat | 9 | x86_64 | git-lfs-debuginfo | < 3.2.0-2.el9_3 | git-lfs-debuginfo-3.2.0-2.el9_3.x86_64.rpm |
Related
nessus
nessus
RHEL 9 : git-lfs (RHSA-2024:2079)
2024-04-29 00:00:00
RHEL 8 / 9 : OpenShift Container Platform 4.15.10 (RHSA-2024:1892)
2024-04-26 00:00:00
RHEL 8 : go-toolset:rhel8 (RHSA-2024:1962)
2024-04-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-45288 affecting package kubevirt for versions less than 0.59.0-16
2024-05-14 05:06:12
CVE-2023-45288 affecting package kubernetes for versions less than 1.28.4-7
2024-05-14 05:06:12
CVE-2023-45288 affecting package moby-engine for versions less than 24.0.9-2
2024-05-06 17:48:02
redhat
redhat
(RHSA-2024:2699) Important: git-lfs security update
2024-05-06 06:31:46
rocky
rocky
git-lfs security update
2024-05-09 18:50:42
go-toolset:rhel8 security update
2024-05-06 13:04:21
git-lfs security update
2024-05-10 14:32:42
ibm
ibm
Security Bulletin: IBM Storage Fusion is vulnerable to denial of service due to Golang Go's net/http and x/net/http2.
2024-05-11 16:53:43
almalinux
almalinux
Important: git-lfs security update
2024-04-29 00:00:00
Important: golang security update
2024-04-23 00:00:00
Important: go-toolset:rhel8 security update
2024-04-23 00:00:00
osv
osv
Important: golang security update
2024-04-23 00:00:00
Important: go-toolset:rhel8 security update
2024-04-23 00:00:00
HTTP/2 CONTINUATION flood in net/http
2024-04-03 21:12:01
freebsd
freebsd
go -- http2: close connections when receiving too many headers
2024-04-03 00:00:00
forgejo -- HTTP/2 CONTINUATION flood in net/http
2024-04-04 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0128)
2024-04-15 00:00:00
openSUSE: Security Advisory for go1.22 (SUSE-SU-2024:1121-1)
2024-04-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1122-1)
2024-05-07 00:00:00
mageia
mageia
Updated golang packages fix security vulnerability
2024-04-13 19:56:38
ubuntucve
ubuntucve
CVE-2023-45288
2024-03-27 00:00:00
nvd
nvd
CVE-2023-45288
2024-04-04 21:15:16
veracode
veracode
Denial Of Service (DOS)
2024-04-05 07:19:44
cvelist
cvelist
CVE-2023-45288 HTTP/2 CONTINUATION flood in net/http
2024-04-04 20:37:30
cve
cve
CVE-2023-45288
2024-04-04 21:15:16
amazon
amazon
Medium: cni-plugins
2024-05-23 22:04:00
Medium: amazon-cloudwatch-agent
2024-05-23 22:04:00
Medium: golist
2024-05-23 22:04:00
redhatcve
redhatcve
CVE-2023-45288
2024-04-03 20:53:54
alpinelinux
alpinelinux
CVE-2023-45288
2024-04-04 21:15:16
github
github
net/http, x/net/http2: close connections when receiving too many headers
2024-04-04 21:30:32
Traefik affected by HTTP/2 CONTINUATION flood in net/http
2024-04-15 18:14:51
oraclelinux
oraclelinux
golang security update
2024-04-23 00:00:00
git-lfs security update
2024-05-08 00:00:00
go-toolset:ol8 security update
2024-04-23 00:00:00
githubexploit
githubexploit
Exploit for CVE-2023-45288
2024-04-06 06:33:45
cgr
cgr
CVE-2023-45288 vulnerabilities
2024-05-19 03:07:16
debiancve
debiancve
CVE-2023-45288
2024-04-04 21:15:16
wolfi
wolfi
CVE-2023-45288 vulnerabilities
2024-06-08 15:21:16
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0589
2024-04-04 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0746
2024-04-04 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0239
2024-04-04 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: kubernetes-1.29.4-1.fc40
2024-04-25 01:01:14
redos
redos
ROS-20240422-05
2024-04-22 00:00:00
arista
arista
Security Advisory 0094
2024-04-05 00:00:00
cert
cert
HTTP/2 CONTINUATION frames can be utilized for DoS attacks
2024-04-03 00:00:00
thn
thn
New HTTP/2 Vulnerability Exposes Web Servers to DoS Attacks
2024-04-04 11:15:00