Lucene search
Ubuntu.comUB:CVE-2024-4438HistoryMay 08, 2024 - 12:00 a.m.
CVE-2024-4438
2024-05-0800:00:00
ubuntu.com
ubuntu.com
1
red hat openstack
etcd package
rapid reset
security vulnerabilities
update at compile time
golang.org/x/net/http2
The etcd package distributed with the Red Hat OpenStack platform has an
incomplete fix for CVE-2023-39325/CVE-2023-44487, known as Rapid Reset.
This issue occurs because the etcd package in the Red Hat OpenStack
platform is using http://golang.org/x/net/http2 instead of the one provided
by Red Hat Enterprise Linux versions, meaning it should be updated at
compile time instead.
Notes
| Author | Note |
|---|---|
| rodrigo-zaiden | only affects etcd as distributed in RH OpenStack. |
Related
redhatcve
redhatcve
cve
cve
CVE-2024-4438
2024-05-08 09:15:09
CVE-2023-6596
2024-04-25 16:15:10
cvelist
cvelist
nessus
nessus
RHEL 8 : grafana (RHSA-2023:5864)
2023-10-19 00:00:00
AlmaLinux 8 : go-toolset:rhel8 (ALSA-2023:5721)
2023-10-17 00:00:00
Oracle Linux 7 : conmon (ELSA-2023-13029)
2023-12-08 00:00:00
osv
osv
Traefik vulnerable to HTTP/2 request causing denial of service
2023-10-17 02:37:42
Moderate: toolbox security update
2023-10-24 00:00:00
Moderate: toolbox security update
2023-11-11 23:00:15
redhat
redhat
(RHSA-2023:5679) Important: OpenShift Container Platform 4.12.39 packages and security update
2023-10-18 03:05:37
(RHSA-2023:6077) Moderate: toolbox security update
2023-10-24 12:02:10
almalinux
almalinux
Moderate: grafana security update
2023-10-18 00:00:00
Moderate: grafana security update
2023-10-18 00:00:00
Important: go-toolset:rhel8 security update
2023-10-16 00:00:00
oraclelinux
oraclelinux
olcne security update
2023-12-07 00:00:00
grafana security update
2023-10-20 00:00:00
grafana security update
2023-10-20 00:00:00
openvas
openvas
openSUSE: Security Advisory for go1.21 (SUSE-SU-2023:4069-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for go1.20 (SUSE-SU-2023:4068-1)
2024-03-04 00:00:00
Fedora: Security Advisory for golang (FEDORA-2023-4bf641255e)
2023-10-29 00:00:00
github
github
Traefik vulnerable to HTTP/2 request causing denial of service
2023-10-17 02:37:42
freebsd
freebsd
traefik -- Resource exhaustion by malicious HTTP/2 client
2023-10-10 00:00:00
rocky
rocky
toolbox security update
2023-11-11 23:00:15
go-toolset:rhel8 security update
2023-10-24 18:35:47
grafana security update
2023-10-24 18:35:47
ibm
ibm
Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by Kubernetes API server security vulnerabilities (CVE-2023-39325 and CVE-2023-44487)
2023-11-28 09:53:55
ubuntucve
ubuntucve
CVE-2023-44487
2023-10-10 00:00:00
amazon
amazon
Important: golang
2023-10-16 13:45:00
Important: golang
2023-10-16 13:45:00
fedora
fedora
[SECURITY] Fedora 39 Update: golang-1.21.3-1.fc39
2023-11-03 19:02:38
[SECURITY] Fedora 38 Update: golang-1.20.10-2.fc38
2023-10-29 01:34:45
[SECURITY] Fedora 37 Update: golang-1.20.10-3.fc37
2023-10-29 01:47:29
cbl_mariner
cbl_mariner
CVE-2023-39325 affecting package telegraf for versions less than 1.27.3-3
2024-04-17 22:02:46
CVE-2023-39325 affecting package etcd for versions less than 3.5.6-11
2024-03-22 16:14:52