RHSA-2023:5976HighCVSS 7.5

Red Hat Security Advisory: Service Telemetry Framework 1.5.2 security update

Published
October 20, 2023
Last Modified
May 23, 2026

🔗 CVE IDs covered (7)

📋 Description

CVE-2022-41724 — golang: crypto/tls: large handshake records may cause panics CVE-2023-24532 — golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results CVE-2023-24534 — golang: net/http, net/textproto: denial of service from excessive memory allocation CVE-2023-29406 — golang: net/http: insufficient sanitization of Host header CVE-2023-29409 — golang: crypto/tls: slow verification of certificate chains containing large RSA keys CVE-2023-39325 — golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) CVE-2023-44487 — HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

🔗 References (11)