What is RHSA-2023:1817?

RHSA-2023:1817 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Network observability 1.2.0 for Openshift

Which CVE IDs does RHSA-2023:1817 cover?

RHSA-2023:1817 covers the following CVE IDs: CVE-2022-41717, CVE-2022-41724, CVE-2022-41725. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2023:1817?

RHSA-2023:1817 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2023:1817?

RHSA-2023:1817 affects 6 products, including: NETOBSERV 1.2 for RHEL 9; network-observability/network-observability-console-plugin-rhel9@sha256:9841f72ea873e85c91a4ac05c286c9c708c362c7a984753d6c7664a454df1cf3_amd64 as a component of NETOBSERV 1.2 for RHEL 9; network-observability/network-observability-ebpf-agent-rhel9@sha256:93ad940d2d50b01302a3f9af32895caa5cdd6623b50a963629dcf653e374a610_amd64 as a component of NETOBSERV 1.2 for RHEL 9; network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7a4c88957e6bf8a590c348c83485403c5f675aeb5d7350b9e2c9c4a2a08f8fab_amd64 as a component of NETOBSERV 1.2 for RHEL 9; network-observability/network-observability-operator-bundle@sha256:9ba226d0207edd7c9173333647353d3a7a0b5bfc32feb60ca5749dd6dc190c28_amd64 as a component of NETOBSERV 1.2 for RHEL 9; and others — see the full list on the advisory page.

RHSA-2023:1817MediumCVSS 7.5

Red Hat Security Advisory: Network observability 1.2.0 for Openshift

Vendor

Red Hat Product Security

Published

April 18, 2023

Last Modified

September 15, 2026

🔗 CVE IDs covered (3)

CVE-2022-41717 →CVE-2022-41724 →CVE-2022-41725 →

📋 Description

CVE-2022-41717 — golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests CVE-2022-41724 — golang: crypto/tls: large handshake records may cause panics CVE-2022-41725 — golang: net/http, mime/multipart: denial of service from excessive resource consumption

🎯 Affected products6

NETOBSERV 1.2 for RHEL 9
network-observability/network-observability-console-plugin-rhel9@sha256:9841f72ea873e85c91a4ac05c286c9c708c362c7a984753d6c7664a454df1cf3_amd64 as a component of NETOBSERV 1.2 for RHEL 9
network-observability/network-observability-ebpf-agent-rhel9@sha256:93ad940d2d50b01302a3f9af32895caa5cdd6623b50a963629dcf653e374a610_amd64 as a component of NETOBSERV 1.2 for RHEL 9
network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:7a4c88957e6bf8a590c348c83485403c5f675aeb5d7350b9e2c9c4a2a08f8fab_amd64 as a component of NETOBSERV 1.2 for RHEL 9
network-observability/network-observability-operator-bundle@sha256:9ba226d0207edd7c9173333647353d3a7a0b5bfc32feb60ca5749dd6dc190c28_amd64 as a component of NETOBSERV 1.2 for RHEL 9
network-observability/network-observability-rhel9-operator@sha256:b52ce219650214e89e00dfbf092b0d3f3d9c16e2d9ffcf6e67a3b57ae21c3082_amd64 as a component of NETOBSERV 1.2 for RHEL 9

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 CVE IDs covered (3)

📋 Description

🎯 Affected products6

✅ Remediation

🔗 References (22)